Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_OxLqkRqKT1os1e_AeRbr5l1kE8.roa
File: _OxLqkRqKT1os1e_AeRbr5l1kE8.roa (raw, json)
Hash identifier: nN1C5abGCup+MXPNOyTTuzgmRMJI0V3jua6poZCfppU=
Subject key identifier: FC:EC:4B:AA:44:6A:29:3D:68:B3:57:BF:01:E4:5B:AF:99:75:90:4F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACBD647DAB97AB0BD72E56CD8472EA09B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_OxLqkRqKT1os1e_AeRbr5l1kE8.roa
Signing time: Mon 25 Sep 2023 10:15:32 +0000
ROA not before: Mon 25 Sep 2023 10:15:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cb:d6:47:da:b9:7a:b0:bd:72:e5:6c:d8:47:2e:a0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 25 10:15:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcec4baa446a293d68b357bf01e45baf9975904f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:bb:4c:41:aa:f7:5e:2b:e5:fb:1b:19:c3:
fe:83:f2:17:54:db:17:6d:cc:e9:99:89:bf:aa:a4:
4e:b0:1c:eb:53:e0:20:2b:ff:e7:d2:a5:eb:e8:4d:
ee:a3:fd:89:f1:c0:7e:b7:c3:ab:9d:19:2c:6a:ff:
9f:25:8d:e7:09:03:9d:88:39:19:a6:dd:9f:04:8f:
33:a1:f2:42:85:32:df:93:b4:c5:33:19:3e:d4:cc:
ba:24:87:63:3f:d2:7a:4a:e8:c9:96:83:0d:16:ea:
64:ee:c9:77:ff:1b:75:c1:d6:19:f7:2e:1e:84:43:
6d:02:48:9d:d8:05:6a:78:2c:61:f4:9f:fd:69:67:
21:f1:b9:87:95:31:0b:47:e8:52:76:b9:7d:37:ed:
95:6f:81:cb:f1:5b:ec:79:ef:c3:7f:0a:cd:35:21:
8c:29:37:d8:92:73:50:37:69:9c:01:9a:a4:49:58:
31:b8:ff:c7:f5:4c:ec:91:ba:92:3c:1b:e1:cf:18:
23:e9:e1:a9:fc:ba:1a:fc:11:1b:36:81:63:bc:4b:
73:bb:d1:56:c9:e6:d6:5f:bf:20:5c:bb:64:e3:34:
ed:f0:d9:7b:8e:74:4c:52:fc:94:0f:0a:ab:c3:de:
60:57:80:5b:ba:ac:da:68:1d:6d:5a:11:1b:97:8f:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EC:4B:AA:44:6A:29:3D:68:B3:57:BF:01:E4:5B:AF:99:75:90:4F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_OxLqkRqKT1os1e_AeRbr5l1kE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:26:45:4b:bb:17:49:b7:c1:56:68:e5:a2:db:da:b4:e0:26:
f1:bc:3c:16:13:85:67:a1:44:b3:45:ce:b3:7e:32:19:28:77:
ed:df:04:45:44:eb:11:f3:59:91:46:2f:60:65:a3:d1:66:1a:
29:6a:44:dd:65:d8:71:aa:6a:f0:0d:f4:a8:bf:b4:bc:87:7f:
52:ff:c6:cd:f4:33:28:80:d9:e2:07:39:f7:f4:fe:cb:3f:84:
ee:80:7f:01:ad:f9:fa:85:9e:9b:52:43:c2:d6:55:fe:48:d6:
38:50:60:e7:f1:c4:47:47:83:fa:d4:6e:40:b4:cf:0b:53:97:
bb:26:b6:2f:06:2c:26:bb:fe:b5:8c:6f:6b:dc:03:a4:a6:b2:
2e:11:87:8f:9e:35:30:d3:7e:9a:0e:8f:aa:f2:47:8f:40:69:
ca:af:67:fa:4f:a1:6e:58:8a:b4:8a:0a:8d:3d:30:d5:38:a2:
26:fe:fc:c8:da:b3:1a:d1:db:49:b9:11:77:eb:9a:c1:73:43:
fd:4c:cd:19:02:aa:c4:e2:09:02:64:49:04:96:20:a9:aa:43:
6a:9b:fb:98:8b:09:78:21:26:23:6e:f9:bc:d5:74:58:29:58:
cf:a4:e5:81:a3:64:b7:52:fc:1c:cd:7f:4d:25:37:0f:ff:7d:
47:a7:90:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:54:56 2025 by rpki-client