Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O551jbE_dbVSNDs_xVuBN14Z-rM.roa
File: O551jbE_dbVSNDs_xVuBN14Z-rM.roa (raw, json)
Hash identifier: gQWSAi9K0csBqf2/RfJCC5nvuolDTZ10TmDDJRlVhAk=
Subject key identifier: 3B:9E:75:8D:B1:3F:75:B5:52:34:3B:3F:C5:5B:81:37:5E:19:FA:B3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C18A6ECF57390879306A2CF185910B219
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O551jbE_dbVSNDs_xVuBN14Z-rM.roa
Signing time: Wed 29 Nov 2023 01:17:21 +0000
ROA not before: Wed 29 Nov 2023 01:17:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:18:a6:ec:f5:73:90:87:93:06:a2:cf:18:59:10:b2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 01:17:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b9e758db13f75b552343b3fc55b81375e19fab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:03:a8:7e:6b:ef:53:5e:d6:89:08:71:67:2a:
3b:93:71:ba:06:bd:a2:57:a6:04:73:5d:f1:4b:24:
6e:b9:4e:72:81:5d:3d:a4:3b:6a:8e:28:5f:66:81:
51:86:50:ab:6c:91:b8:02:c4:06:40:45:50:6a:41:
fe:f8:c7:d9:8b:91:d0:0c:af:01:51:9d:23:5e:1f:
00:0f:d8:6d:a1:b5:82:b6:ee:bb:f8:a5:2e:d3:26:
a0:cf:ca:21:c5:e7:d9:f0:c3:8b:ab:bb:53:c1:f8:
3d:04:7f:68:5f:42:b9:76:2a:9c:9d:d2:09:24:ff:
96:34:95:7f:78:56:75:1a:de:24:41:43:85:24:9c:
f8:22:bf:47:9a:f7:2a:a9:31:2e:2d:14:e6:7e:7f:
97:f8:66:3e:31:7f:7a:92:f4:c6:ab:b6:2e:da:30:
06:91:77:88:d9:3c:7f:1d:fd:6a:eb:54:67:b6:ff:
2d:23:ee:95:88:57:ba:df:20:54:01:fb:a2:8f:18:
ec:c5:e7:11:85:01:9c:75:a1:07:f1:47:78:ab:f7:
db:79:c3:30:9e:98:f5:31:76:bb:8f:89:c2:0f:94:
e7:de:5c:9a:44:de:d6:66:9b:45:55:0a:a1:1e:b1:
7c:25:3c:a8:d3:cf:9c:88:cd:0b:3e:5d:70:25:56:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9E:75:8D:B1:3F:75:B5:52:34:3B:3F:C5:5B:81:37:5E:19:FA:B3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O551jbE_dbVSNDs_xVuBN14Z-rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:1d:19:7c:03:75:d0:34:3b:d1:92:b4:cc:14:fa:25:88:5f:
23:7d:d8:59:88:d7:1a:f4:b6:6a:34:9c:47:48:da:44:03:d5:
84:88:94:50:84:ac:61:5c:8c:b8:37:28:c8:4d:68:d3:2c:47:
3d:1e:86:4b:63:b7:46:db:ec:42:51:6f:7d:12:a4:68:ce:72:
18:ec:43:1b:2b:48:92:a8:2e:78:ef:4a:98:a6:88:5d:e2:b2:
fd:52:b6:a3:c7:7e:21:72:fe:4d:9d:40:20:44:2a:57:42:68:
e2:8b:43:c9:b8:0b:5a:68:b9:48:82:60:ad:71:bd:2f:0a:3f:
bd:34:0f:2a:61:c4:86:ed:46:d0:a5:a1:7e:d1:3a:01:fe:f5:
a6:33:80:aa:30:bc:ed:5d:d2:4a:ad:c6:8e:66:bb:2a:44:f6:
6f:e1:2a:76:58:88:8e:d9:54:ff:70:23:89:97:1f:2f:ca:c8:
80:a4:c9:f0:e7:cd:71:31:ef:06:15:f0:ae:4c:24:bd:bc:ff:
5f:76:c6:ac:cc:3e:6c:ee:4f:53:94:ad:3d:48:2d:69:a3:c5:
0f:ea:ef:25:21:be:29:03:2c:77:a9:0f:59:e0:e0:5f:5a:c8:
c2:e9:4a:d0:d9:1a:95:ac:c2:b2:b2:51:27:0e:30:32:ad:a5:
f5:a5:79:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:31:25 2025 by rpki-client