Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DPfFlKQGB39jXeqx4hv4CvVIjTo.roa
File: DPfFlKQGB39jXeqx4hv4CvVIjTo.roa (raw, json)
Hash identifier: Aunl+1GPK59BNZv74G29yP4t1M32z3JGHkvF1q2WZJY=
Subject key identifier: 0C:F7:C5:94:A4:06:07:7F:63:5D:EA:B1:E2:1B:F8:0A:F5:48:8D:3A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B378469887E7FFACD8B73A3D0216E14FF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DPfFlKQGB39jXeqx4hv4CvVIjTo.roa
Signing time: Mon 16 Oct 2023 08:05:06 +0000
ROA not before: Mon 16 Oct 2023 08:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:3783:a417/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:84:69:88:7e:7f:fa:cd:8b:73:a3:d0:21:6e:14:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 16 08:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cf7c594a406077f635deab1e21bf80af5488d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:df:ae:79:71:be:fe:48:84:5d:af:99:23:
d7:f2:b3:dd:a6:aa:9e:32:79:de:13:9a:60:d9:43:
a1:32:4a:b7:a7:00:f8:b3:0e:0f:10:20:8a:c7:3d:
aa:77:40:89:20:0d:4f:46:75:b3:57:38:d7:43:0f:
2e:66:53:35:91:84:5a:59:19:fc:65:2c:8e:2c:a2:
75:37:d1:57:c8:0f:95:19:db:d8:7b:90:86:0c:d8:
23:07:9f:1f:ca:20:8d:29:9a:2c:44:bb:17:9d:4b:
cd:e0:bf:81:67:3e:99:ba:20:87:6e:6c:40:ff:d9:
9e:17:e4:97:1f:f6:b7:df:3c:d8:ad:d7:ba:79:cd:
ff:2b:66:c4:66:77:5d:40:a9:23:0d:8b:8e:c6:7b:
52:4f:91:8a:d0:19:af:11:14:e7:ed:02:87:d4:73:
25:ff:7d:16:50:77:be:ce:47:c4:6f:2d:fe:27:70:
6b:40:25:89:5c:5c:cb:0c:6d:5a:59:e9:bb:4c:1f:
af:9d:60:c7:66:99:28:b9:59:df:8a:03:8b:e4:8e:
9b:8a:7c:f7:80:45:72:7f:99:3b:e5:31:d4:7d:7e:
73:0f:ad:c6:3d:07:89:14:bf:91:21:10:5d:36:f9:
64:f0:d6:57:50:a2:e8:f2:e0:0d:c0:71:8f:bb:77:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F7:C5:94:A4:06:07:7F:63:5D:EA:B1:E2:1B:F8:0A:F5:48:8D:3A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DPfFlKQGB39jXeqx4hv4CvVIjTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c7:7d:d1:7f:71:39:e5:6d:7c:12:4a:d9:bc:4c:32:ad:b9:e0:
d7:3e:05:33:fe:24:23:ea:c8:0d:d5:db:7d:67:ef:ea:2c:02:
1a:f7:c2:5e:63:b2:51:e7:b1:18:d9:df:08:70:a6:be:a1:54:
a5:00:f4:58:94:2a:d4:b5:df:86:fd:9b:8f:fc:39:35:3b:19:
ba:c6:ae:f9:01:c7:98:13:fd:d2:3c:02:5e:be:39:8a:4d:b9:
5d:fb:b5:66:84:40:b8:0d:d7:c2:81:9d:49:8f:fa:53:e9:c4:
b7:e1:ed:0f:2c:dd:ae:21:4c:5f:6f:55:0f:51:6a:3a:cd:bf:
13:41:90:54:1b:ad:fd:bc:d9:40:52:0a:d4:93:30:b6:85:23:
40:f3:fa:e5:66:cd:35:e4:de:a0:84:37:fc:eb:f7:92:05:37:
c5:5a:a0:7f:9f:b2:af:de:de:4c:8c:cf:6e:2c:56:ea:c6:e6:
20:38:d3:5f:81:e8:ee:98:26:36:1b:78:4d:29:e4:ce:00:d6:
f8:0a:1b:5f:7d:92:34:b8:f1:f8:ce:1f:81:b6:bb:95:f2:3d:
5d:07:c5:09:ad:f6:9d:f9:68:83:80:32:c9:36:97:bd:ab:6a:
0c:f6:69:e0:08:06:99:1c:a1:9e:e7:77:4e:11:4f:16:67:c1:
01:b3:3d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:44 2025 by rpki-client