Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Dwlb0m80RK0IxlII5LrZRLyiwxk.roa
File: Dwlb0m80RK0IxlII5LrZRLyiwxk.roa (raw, json)
Hash identifier: xSjsNGqwB3BBjx8FmkXskHFo1+n+syFhaGt1w3gkJJc=
Subject key identifier: 0F:09:5B:D2:6F:34:44:AD:08:C6:52:08:E4:BA:D9:44:BC:A2:C3:19
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7B587E57A8A6159DE8482EEBA3334101
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Dwlb0m80RK0IxlII5LrZRLyiwxk.roa
Signing time: Mon 18 Dec 2023 05:14:06 +0000
ROA not before: Mon 18 Dec 2023 05:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7b:58:7e:57:a8:a6:15:9d:e8:48:2e:eb:a3:33:41:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 18 05:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f095bd26f3444ad08c65208e4bad944bca2c319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:53:be:73:ba:97:ac:a6:a3:f4:05:41:1a:
ff:1a:79:c2:40:27:23:84:28:ba:56:09:2b:33:69:
bc:27:85:d7:0b:b3:65:bc:08:14:fc:28:f1:10:53:
4c:72:06:55:75:16:3b:40:39:b3:8f:94:6b:38:ae:
a9:62:fb:7d:cc:41:31:63:d2:dc:36:9d:dd:13:97:
95:39:f6:b3:78:75:ca:d0:c3:6d:fb:6e:50:47:4a:
05:ed:08:2a:2a:36:1c:9a:f9:59:e4:26:3f:49:04:
1c:a1:88:f4:a8:7a:e2:20:43:c8:f1:2f:35:a7:da:
b6:e6:25:e4:14:8c:b5:bb:3a:31:d5:31:06:94:cc:
af:9b:65:6a:a0:89:bc:47:e5:85:77:ca:42:49:2d:
eb:25:9d:06:65:09:0c:93:f4:c1:f2:b0:3d:fb:89:
ba:c8:b5:82:57:fa:a5:0f:95:06:dc:1c:97:15:9d:
97:bf:9f:ba:31:46:6f:c4:0c:45:38:a7:df:90:6c:
f5:a4:c5:30:fd:18:c3:c6:7a:d3:52:cf:3c:c1:ab:
25:5e:0d:9c:95:ac:64:b8:7a:28:41:a7:e5:4a:37:
7a:7c:26:74:4a:74:ed:aa:3b:f6:5c:31:51:d1:4a:
83:83:e4:a1:16:f2:28:2d:a6:21:20:40:ce:04:b5:
d9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:09:5B:D2:6F:34:44:AD:08:C6:52:08:E4:BA:D9:44:BC:A2:C3:19
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Dwlb0m80RK0IxlII5LrZRLyiwxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bf:08:59:09:8d:f1:97:bc:2b:60:82:e9:00:6f:7c:26:49:e6:
bb:f0:a7:d1:0c:cf:b9:3f:f3:f7:e9:2b:17:12:ac:b5:7e:da:
20:2e:7a:27:4d:97:5f:d9:da:46:bf:29:1c:0b:49:9b:41:c4:
c6:0d:77:96:1f:ca:d2:31:b0:54:37:c9:f5:3e:10:f7:38:61:
1a:d4:e0:9c:8f:90:d8:7c:25:43:f0:1b:59:dd:b8:6b:80:bb:
33:7e:61:83:dc:85:62:7d:cd:6b:01:4c:ba:ae:7d:34:2e:16:
4d:0e:21:76:50:ce:ff:42:fc:e1:69:2e:e9:65:36:98:b2:df:
54:fa:44:a4:9e:1f:7c:a6:21:8f:bd:d6:ed:ba:8a:d8:88:c5:
0e:13:43:81:29:83:30:8e:8d:5e:60:8d:27:3e:f3:c1:cb:bc:
99:f1:c1:0c:84:94:fb:58:b0:0e:04:11:89:71:41:25:97:82:
df:51:47:59:f3:03:25:2a:ff:6b:ac:ea:58:d7:7b:bd:a0:83:
c8:90:f3:9e:b3:7c:ad:db:79:23:ae:32:2d:83:c1:fb:4b:ad:
58:14:9c:4c:50:21:9f:cf:65:a6:4d:1c:1a:60:e1:76:a7:f9:
bf:54:5e:5d:6f:0d:04:a9:d6:12:58:d8:6c:a4:fa:c9:0e:59:
84:1e:5c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:39:58 2025 by rpki-client