Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O-e2C0mo5g9SOmzonsMSwNRBYM0.roa
File: O-e2C0mo5g9SOmzonsMSwNRBYM0.roa (raw, json)
Hash identifier: qeg3pN8NgUlIf5voamaPMwHAV3oDGehEew3o53+eUHc=
Subject key identifier: 3B:E7:B6:0B:49:A8:E6:0F:52:3A:6C:E8:9E:C3:12:C0:D4:41:60:CD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C19EEAD81D4073D4C913478D6A2AF8B20
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O-e2C0mo5g9SOmzonsMSwNRBYM0.roa
Signing time: Wed 29 Nov 2023 07:15:21 +0000
ROA not before: Wed 29 Nov 2023 07:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:ee:ad:81:d4:07:3d:4c:91:34:78:d6:a2:af:8b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 07:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3be7b60b49a8e60f523a6ce89ec312c0d44160cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:03:f7:6e:f7:94:62:1b:0b:6b:df:e9:76:
12:2f:e4:67:e6:5f:b6:c8:62:50:6f:b2:30:d8:40:
43:a7:6b:46:81:f0:28:09:97:9f:96:a1:00:8d:9b:
3e:ad:d9:0c:a7:78:dd:0b:dd:05:ec:08:dc:d8:ed:
32:54:ef:48:1e:19:d1:3e:0d:d2:01:f1:4f:e2:5d:
04:d7:bf:45:a0:7f:64:b8:34:40:25:88:ab:4f:2f:
33:a2:96:89:9c:96:17:f7:ce:4b:9b:0b:47:34:7c:
92:61:7c:0b:3b:5e:ce:4d:6c:ac:05:4c:1c:26:53:
9b:bd:71:70:07:cc:0c:eb:f5:f9:69:3a:bf:97:33:
e6:19:8d:26:d8:cf:ba:79:78:00:44:3c:c5:af:26:
e9:4f:a7:ac:34:fb:3e:7d:0a:88:22:71:52:6f:e2:
ee:ce:65:25:66:95:22:65:b3:87:6d:f0:45:dc:9e:
a3:26:fc:60:2d:79:91:b0:5d:75:a7:2e:be:48:48:
45:98:cd:64:41:96:f6:cf:b2:66:4b:e3:b2:14:e1:
c3:d0:dd:c2:94:5b:46:94:c3:a7:d4:c7:f5:59:15:
2c:97:de:f9:aa:35:b5:c2:5e:ce:1f:64:c5:7f:b9:
cc:f1:6b:42:9f:62:20:d9:ee:05:1f:63:4e:d4:06:
af:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E7:B6:0B:49:A8:E6:0F:52:3A:6C:E8:9E:C3:12:C0:D4:41:60:CD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O-e2C0mo5g9SOmzonsMSwNRBYM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:f0:c6:b5:f4:f8:53:d2:7c:28:16:9a:38:f9:8f:17:0d:0d:
74:13:05:98:dd:2b:35:2d:17:3d:de:64:a7:e9:61:9c:4e:7b:
70:29:2d:39:35:0e:9e:4e:78:88:87:57:9d:80:0a:bd:3f:e2:
41:0c:55:34:c3:9c:88:86:26:9d:a1:1a:61:8a:73:ff:4a:75:
89:1c:e0:e5:24:11:7f:c1:69:ce:0e:10:26:6c:73:9e:a8:4b:
41:19:81:1a:db:18:76:a2:62:59:62:a5:f9:36:76:55:c4:ca:
2f:0a:71:46:9f:81:17:d6:e1:0d:a2:97:12:20:7a:d9:7e:5a:
68:76:09:c7:21:5d:10:f7:d9:ba:f4:44:ff:ad:d1:ee:a4:2d:
4b:f5:d4:90:db:d6:04:b7:ee:9a:f2:fe:08:ef:5c:59:d7:7c:
91:ef:e3:b1:ba:a6:1c:03:ca:25:e4:95:39:8b:16:27:51:30:
42:d4:37:3f:26:b3:16:6a:fe:1c:13:37:b8:ce:f3:2e:1e:62:
cd:4d:70:37:ea:47:36:e6:d1:4c:c2:7a:ab:9c:38:97:55:bf:
7c:c4:03:12:0f:37:fb:9b:97:a4:7c:24:ef:4b:6d:a1:a9:45:
c7:d3:2d:7d:9b:67:f8:4d:eb:f1:58:85:83:41:34:23:67:b9:
08:20:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:35:40 2025 by rpki-client