Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BlOjzyleiYt3M66uiiaBnyHyPOY.roa
File: BlOjzyleiYt3M66uiiaBnyHyPOY.roa (raw, json)
Hash identifier: uwqOuwoISohGqFOgjH+10d4ipPl5seLMqa8btSr7/DA=
Subject key identifier: 06:53:A3:CF:29:5E:89:8B:77:33:AE:AE:8A:26:81:9F:21:F2:3C:E6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8E07298BA55FA9364491978C4F480690
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BlOjzyleiYt3M66uiiaBnyHyPOY.roa
Signing time: Thu 02 Nov 2023 03:15:15 +0000
ROA not before: Thu 02 Nov 2023 03:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8e:07:29:8b:a5:5f:a9:36:44:91:97:8c:4f:48:06:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 03:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0653a3cf295e898b7733aeae8a26819f21f23ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:11:53:74:c3:0f:46:62:d1:f2:d9:3e:b7:
81:26:3c:a4:f8:8a:22:91:cf:73:75:bd:e0:a0:2c:
f7:2a:1b:18:0b:9c:f7:23:09:41:07:d2:68:ba:bc:
b8:7d:7a:8f:39:06:dc:c4:eb:0e:d5:da:10:a0:b7:
04:9d:1e:93:8e:be:81:a0:b9:c5:40:8e:2e:07:45:
ff:1f:c7:43:d5:73:ab:27:69:25:56:3e:04:01:9f:
85:26:28:c0:87:5b:92:3c:40:15:4b:06:d3:a3:5c:
4f:fe:55:e2:93:fc:9e:f7:a1:41:7f:6c:1f:c5:09:
97:9d:6a:4e:38:f9:fb:52:bc:5f:f6:51:2d:f1:07:
ca:9b:c0:a5:3d:46:1d:7c:a0:1c:37:06:87:9d:6a:
5a:f8:33:d4:96:d7:ed:0f:e0:9c:03:f1:c6:cb:fc:
f9:73:39:49:c4:ec:f7:87:b6:bc:ac:db:bc:c5:96:
6d:60:7f:93:94:ba:90:9e:17:27:3e:38:af:ab:d2:
f6:2c:05:97:11:a3:86:21:a4:83:92:98:96:dd:ee:
89:0f:e1:73:ac:8d:83:63:37:fa:31:be:9d:e2:1c:
ba:72:22:8b:73:ec:59:56:c1:e9:4f:06:d5:bb:5c:
67:16:16:15:8d:c7:39:e1:2a:53:c4:e3:14:32:03:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:53:A3:CF:29:5E:89:8B:77:33:AE:AE:8A:26:81:9F:21:F2:3C:E6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BlOjzyleiYt3M66uiiaBnyHyPOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ce:bc:e4:b7:7d:a6:3b:e2:ef:4d:05:38:c2:db:ed:15:bf:95:
da:64:f1:15:0a:1d:e3:f9:7c:31:05:c7:5d:09:b0:e6:f8:6d:
b5:b2:37:52:9d:48:d2:a6:f3:09:23:ec:34:37:f2:43:93:73:
2d:c2:be:a0:25:0d:ed:03:dd:dc:18:f3:a0:3e:0a:c0:e8:42:
a8:43:69:e8:0f:e5:07:1e:6d:d6:d0:de:fd:50:bb:e7:e6:d6:
07:26:2b:a3:8a:c1:21:2d:c4:ef:89:90:cf:86:20:f0:77:32:
70:79:94:d7:7b:31:61:36:70:86:04:3c:db:f7:08:b5:2e:04:
1f:1a:02:68:ef:87:9a:74:df:4b:de:6f:0b:9e:f9:6d:1d:cb:
62:00:e9:1f:cc:2b:89:0d:fa:01:53:3f:c5:1b:d0:f0:0e:13:
38:11:7b:da:f9:fe:c0:9d:c4:eb:c2:93:92:6c:4e:63:c6:a7:
34:a2:7e:8a:c0:34:80:e5:a4:45:78:96:d0:5f:88:33:ab:14:
8f:d9:07:a8:80:89:5b:b0:01:98:6d:a1:10:8c:99:14:ac:95:
e7:ef:d5:21:d5:1c:bd:83:a8:e8:8b:dd:05:61:22:18:86:29:
36:70:d7:6d:aa:a0:52:a0:54:8d:ab:f9:cb:9e:57:31:44:10:
42:69:51:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:21:08 2025 by rpki-client