Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/B3rjsusw9ZSyKT6-ZUbyGSs4Aok.roa
File: B3rjsusw9ZSyKT6-ZUbyGSs4Aok.roa (raw, json)
Hash identifier: /ZfAG0/2wOXUchBXTqcHt/Nnyr3hVNprbQpGcVLok4k=
Subject key identifier: 07:7A:E3:B2:EB:30:F5:94:B2:29:3E:BE:65:46:F2:19:2B:38:02:89
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF427F68B8A1CBFA2BFFC12A33153BBE2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/B3rjsusw9ZSyKT6-ZUbyGSs4Aok.roa
Signing time: Tue 21 Nov 2023 23:12:21 +0000
ROA not before: Tue 21 Nov 2023 23:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f4:27:f6:8b:8a:1c:bf:a2:bf:fc:12:a3:31:53:bb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 23:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=077ae3b2eb30f594b2293ebe6546f2192b380289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4b:28:2e:25:e7:8d:dd:7f:a4:37:d3:5d:49:
90:e4:fc:fd:34:36:1f:20:43:5c:e7:69:76:21:42:
91:b4:cc:59:65:0a:ea:71:e5:55:f8:a8:89:83:0a:
fa:3c:f9:32:f4:fe:79:d5:f3:8e:32:49:50:b5:ce:
00:b9:81:39:8d:5e:1c:d2:25:c9:a2:c2:f8:c4:78:
0c:4a:d2:d6:1b:5b:77:77:81:b4:d0:27:43:8d:86:
d3:ef:50:c8:c6:f1:0b:b5:6f:52:dd:fd:64:c9:d7:
11:5d:95:30:67:cf:21:c7:f8:a1:ec:c1:f7:f8:ed:
c0:20:7e:a6:ed:e4:75:ca:67:d0:a7:9e:65:5c:df:
1c:f4:88:ec:c7:aa:45:2b:26:ee:cc:7d:fb:34:c4:
7f:32:10:57:ad:81:42:34:01:03:a3:94:1f:85:14:
82:7c:91:de:db:bc:8d:c6:3a:ae:97:0a:7f:0a:08:
7b:4a:8e:9e:a5:30:fa:98:c1:85:09:f1:69:91:08:
6d:36:9a:1e:01:fb:ff:f4:ef:e8:08:66:28:82:00:
ae:51:23:f0:e4:15:b3:5c:cc:1d:92:23:88:c4:f1:
86:e3:38:ce:5e:78:1d:fe:02:1f:67:bd:d4:7e:54:
7f:cd:29:2a:2e:7c:2f:b6:b1:0b:e2:63:d7:18:cf:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7A:E3:B2:EB:30:F5:94:B2:29:3E:BE:65:46:F2:19:2B:38:02:89
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/B3rjsusw9ZSyKT6-ZUbyGSs4Aok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:0a:14:90:a2:df:06:34:c4:e7:6f:23:ec:17:3c:f8:71:eb:
16:99:87:19:b0:83:9c:8d:4e:bd:79:db:6f:2a:bb:52:0a:e3:
4c:e0:8b:cd:31:11:4a:35:23:2f:07:1d:a2:59:95:c2:f7:9b:
db:cb:97:22:19:66:c1:0d:d9:50:68:17:d3:3e:2f:2a:13:f7:
2c:44:6b:da:05:21:97:a3:99:85:26:1e:5f:0b:84:50:ae:8e:
9e:7c:9d:72:3e:b4:25:b7:70:ed:74:0f:18:4e:cc:cd:b2:c8:
9b:52:06:6b:c3:5e:89:c6:81:cd:31:db:22:8b:05:88:ff:c4:
d8:f8:d2:dd:e1:65:70:8d:7e:5c:aa:ce:79:f7:07:37:bf:cd:
a6:74:96:82:e3:b4:8b:cc:b6:91:3b:36:53:65:fc:2f:bd:e6:
7c:71:ef:ef:bc:b4:6f:d4:81:d7:9b:40:e1:17:d3:69:63:89:
27:89:eb:b2:4c:c1:9a:26:af:59:28:1f:2d:6a:8e:be:5f:ae:
49:31:ad:7f:e1:7a:19:d2:23:78:d9:6d:0a:0f:f6:8a:81:10:
da:84:ec:ce:b8:ff:27:cc:d0:ee:ba:fb:d1:57:d8:0d:53:e1:
1b:fd:3e:1e:72:a9:ca:f9:40:5c:fb:3c:8a:1e:d2:6d:de:6e:
38:0b:45:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:25:41 2025 by rpki-client