Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aQ9OjlXxZ6ahwUJ0aq6EwKZEZxU.roa
File: aQ9OjlXxZ6ahwUJ0aq6EwKZEZxU.roa (raw, json)
Hash identifier: xRdGNcizRkvsbEAz3k/hZHtI28m8r4TndMCeMHbfYMQ=
Subject key identifier: 69:0F:4E:8E:55:F1:67:A6:A1:C1:42:74:6A:AE:84:C0:A6:44:67:15
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5036D805903F074B77E7C86B0472A43F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aQ9OjlXxZ6ahwUJ0aq6EwKZEZxU.roa
Signing time: Sat 09 Dec 2023 20:13:40 +0000
ROA not before: Sat 09 Dec 2023 20:13:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:50:36:d8:05:90:3f:07:4b:77:e7:c8:6b:04:72:a4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 20:13:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=690f4e8e55f167a6a1c142746aae84c0a6446715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:5b:fd:0f:75:cf:13:56:57:8f:7a:44:61:
bf:98:08:92:38:ec:b0:c0:71:d8:05:75:57:a3:d8:
d3:f5:63:7d:57:37:70:8c:fc:f2:be:d2:5c:8c:8f:
f6:a5:18:f8:fb:bd:e5:47:7f:f3:1a:7b:f9:90:2b:
05:e3:1b:1f:42:ce:f0:c6:b0:77:be:3c:7f:f4:6c:
a6:a6:21:5d:30:5e:9e:d1:76:2f:99:37:1a:d5:27:
6f:c0:9b:a2:ef:2a:1d:57:54:a2:66:e8:29:ed:2c:
34:4d:e2:51:65:8e:68:4f:10:34:ff:e3:c4:c7:35:
e7:29:0b:20:96:4c:7a:a9:9e:2f:bd:f8:c5:5c:34:
73:c5:b5:39:ee:d7:2e:e9:3c:d1:8b:c9:e7:fe:0b:
eb:10:00:8f:13:ce:44:a2:18:fc:62:73:89:00:12:
8f:44:5e:d0:57:40:f4:5e:e1:b1:c9:b2:b2:93:8c:
3b:1d:33:da:af:48:9b:ed:cd:c1:76:17:15:89:2d:
94:96:9b:13:c0:dc:f8:5d:f3:c8:06:f3:e9:05:7b:
5b:01:db:13:b0:a8:bd:e8:16:e6:e7:95:61:9b:72:
b9:87:3d:bc:5e:cc:39:a0:10:d6:1e:95:a7:cb:21:
ee:30:d5:55:cf:28:25:24:01:5c:47:07:28:dd:7a:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0F:4E:8E:55:F1:67:A6:A1:C1:42:74:6A:AE:84:C0:A6:44:67:15
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aQ9OjlXxZ6ahwUJ0aq6EwKZEZxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:38:c0:92:51:e2:32:39:cb:4a:33:b7:8d:10:47:dd:23:8c:
ad:8d:dc:d8:37:a2:f5:30:b0:7e:0e:dd:3f:98:dc:22:70:63:
df:70:6d:af:71:ab:83:0b:af:69:82:97:b0:57:17:01:14:68:
b3:e8:1d:01:e8:4e:1d:dd:cb:2e:7f:e2:6b:e2:93:ff:b7:59:
cf:4d:96:57:df:a1:07:80:bc:ae:32:e4:88:6f:70:f2:14:e8:
29:e4:0d:14:68:e7:14:63:f5:0b:0d:3b:43:21:cb:58:70:4a:
d1:6c:1c:b3:1f:55:43:b1:42:36:f5:74:43:17:90:54:bd:23:
e2:53:0b:cd:7d:65:83:1d:a3:c6:23:5c:f7:a4:9b:9b:23:98:
8d:59:cb:9b:54:70:dd:fb:e0:1e:e0:14:af:40:9f:94:b8:9e:
31:95:48:03:4f:a6:20:83:a8:c5:ce:a8:f1:ad:45:22:a8:bc:
b1:e2:b0:4f:b9:ef:12:fb:16:62:85:50:ec:20:99:bf:e6:4f:
e9:81:b3:d3:ab:d3:df:9f:b7:78:2a:50:ff:d7:47:68:ae:5c:
70:02:30:3e:3c:3a:1f:a9:4b:c0:58:70:84:fa:ef:d7:01:b4:
3a:d0:76:40:ce:e4:b7:ea:bb:e5:d4:be:00:a3:c2:c3:46:47:
27:2d:cb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:08:39 2025 by rpki-client