Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Do05vBi5Ot9PpZDJMcPD1usOUS0.roa
File: Do05vBi5Ot9PpZDJMcPD1usOUS0.roa (raw, json)
Hash identifier: pjvGr0JOMYaHldECecAARURNiQlWv45NIpAni2Oec1I=
Subject key identifier: 0E:8D:39:BC:18:B9:3A:DF:4F:A5:90:C9:31:C3:C3:D6:EB:0E:51:2D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5DBBEDB0DF7434855825891A8E4A3274
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Do05vBi5Ot9PpZDJMcPD1usOUS0.roa
Signing time: Tue 12 Dec 2023 11:14:06 +0000
ROA not before: Tue 12 Dec 2023 11:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:bb:ed:b0:df:74:34:85:58:25:89:1a:8e:4a:32:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 11:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e8d39bc18b93adf4fa590c931c3c3d6eb0e512d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:53:22:7d:a6:f6:0b:2f:fc:8e:95:b3:40:06:
75:56:5a:0f:5d:99:2d:6d:ff:72:bf:a0:a2:01:cb:
73:72:69:54:17:14:1f:97:d9:c2:3f:e6:a0:a4:f3:
cc:5e:77:d0:e9:ff:b9:cb:5e:ec:6e:10:68:17:57:
eb:b6:26:8d:ce:71:05:78:be:5e:81:76:b8:6b:dd:
ab:72:5f:d3:c7:0b:99:e7:5e:04:7f:9b:e7:6f:d2:
a0:93:6d:6f:83:78:2e:df:e9:f5:ec:ab:34:b7:04:
36:d8:f0:f1:07:2e:05:ff:d6:89:f5:57:cb:e6:29:
55:97:45:38:27:f7:3d:b3:fb:ca:9a:38:02:46:ca:
de:28:19:14:13:bb:bb:d7:a5:84:31:d8:f1:23:73:
8a:33:53:a5:59:a1:08:7e:a6:a4:99:1c:e8:b8:b7:
be:8e:20:7d:80:6b:db:5e:bc:27:eb:8a:0f:c9:10:
63:bf:3a:fe:11:b8:8a:02:94:54:7f:28:27:fe:ab:
1d:30:93:88:57:b1:eb:ac:5b:08:83:54:c9:fa:ce:
64:61:8b:0c:0f:d9:c9:31:1f:90:29:39:07:c9:87:
a4:be:75:6e:2f:b4:f5:de:d4:09:5f:02:01:26:80:
8b:79:c5:5f:91:4a:41:1b:62:9e:52:76:66:3b:76:
71:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8D:39:BC:18:B9:3A:DF:4F:A5:90:C9:31:C3:C3:D6:EB:0E:51:2D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Do05vBi5Ot9PpZDJMcPD1usOUS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:d9:20:c6:75:1d:21:14:8b:24:65:13:5a:f4:98:ab:76:0e:
60:f3:83:ae:b8:24:50:e7:9c:1d:84:32:71:b1:95:e1:f2:36:
a0:45:f2:2b:e4:99:23:2c:58:97:f4:e1:02:8e:36:83:05:d0:
d8:f3:06:9a:71:29:11:26:c4:af:56:d3:b5:85:f5:d3:33:95:
7e:b7:77:74:db:a0:0b:10:a3:35:6c:b8:dc:25:cf:64:03:a1:
8c:b9:9e:0a:4d:2e:9d:58:26:1b:64:1e:73:36:6e:60:0f:fd:
33:de:80:97:38:40:86:c6:18:a1:bb:1f:35:d9:ca:37:ea:25:
4b:39:19:77:03:2c:08:ca:ec:68:92:e9:f7:b0:ae:e0:90:de:
c1:16:9d:df:1c:3c:2f:51:d4:22:6a:35:aa:e9:52:75:86:f3:
d3:d4:62:e2:23:f0:b4:c1:22:78:1c:73:9d:b6:4b:d0:22:55:
b8:40:e1:21:96:01:29:5e:cd:8d:25:e4:e8:6b:80:aa:f3:b2:
69:b0:94:97:0c:1e:ae:b4:09:f7:46:c3:5f:8e:44:0c:d9:d5:
32:65:5a:8c:d1:1b:ca:9f:eb:6b:61:56:08:4b:43:11:28:9e:
40:16:14:7f:d6:93:ed:e1:37:0d:ca:73:c4:dd:dc:6e:da:86:
25:58:d3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:43:48 2025 by rpki-client