Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OCdUqQ7nTA4KtBefY6Cgla5Lx8k.roa
File: OCdUqQ7nTA4KtBefY6Cgla5Lx8k.roa (raw, json)
Hash identifier: 7sMNYKzWBkPt6raYeh5qpbGc9zRNNTwyKmJnGsPRmF0=
Subject key identifier: 38:27:54:A9:0E:E7:4C:0E:0A:B4:17:9F:63:A0:A0:95:AE:4B:C7:C9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B87990C2531BB44BDD6F702B506938C25
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OCdUqQ7nTA4KtBefY6Cgla5Lx8k.roa
Signing time: Tue 31 Oct 2023 21:17:16 +0000
ROA not before: Tue 31 Oct 2023 21:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:87:99:0c:25:31:bb:44:bd:d6:f7:02:b5:06:93:8c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 21:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=382754a90ee74c0e0ab4179f63a0a095ae4bc7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:f7:8a:c5:ac:98:64:b0:78:77:5e:90:d9:
52:be:f0:0a:4e:e3:df:00:9f:a8:ff:86:ca:58:46:
1f:ff:20:de:15:30:33:53:74:cf:16:61:ab:7a:d0:
1a:3d:99:9a:f3:4c:70:d6:15:1f:43:30:c7:b3:32:
fb:2f:0d:d9:16:e5:6e:90:ea:6f:c2:e3:24:c2:63:
66:3b:ce:af:eb:f7:41:de:34:03:cd:cb:62:b9:62:
a1:6f:19:7e:0b:97:14:34:74:65:7d:3e:73:43:5d:
f4:fb:18:6e:7f:8b:76:dd:25:0d:74:1b:67:1a:33:
16:19:49:bd:01:bd:98:aa:60:da:37:25:5d:40:30:
5f:99:9c:07:39:45:91:ec:22:63:20:d7:66:f5:02:
9e:c1:df:b3:2f:0b:07:5d:f0:bc:67:e0:7d:a0:fb:
d3:eb:79:5d:e3:7e:1c:80:55:8d:4b:9f:d1:55:05:
32:03:a8:d9:f6:7a:dc:75:5b:4f:26:e7:7d:8e:00:
df:9f:9d:1d:88:bf:fc:8a:5b:38:a0:f5:a0:96:f7:
2b:7c:d2:28:74:55:4a:bc:67:13:44:ff:94:1e:00:
b6:ab:27:b0:c6:1a:7f:fb:36:7f:f1:5f:3a:8f:e8:
10:81:14:c4:23:c5:7f:45:50:f5:ef:e0:2f:bf:21:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:27:54:A9:0E:E7:4C:0E:0A:B4:17:9F:63:A0:A0:95:AE:4B:C7:C9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OCdUqQ7nTA4KtBefY6Cgla5Lx8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:7d:00:9e:d8:fd:d8:5f:31:92:ce:97:43:7b:5a:da:0a:0f:
c7:b0:56:34:b2:5c:7d:44:26:4d:65:54:fe:be:55:91:d4:7b:
ab:5a:07:90:dc:27:fb:2a:7f:1d:11:62:f2:e8:ad:a8:0b:ae:
8f:20:8d:7d:26:33:f9:18:3b:7a:9b:8b:90:42:41:ef:cc:ca:
10:32:58:40:b7:4c:0e:bc:9f:dc:1b:6a:b2:83:de:90:34:be:
07:9d:a9:1d:71:1b:12:e7:53:09:03:65:13:fc:f7:ed:a9:32:
f0:9e:88:d4:1b:0d:29:5a:b5:4d:96:cd:78:5c:bd:75:93:b8:
63:ca:fc:5b:01:86:9a:58:4e:ed:52:af:ba:c9:29:aa:ac:1f:
54:4e:43:65:4f:f8:7f:48:c5:c1:81:66:8c:22:d8:89:5e:cd:
f8:8e:0b:50:f9:48:71:16:9a:95:15:a1:62:b0:84:ac:ae:b4:
77:4c:26:20:61:38:19:30:64:b1:88:06:05:60:be:70:9c:10:
84:e8:04:c2:41:f9:1f:29:92:4b:c6:a5:1a:32:7a:01:65:52:
8f:ae:48:0a:93:c1:8d:c2:9f:3a:36:8e:a4:8a:4c:2e:86:54:
4d:98:48:b0:1a:e6:46:bc:52:ef:e5:f2:88:74:96:aa:a8:ac:
53:e6:5e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:55 2025 by rpki-client