Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O1Y9lPvd11o_Qm2p5_K-VMB-kzM.roa
File: O1Y9lPvd11o_Qm2p5_K-VMB-kzM.roa (raw, json)
Hash identifier: 8BXvPepyx6Dbr4hMJBbAluiJqfn23p/ZwDEOMrz9Ogs=
Subject key identifier: 3B:56:3D:94:FB:DD:D7:5A:3F:42:6D:A9:E7:F2:BE:54:C0:7E:93:33
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEE97CB928B40AA994D0E163EA386E9F7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O1Y9lPvd11o_Qm2p5_K-VMB-kzM.roa
Signing time: Mon 02 Oct 2023 04:13:59 +0000
ROA not before: Mon 02 Oct 2023 04:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ee:97:cb:92:8b:40:aa:99:4d:0e:16:3e:a3:86:e9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 04:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b563d94fbddd75a3f426da9e7f2be54c07e9333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bb:04:84:c0:da:ad:bb:ca:ff:f1:89:32:ec:
e2:ae:32:a1:bf:0d:a6:04:94:93:3f:dd:17:ae:19:
bd:a3:ba:e4:d6:6b:76:92:e0:9c:30:5a:c4:3b:c1:
ab:3b:a2:32:41:ed:1d:33:7d:a3:93:dc:e3:08:33:
62:94:22:a0:4d:18:f6:66:56:48:86:0b:74:c6:5e:
a8:45:85:ce:ea:71:f0:97:3f:1e:64:2f:80:38:92:
a4:83:38:d3:3e:a0:c1:e5:67:b4:ab:d7:c3:ef:5d:
8e:56:ec:b8:fb:5f:bd:44:93:cd:1a:e2:2b:95:87:
e0:8c:fe:7f:ed:ce:81:b4:df:ef:9b:ea:38:eb:e9:
54:eb:da:98:80:34:08:33:17:08:4e:29:65:60:38:
b7:2b:ef:cb:9f:63:cf:52:36:64:6f:40:e7:a9:8c:
0d:3c:22:25:29:aa:b3:ab:53:99:99:71:c9:30:5d:
88:ce:37:3e:fd:f8:f4:2c:72:62:60:75:12:dd:99:
dd:44:3d:87:67:41:8c:85:48:d4:9c:28:db:3a:b8:
85:32:52:fc:ca:b2:20:66:00:73:42:07:c1:3f:65:
8c:77:cf:74:bc:1f:e5:aa:a3:a7:28:82:cf:0a:da:
72:b2:b3:48:71:bd:c2:89:29:e9:8d:de:ac:fc:5f:
e1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:56:3D:94:FB:DD:D7:5A:3F:42:6D:A9:E7:F2:BE:54:C0:7E:93:33
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O1Y9lPvd11o_Qm2p5_K-VMB-kzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:a5:5c:8e:8c:a3:4f:1d:58:91:31:94:e1:a3:77:4c:17:dc:
54:d8:f5:db:ae:21:60:da:a1:8c:5b:82:19:15:c8:5d:bd:95:
77:41:30:dc:6c:9f:9b:20:10:ca:bd:8e:44:e7:88:f6:d3:be:
1d:44:44:a3:bc:39:dd:91:e1:cd:ea:20:9e:ca:b8:e4:a9:d1:
e4:fa:30:65:c8:b3:b5:3e:69:b3:1d:7a:46:6f:a6:5b:59:78:
e5:3f:12:38:71:8b:de:15:ca:d1:e8:52:b7:89:b5:9e:cb:22:
f9:67:99:9d:93:37:fe:72:97:01:2c:ec:4e:e1:27:bd:18:6d:
e5:2b:95:5a:58:27:ca:34:ca:28:a2:ef:cd:2a:e1:6b:37:74:
6c:c0:11:a7:4f:f0:07:3c:3b:08:f0:ac:3d:66:54:b8:4e:7a:
7f:43:aa:ac:7c:ac:db:04:c5:d6:44:23:a6:5e:5c:67:23:e2:
f8:62:c2:bb:73:64:00:49:47:e7:ca:18:ff:be:cd:46:63:26:
a9:a8:15:4e:9c:b4:ff:ea:07:ee:20:d7:85:38:74:9e:0e:cc:
cc:f4:c6:9d:4d:44:5d:dd:6d:56:20:2a:c7:00:16:1f:e5:0f:
25:5f:5c:a0:ec:a7:92:d1:0c:e8:53:f7:bc:4b:62:31:49:3e:
b0:26:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:55:27 2025 by rpki-client