Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a-Om5Cx5r7ME81iDy6kP1bCmonk.roa
File: a-Om5Cx5r7ME81iDy6kP1bCmonk.roa (raw, json)
Hash identifier: 3JkZHWhg95vKNROVptRJWJNR3182aggDMbgmiGjeiTk=
Subject key identifier: 6B:E3:A6:E4:2C:79:AF:B3:04:F3:58:83:CB:A9:0F:D5:B0:A6:A2:79
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC3E5E1E0BA8878F0717E11C6D70DF7DC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a-Om5Cx5r7ME81iDy6kP1bCmonk.roa
Signing time: Sat 23 Sep 2023 21:15:37 +0000
ROA not before: Sat 23 Sep 2023 21:15:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c3:e5:e1:e0:ba:88:78:f0:71:7e:11:c6:d7:0d:f7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 21:15:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6be3a6e42c79afb304f35883cba90fd5b0a6a279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7d:7a:7a:ae:23:33:99:05:9a:2f:b6:c7:a2:
e9:0f:13:b8:c9:1b:ea:2a:e7:f6:1b:c6:1f:0f:fe:
f0:a4:1b:63:80:84:a9:7a:0c:dd:7d:06:74:d4:5a:
01:e5:d0:29:74:44:00:0d:95:db:dd:f9:d2:f7:8b:
de:8b:fe:7d:19:07:f3:34:86:72:7d:8f:cb:3e:47:
2f:6b:96:f0:ed:e4:35:ad:7b:d4:53:7e:12:af:8d:
6d:d2:2b:1f:b1:3d:f7:ac:08:76:78:0d:3c:9b:db:
02:07:52:39:00:b4:8d:9f:7d:cc:4d:18:0d:07:a1:
6a:49:32:09:63:41:6b:e1:3e:95:ff:ba:3f:3c:08:
16:1d:a0:81:f2:f1:40:d7:1e:b6:1a:de:9b:a7:69:
e6:82:6a:14:b4:0d:a4:9b:62:17:96:9e:ad:9d:08:
e3:53:11:14:fc:01:d8:68:56:5e:62:91:a0:80:c4:
48:75:52:dc:5a:7f:79:7b:6f:d4:65:28:21:b0:d8:
63:f2:9f:f9:ec:68:98:73:16:55:45:0d:81:ed:fb:
2c:13:38:06:f4:79:d7:04:73:58:56:dc:7d:b7:d4:
a3:8b:1a:66:20:05:27:40:d4:0a:cb:1b:a3:35:1d:
47:ce:3c:18:5e:04:15:34:dd:6d:27:26:b0:fc:dc:
05:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E3:A6:E4:2C:79:AF:B3:04:F3:58:83:CB:A9:0F:D5:B0:A6:A2:79
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a-Om5Cx5r7ME81iDy6kP1bCmonk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:69:d2:7b:31:44:a2:8a:4c:b7:8c:b4:e9:fe:f9:a1:f5:f2:
49:8c:29:ba:47:91:21:16:86:f1:bc:1d:1c:f5:96:2a:3b:8e:
22:65:83:fb:69:6a:ba:4e:06:07:73:b9:77:7e:18:73:3f:24:
0c:97:6c:cb:82:af:62:c7:95:63:f0:45:31:0b:ca:ba:d2:1c:
a7:49:f4:be:2c:37:6b:fb:f5:bc:45:d8:32:a8:9c:96:72:78:
fa:6d:58:51:d2:c1:c5:7e:15:71:25:4a:3f:29:f7:65:1f:f7:
57:42:2e:1e:71:19:8a:45:03:f5:90:4f:15:6e:7f:3e:1c:74:
50:84:9b:fa:3b:0b:87:b5:6d:b8:68:e8:ad:3f:83:b1:42:54:
fb:f0:d9:fc:c2:c0:54:84:bc:56:d4:74:7a:79:88:e4:dc:05:
c4:dc:6c:66:79:ee:f9:77:7b:e9:bd:a9:ba:2d:c2:8c:51:e4:
dd:a6:29:c2:e6:57:aa:4d:06:8b:b6:d6:e3:bb:0f:0f:f1:45:
34:80:60:d7:85:7b:c0:ef:3b:46:3a:60:a8:74:c2:26:bf:70:
2f:d9:3c:be:9d:ee:04:7b:32:62:ec:b6:15:e5:3d:9f:97:de:
41:41:90:fb:5f:60:9b:a6:b8:e9:f4:bf:63:b6:6d:64:50:f3:
c3:cc:14:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:35 2025 by rpki-client