Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DVTRlgUyAjIB-r8pr6oKoBmmSkk.roa
File: DVTRlgUyAjIB-r8pr6oKoBmmSkk.roa (raw, json)
Hash identifier: 4W3BXYPDLZlx1/QIozC4274G+kfrCBOvCLHd4SBO05c=
Subject key identifier: 0D:54:D1:96:05:32:02:32:01:FA:BF:29:AF:AA:0A:A0:19:A6:4A:49
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5BCD68A3A84E2DBF84B024E0885CB2FB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DVTRlgUyAjIB-r8pr6oKoBmmSkk.roa
Signing time: Mon 23 Oct 2023 09:11:10 +0000
ROA not before: Mon 23 Oct 2023 09:11:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:5bc7:2204/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:cd:68:a3:a8:4e:2d:bf:84:b0:24:e0:88:5c:b2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 09:11:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d54d1960532023201fabf29afaa0aa019a64a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:7b:6c:f0:9f:6b:0f:b3:2b:c8:9b:33:5e:
08:e6:7d:78:8c:36:40:19:8d:f7:4b:7e:86:21:6b:
20:e7:19:53:61:8c:c4:a9:4c:8e:9a:d5:6a:31:49:
40:96:8e:30:bf:c7:88:dd:3d:57:93:35:c9:f9:1e:
91:c8:3e:21:b9:2e:de:9c:b3:b2:77:89:07:b8:6b:
d6:38:32:bc:5e:b2:7f:8f:63:06:bf:cb:aa:1d:8d:
41:7a:50:0d:55:3d:51:e3:56:31:bd:c2:53:db:f0:
cb:e7:ce:27:d4:56:ca:b8:c8:e7:9d:1b:1d:46:1a:
2f:29:e6:bc:81:d4:1a:37:03:8d:82:9b:7f:a3:fa:
7f:79:4a:7d:b9:e4:e4:10:54:19:3a:39:88:73:0d:
5e:8c:3e:5f:b3:78:09:7e:a8:02:d7:91:f8:64:4e:
7b:a1:5a:66:06:3f:e0:0c:4f:d2:ef:db:34:2c:62:
ac:ad:f4:55:9a:1f:3d:0d:e7:6e:49:b0:77:91:e6:
5f:dd:7e:72:0e:01:a1:17:1e:11:c4:ff:6a:59:dd:
51:0b:37:97:85:6b:22:b3:20:af:a1:b7:ba:00:b0:
0c:7d:a3:d6:93:cf:b9:5a:b6:fc:43:96:7e:74:2d:
f9:b9:e5:58:f4:07:b2:e7:08:4d:11:aa:8b:30:9d:
55:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:54:D1:96:05:32:02:32:01:FA:BF:29:AF:AA:0A:A0:19:A6:4A:49
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DVTRlgUyAjIB-r8pr6oKoBmmSkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:74:ba:ce:90:b2:c6:72:ef:4c:22:2e:2f:19:5f:43:07:72:
08:5f:9d:58:41:1a:bb:cb:5a:e1:e5:58:04:1c:b1:1a:c9:dc:
a2:17:78:43:b5:50:4d:4d:c4:01:71:41:40:64:ad:03:b4:56:
4f:c1:dd:ad:a4:1d:85:fd:fd:5f:32:ae:7c:65:0c:f4:46:f6:
95:74:44:68:36:69:ee:f1:7a:28:4d:e7:ff:31:79:28:66:10:
aa:b2:75:6f:d7:49:62:09:b2:c1:3b:7f:8b:63:d8:5b:8f:cb:
9e:17:b2:6e:e6:ba:ef:2c:30:12:52:22:a1:5b:b3:d4:2c:99:
fd:32:75:35:aa:56:67:b6:39:ee:73:d0:ea:c6:2c:03:f9:8e:
19:a6:49:0d:3c:6b:46:f3:cb:24:4d:a0:9d:9e:c9:02:cf:3a:
9c:0f:65:c0:d3:79:18:7f:e6:ff:16:8c:84:49:c3:f8:4e:34:
21:58:42:a3:f2:5b:b7:c6:54:b9:97:3f:38:a6:28:17:42:8f:
ae:29:d1:a9:01:ff:65:42:33:a5:c9:38:ad:56:26:87:88:de:
79:d8:c3:a6:c7:68:21:4e:28:b1:a4:1e:b9:06:ac:1a:f2:16:
4c:5f:e1:25:d5:65:f3:e6:f5:66:4a:9a:df:21:0d:28:bc:08:
f1:6a:47:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:46:14 2025 by rpki-client