Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DfS093Gq-IiN-hF0C1HHdfTE4MU.roa
File: DfS093Gq-IiN-hF0C1HHdfTE4MU.roa (raw, json)
Hash identifier: hr+cXpYVCVhluZ00JR9Q9P5FVRyJPQZgCGrooNv65pE=
Subject key identifier: 0D:F4:B4:F7:71:AA:F8:88:8D:FA:11:74:0B:51:C7:75:F4:C4:E0:C5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD3C000CD3FB52B88079522D6BA46DFDA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DfS093Gq-IiN-hF0C1HHdfTE4MU.roa
Signing time: Wed 15 Nov 2023 16:10:57 +0000
ROA not before: Wed 15 Nov 2023 16:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:c0:00:cd:3f:b5:2b:88:07:95:22:d6:ba:46:df:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 16:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0df4b4f771aaf8888dfa11740b51c775f4c4e0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:00:24:99:14:5b:b6:6d:55:9c:0e:c1:73:
a5:78:34:0a:82:b1:68:ce:21:ed:d8:46:7f:97:87:
8a:12:05:6c:f7:bc:aa:1d:45:38:2b:c8:9a:a7:bb:
6e:53:da:a1:39:14:3f:74:b3:8a:67:23:e1:67:a1:
04:8b:db:59:bc:d6:26:55:d6:03:dc:2f:04:e6:01:
ff:80:89:2c:4b:ec:12:d2:d0:ed:3f:54:91:aa:89:
3b:ae:cf:f4:77:5a:1f:66:77:8d:92:cb:76:ae:bd:
11:dd:82:0b:32:3e:b0:f5:c3:c3:a4:61:3c:e8:0d:
0f:f5:02:34:7a:81:d7:fb:81:86:e8:55:ee:36:af:
82:7b:85:d4:50:42:0a:13:96:d5:80:58:58:2b:da:
1b:90:85:8a:cd:2f:33:13:1f:65:34:c3:da:75:d1:
4e:bf:c8:65:57:0a:a2:98:a6:97:f3:a5:37:0b:6e:
28:73:0e:3d:5c:3b:51:d8:9e:9b:a8:88:57:7d:ee:
34:ad:dc:d8:1f:ca:2d:ce:1e:04:54:3c:6e:f3:33:
e8:c4:90:cf:40:bc:b6:01:21:0d:26:6f:64:95:4d:
27:2d:18:5e:d9:f2:f0:76:8d:22:cf:cc:3f:2c:66:
d4:2a:26:16:78:a2:dd:24:29:92:1c:1f:fd:22:32:
b5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F4:B4:F7:71:AA:F8:88:8D:FA:11:74:0B:51:C7:75:F4:C4:E0:C5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DfS093Gq-IiN-hF0C1HHdfTE4MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:06:15:9c:02:5d:07:fe:56:a9:15:9c:5e:2d:e1:f3:1f:55:
f2:a9:b5:8a:75:c5:dd:66:fc:28:51:41:df:a4:fc:2a:f6:af:
fd:d0:e3:32:d7:c3:bf:ed:2d:4c:e1:f8:89:43:02:b0:49:00:
f4:cf:08:2a:66:f4:ed:46:b0:50:a8:a2:e2:90:06:99:25:bf:
dd:bb:15:47:59:18:5e:4e:d8:51:f1:02:8a:f6:3e:02:cf:d7:
6f:46:b4:21:3d:f4:31:cc:1b:61:7f:8a:ed:d9:70:06:55:a8:
10:0f:af:ea:fb:e9:ed:e6:17:30:35:72:a4:14:02:4a:43:af:
72:15:d8:66:e2:93:52:e9:a1:d9:78:65:8b:f7:94:30:c2:9b:
82:ac:8b:f0:c2:63:e5:ac:29:38:60:25:81:97:7b:c2:3d:4e:
35:33:71:ef:e3:93:86:7e:22:4e:12:48:ae:11:cd:a9:0a:f6:
cc:ff:81:f5:d7:94:d4:b9:c1:2b:00:be:f5:7a:bc:af:e8:31:
9b:83:18:82:91:2f:74:39:95:0f:37:37:63:17:9d:b7:83:2b:
62:35:82:95:5b:5a:ba:16:65:b0:de:97:1a:c2:15:ee:be:d8:
39:bc:b7:9b:7b:dc:b9:28:6c:93:9c:cd:9c:14:3b:4f:8b:45:
18:f2:ef:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:58:36 2025 by rpki-client