Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DLj2cVFxTtP7rVXWuyhM2s4rrYM.roa
File: DLj2cVFxTtP7rVXWuyhM2s4rrYM.roa (raw, json)
Hash identifier: 0vSC1YL8JTo6k0Tv3dGwMnKknupbRS7fIC6NBQsJiVc=
Subject key identifier: 0C:B8:F6:71:51:71:4E:D3:FB:AD:55:D6:BB:28:4C:DA:CE:2B:AD:83
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB6202FCDBA096BE625413BB16C6ECA2C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DLj2cVFxTtP7rVXWuyhM2s4rrYM.roa
Signing time: Thu 21 Sep 2023 05:04:37 +0000
ROA not before: Thu 21 Sep 2023 05:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:b620:145/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:20:2f:cd:ba:09:6b:e6:25:41:3b:b1:6c:6e:ca:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 05:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cb8f67151714ed3fbad55d6bb284cdace2bad83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:06:3e:5c:c0:86:56:57:00:b0:b6:e9:79:
28:5d:70:35:f7:c7:fd:d6:e9:df:53:c0:5f:53:e9:
49:d3:ac:55:d6:70:ff:3c:46:39:0e:d2:92:e3:ac:
8e:10:e4:eb:77:9f:c2:ee:3d:99:1e:2b:5d:e7:3b:
6c:3a:18:c8:e9:a9:73:03:a6:c7:9e:32:09:35:5a:
5a:47:c4:c5:0c:d6:f8:43:ff:de:2a:c3:05:12:d5:
00:06:f9:e1:d0:2a:cd:a8:9e:28:01:71:da:27:0d:
21:34:a0:0d:74:01:8c:4f:ac:92:e1:61:96:cb:2c:
99:7b:c9:f7:02:7d:8d:7f:43:2f:86:82:77:82:b6:
94:2a:44:81:7b:41:db:04:6a:3f:10:bc:4f:05:34:
71:41:b3:f3:c4:87:5d:4a:7a:35:60:0b:ed:5b:bd:
82:db:2c:fa:bc:63:4c:21:79:18:18:f8:3e:9b:26:
b8:c8:ec:d2:ef:1a:53:8d:d6:1e:4b:a2:98:fe:b0:
f0:a9:42:3a:13:c9:71:48:62:4f:4c:cd:20:9b:c7:
82:d1:da:8e:78:3f:a8:6b:3f:6f:c9:35:4d:ff:5f:
0b:ce:ab:b5:a7:ad:39:fa:59:b2:e1:eb:fb:93:ad:
87:a0:bd:9f:05:c9:51:42:c5:c0:af:f2:2c:f2:ef:
3e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B8:F6:71:51:71:4E:D3:FB:AD:55:D6:BB:28:4C:DA:CE:2B:AD:83
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DLj2cVFxTtP7rVXWuyhM2s4rrYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:3b:33:e3:06:3f:ce:ee:0a:d4:05:a4:0a:53:46:fb:9f:59:
c2:9f:82:bd:74:b7:a9:14:68:6e:83:55:42:3e:95:6c:87:3a:
cc:2d:28:e5:0d:51:20:af:ec:90:d3:18:48:a5:a0:e4:85:dc:
7a:9e:61:00:d6:61:08:41:5e:52:61:c2:a3:d6:57:cd:b9:70:
35:c3:ea:34:1a:30:d4:8c:02:80:f5:1f:21:a0:5d:42:f9:78:
e9:e7:22:b9:3c:c2:47:aa:3b:1f:52:3b:68:f5:12:89:29:46:
ba:93:a9:3c:79:41:62:53:3e:c2:2b:0f:c0:78:ac:fc:6e:27:
d0:49:c0:69:ad:47:a7:c2:74:c0:46:7d:45:c3:0b:e8:4f:d9:
b1:15:04:ef:ab:bc:51:a3:17:be:d4:8f:99:2b:68:2e:0f:64:
3d:bb:9d:78:69:61:c3:18:06:2e:5e:e0:9e:c7:8e:2d:23:92:
4a:a0:68:bb:fa:a8:77:7f:5d:bf:95:17:e4:a4:1a:22:9c:7c:
5c:14:58:70:cf:39:9c:bd:c6:c4:b8:84:71:b3:be:ca:e7:f8:
9b:48:1f:f0:96:41:0a:21:9e:16:ce:87:43:6c:4c:5c:d0:aa:
f8:29:c9:75:e8:bf:ac:63:50:a2:14:15:cc:6b:f2:03:c6:62:
c4:83:9b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:38:25 2025 by rpki-client