Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OypuKH9LHSv7zRUobSz49nt5amE.roa
File: OypuKH9LHSv7zRUobSz49nt5amE.roa (raw, json)
Hash identifier: c717XTBDznhxHhk85y2vwYoDBDndMSljkCAPafP2KyQ=
Subject key identifier: 3B:2A:6E:28:7F:4B:1D:2B:FB:CD:15:28:6D:2C:F8:F6:7B:79:6A:61
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B07E7A66CC253384941C10E6D8FEEAEAD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OypuKH9LHSv7zRUobSz49nt5amE.roa
Signing time: Sat 07 Oct 2023 02:11:43 +0000
ROA not before: Sat 07 Oct 2023 02:11:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:07:e7:a6:6c:c2:53:38:49:41:c1:0e:6d:8f:ee:ae:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 02:11:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b2a6e287f4b1d2bfbcd15286d2cf8f67b796a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:46:8a:eb:51:1e:dd:ae:f5:44:5c:a3:27:9d:
73:dc:23:cb:c3:69:69:61:dd:80:5b:ff:01:cd:1b:
0e:44:77:58:d8:36:3d:bb:8a:39:04:4b:8b:d4:7d:
10:23:2a:ef:ab:95:f2:69:da:5c:42:85:73:ab:90:
40:42:f8:20:de:40:f3:80:03:1e:72:5c:de:5b:64:
dd:3c:87:af:1b:a3:fc:1f:c7:c6:ff:b3:0f:63:86:
b3:49:db:fc:5c:19:21:e4:8f:17:42:90:58:15:ed:
6d:92:4a:bc:e1:90:39:91:95:d8:db:5c:9a:c0:96:
b4:23:b3:85:ba:4c:79:a0:23:86:32:46:e5:1b:30:
fe:37:2e:f7:54:05:c5:e9:74:0b:23:96:5f:4b:cb:
79:90:c3:50:09:b5:98:d5:62:52:dd:13:ca:48:7b:
ff:71:5b:b5:06:ad:fc:33:9c:63:e8:04:4f:04:5d:
8d:1b:d0:2a:92:60:51:9c:1d:37:bc:f7:1a:73:68:
72:c9:95:d6:d7:b1:36:3e:31:31:b3:60:00:ff:a7:
7f:10:88:49:04:60:b9:22:6f:bd:ba:94:87:91:af:
ea:f7:61:8c:e0:12:59:78:21:83:e2:44:89:1a:9d:
94:c4:7f:81:a7:d1:61:37:b2:9a:3a:3a:b2:3c:b5:
d3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2A:6E:28:7F:4B:1D:2B:FB:CD:15:28:6D:2C:F8:F6:7B:79:6A:61
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OypuKH9LHSv7zRUobSz49nt5amE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:97:6c:b4:5a:ff:37:10:b0:08:b0:fb:db:53:e4:f0:e3:80:
5f:5b:d2:ec:cb:65:ed:3a:9d:ca:b3:83:18:67:4c:94:99:35:
d7:51:a7:aa:c8:70:51:54:aa:d5:63:55:8b:1d:30:79:d9:55:
fc:87:0b:14:18:aa:f1:f3:8e:9b:20:a9:e0:c2:bc:21:3c:24:
f9:28:36:7c:ab:76:63:28:34:ba:a0:50:26:d5:61:82:2f:ec:
06:e3:cd:59:63:19:12:c1:3c:5b:ec:4e:f1:0d:39:81:2b:df:
ab:9a:b2:6b:a8:53:c0:7b:1d:06:19:0c:2c:78:1c:63:ce:90:
0b:f1:fc:21:c1:bb:c9:67:bd:80:f7:53:25:20:2c:0c:96:3b:
99:e5:f6:bd:ae:cd:ec:86:7a:e5:fe:7a:34:6b:6d:6f:81:a0:
02:ef:68:22:f1:e2:cb:47:04:db:41:9f:18:2b:b1:41:be:41:
4b:a6:97:38:06:aa:42:be:88:5c:aa:f6:29:ae:cc:c6:db:55:
f6:e0:2c:40:1f:1f:08:c9:fb:29:86:57:6b:85:57:3d:e1:40:
82:ee:a3:dc:11:b8:c0:bc:85:00:b2:a5:58:52:a9:b5:ef:a1:
9f:b6:57:75:85:ed:74:28:66:9c:3e:48:55:97:14:62:9b:34:
ad:d3:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:50:19 2025 by rpki-client