Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CjWx0zpOduy83cFWDMlZh6QE09I.roa
File: CjWx0zpOduy83cFWDMlZh6QE09I.roa (raw, json)
Hash identifier: ypw4HkyTChSsbc2NhccQvFqvqk78MYR9gNfdhGVmRlg=
Subject key identifier: 0A:35:B1:D3:3A:4E:76:EC:BC:DD:C1:56:0C:C9:59:87:A4:04:D3:D2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB246A91268B9B0A572BD0F9CE9180BB7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CjWx0zpOduy83cFWDMlZh6QE09I.roa
Signing time: Thu 09 Nov 2023 04:10:57 +0000
ROA not before: Thu 09 Nov 2023 04:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b2:46:a9:12:68:b9:b0:a5:72:bd:0f:9c:e9:18:0b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 04:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a35b1d33a4e76ecbcddc1560cc95987a404d3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:cf:13:6c:23:41:28:e9:95:fa:fb:fc:c8:
61:0b:a0:31:11:e0:1c:f2:cd:68:48:cb:31:c9:8d:
02:40:45:c8:ef:79:c4:93:8f:0a:6a:1f:c3:29:2e:
72:4c:6c:80:26:d9:c4:9c:b9:ff:6b:e8:e0:63:4c:
e9:3d:ed:b7:95:67:bb:76:da:85:9e:c4:20:20:47:
3f:4b:b2:47:96:78:a7:bb:29:dc:e7:2d:a1:2d:ea:
8a:af:4f:66:9a:16:83:65:93:6b:32:f3:a1:21:8d:
b3:e5:e4:38:74:ac:58:95:d0:95:e8:f4:d6:e7:80:
86:aa:92:79:34:d6:b6:34:19:89:f4:4b:de:d2:3d:
c2:91:54:cc:fd:53:64:bf:82:1f:99:e9:23:e9:1a:
70:79:a6:b8:a9:43:b2:88:a8:62:ee:4b:90:55:85:
fd:57:87:d3:50:44:63:aa:59:e6:8a:e3:d4:e2:31:
eb:ac:e7:66:43:10:7b:1c:79:c6:f4:d7:74:dd:1c:
7b:f4:8d:2c:ff:27:e4:b2:cc:0a:e6:bd:47:43:7c:
85:1a:fa:a4:d7:bb:83:43:0b:d9:75:18:67:80:c7:
e3:17:c7:77:76:98:fa:3e:e6:f7:8c:e6:c1:36:db:
34:94:fc:0d:a5:8b:ec:18:0e:7d:87:9a:4f:c9:f6:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:35:B1:D3:3A:4E:76:EC:BC:DD:C1:56:0C:C9:59:87:A4:04:D3:D2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CjWx0zpOduy83cFWDMlZh6QE09I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d1:69:d8:33:35:8c:ec:bb:56:35:67:e6:2c:ad:bc:3d:10:94:
52:82:ad:26:98:20:46:fa:d7:d1:0d:68:ea:34:35:7a:73:67:
ab:21:52:0f:ce:1d:4b:fa:06:10:ea:2c:3b:ab:32:0f:84:8a:
09:bb:87:56:45:0f:8f:fd:3b:17:95:4f:38:4e:7e:41:5a:11:
03:70:e7:63:83:5e:a7:0e:c8:be:d8:88:9e:76:68:2c:17:3a:
10:62:4c:3b:d3:71:79:62:00:00:ca:65:0c:48:45:73:07:0b:
da:08:24:9a:3e:4a:ce:38:c0:98:00:7a:be:09:2e:09:b0:65:
43:e5:e8:9b:8d:cc:f5:8c:56:da:c3:82:98:30:0f:2d:52:d8:
dc:cf:41:78:b0:1b:2d:48:cc:d6:16:87:af:22:ba:92:55:10:
51:b9:ac:34:2e:5b:a2:53:a6:40:8b:55:ef:09:92:90:5e:ce:
3f:c0:80:1c:45:1b:31:71:66:65:d7:02:30:b1:ad:f5:d8:56:
00:0a:03:82:66:fd:d8:be:9d:3b:b2:32:36:5b:94:b3:cf:1a:
dd:52:5c:8d:01:d9:22:64:d9:0d:dd:cf:ce:18:43:ed:5a:b3:
6d:f8:95:08:12:8e:23:de:60:15:60:b8:cc:60:df:ed:2c:81:
f6:e8:b0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:42 2025 by rpki-client