Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aWOgN9tezP7SN4YtvIUklVUXL_o.roa
File: aWOgN9tezP7SN4YtvIUklVUXL_o.roa (raw, json)
Hash identifier: zNLW++uYzQJfxs++Ioa/UHa49o+PubP3dK/BmHxzxeI=
Subject key identifier: 69:63:A0:37:DB:5E:CC:FE:D2:37:86:2D:BC:85:24:95:55:17:2F:FA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDE431AA691AD0DCCCDB4C8C2211BDD0A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aWOgN9tezP7SN4YtvIUklVUXL_o.roa
Signing time: Fri 17 Nov 2023 17:10:21 +0000
ROA not before: Fri 17 Nov 2023 17:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:de:43:1a:a6:91:ad:0d:cc:cd:b4:c8:c2:21:1b:dd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 17:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6963a037db5eccfed237862dbc85249555172ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:ca:bd:21:6c:be:82:bb:59:e2:be:ea:79:
6a:16:4a:4b:80:85:cf:63:0c:f4:16:00:c4:8a:cf:
0e:aa:16:b1:ba:63:b1:cc:20:c1:9f:9b:7d:57:60:
8a:95:4e:56:ec:cf:2f:9e:f1:58:3d:4c:bf:37:5b:
ba:c2:4b:d6:bb:5d:fe:7c:e7:9c:c2:4f:1d:46:65:
2a:83:11:f2:f1:28:fc:4a:f1:6d:ee:4b:d3:56:02:
ad:bf:df:4f:43:f9:7d:5e:6a:e8:43:c2:79:d7:d7:
79:41:51:0a:0f:fc:be:b7:dc:62:f5:03:58:94:b5:
93:4a:ed:eb:14:75:dc:d7:5f:01:c7:5f:dd:3c:b5:
a7:4c:64:fa:b7:c4:e8:cc:99:7f:53:33:17:06:5b:
74:22:46:00:d7:7d:a6:d2:ae:36:70:e3:31:1f:52:
dc:9f:4d:e0:da:63:7a:70:bd:e0:c0:e9:10:16:d5:
a6:5e:be:72:ff:35:b9:e5:9a:12:8b:dd:ae:e2:3e:
51:f5:d2:e8:13:b1:41:af:39:49:b4:55:f3:55:aa:
a5:2d:66:a6:c8:4d:f6:70:10:75:b8:a4:65:3d:54:
f4:78:ad:77:e8:58:64:bb:8a:c1:86:9b:d3:21:f5:
f6:f0:ea:f6:35:11:8e:57:0b:5f:b3:f4:f6:04:93:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:63:A0:37:DB:5E:CC:FE:D2:37:86:2D:BC:85:24:95:55:17:2F:FA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aWOgN9tezP7SN4YtvIUklVUXL_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:a7:4d:98:a5:56:ec:e7:fc:93:b7:96:5a:f4:7f:41:22:36:
c0:af:9f:d2:20:8e:83:e2:a5:3a:53:dc:87:3e:36:d1:7e:c5:
0d:a1:e6:53:74:f0:9e:d2:f0:3a:1b:3b:70:0b:b5:9d:90:06:
04:28:99:e0:b4:a8:5f:bf:da:f8:71:f6:d6:6c:c9:94:12:c0:
50:c5:9c:68:dc:fc:b6:70:58:ef:a4:0e:59:ec:79:f7:42:24:
3c:23:83:ce:57:72:e2:f4:2a:5c:0c:28:34:49:d3:97:53:f4:
4d:b3:39:d6:fb:67:5a:39:28:60:48:e0:b1:bc:25:d1:25:39:
e5:d1:0c:de:13:ed:85:04:12:01:c8:4f:eb:64:e4:fd:ab:22:
4c:7f:6e:cf:c9:a4:c8:76:5c:38:48:a3:ce:b7:7c:25:6a:ee:
99:5c:00:4d:61:45:9c:d6:60:8d:f2:44:21:ea:98:aa:b3:e4:
e0:15:ca:48:0f:cf:a7:9a:27:15:7e:67:70:c1:99:5d:68:04:
ed:dc:2f:54:f7:8c:ac:65:d7:20:ce:ae:2f:19:d8:af:dd:e4:
97:69:12:7e:3d:ce:13:57:62:aa:23:af:6a:0b:3e:13:3e:fe:
20:a4:79:10:d7:22:d0:76:52:6c:87:5e:2c:47:4f:13:67:ad:
f6:3e:8f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:29:06 2025 by rpki-client