Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/b7bD7T6wcp14If09CsSIeDQsY3o.roa
File: b7bD7T6wcp14If09CsSIeDQsY3o.roa (raw, json)
Hash identifier: e2ePm7Va6Ykrkx/wJqe/HHKcJb8zDcIzaj1aYNosKEU=
Subject key identifier: 6F:B6:C3:ED:3E:B0:72:9D:78:21:FD:3D:0A:C4:88:78:34:2C:63:7A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDC5AED1E2044F97D04DE9F5D3A248B69
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/b7bD7T6wcp14If09CsSIeDQsY3o.roa
Signing time: Fri 17 Nov 2023 08:17:08 +0000
ROA not before: Fri 17 Nov 2023 08:17:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:5a:ed:1e:20:44:f9:7d:04:de:9f:5d:3a:24:8b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 08:17:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fb6c3ed3eb0729d7821fd3d0ac48878342c637a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:64:e0:57:33:0e:8d:84:5f:ce:e0:c1:79:da:
5b:a7:a5:db:f8:8d:e8:02:45:42:59:87:22:f5:d6:
b4:3b:08:24:09:8b:4f:d4:44:37:48:1c:82:40:c7:
4d:1f:57:db:18:8e:b4:26:6d:4c:c9:3c:45:61:87:
e6:6f:d9:34:5e:91:8b:f8:7a:d6:33:46:88:3b:21:
6a:9f:ad:08:f0:2e:02:c4:50:ab:58:c0:ec:62:68:
43:47:2d:30:64:db:a7:8a:47:6b:01:da:16:a7:81:
df:94:98:42:30:bb:bc:a2:02:29:fe:08:66:7b:d2:
da:e3:60:4b:49:ff:f2:21:c0:66:ed:83:28:b0:4c:
2e:e5:20:2f:b5:32:48:74:03:4d:eb:99:f4:99:e1:
a7:ef:df:4f:2a:a1:e5:a8:e2:f7:57:38:ba:6a:d0:
bc:dc:d4:13:54:68:8a:66:ff:9b:eb:fe:a5:b6:98:
d1:b7:c7:d4:c5:07:f2:a0:3a:8e:9a:7f:69:73:14:
0d:35:35:ff:24:d8:01:1a:ab:4e:d7:80:55:66:fe:
6f:4b:0f:b0:e4:7b:1c:76:00:3f:2a:e5:7c:d7:bc:
ff:34:41:f3:f4:42:a0:f1:db:aa:0f:f8:4e:bd:fc:
73:69:0c:a6:0f:01:2c:9c:8f:fa:f0:ee:f6:ee:a9:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B6:C3:ED:3E:B0:72:9D:78:21:FD:3D:0A:C4:88:78:34:2C:63:7A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/b7bD7T6wcp14If09CsSIeDQsY3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:03:ad:6b:7e:49:a3:d3:70:3d:bb:ab:e5:59:f1:3e:6e:fc:
f3:2e:87:5f:09:c8:d2:13:fb:23:27:70:9f:c1:ce:4f:e2:90:
19:d2:89:1c:51:d1:12:87:51:ca:09:2b:3e:e1:35:01:df:53:
8d:44:d9:4d:90:95:18:92:63:79:44:45:6a:c7:1f:e9:e7:52:
67:41:7d:64:ce:2e:23:f4:7c:63:ca:24:8f:4e:57:65:ee:a8:
a9:24:6d:22:b9:83:f5:86:08:2a:17:fb:d4:7e:c3:66:8c:8b:
3d:c9:06:6f:3a:ea:5c:69:17:e7:11:e1:db:cf:f2:7f:d6:d8:
71:af:a8:b7:45:ba:6c:00:65:8d:bc:4c:94:b8:ea:0d:28:ed:
9c:84:2d:32:59:0f:46:4a:09:6f:4b:19:b5:55:1c:6c:80:e7:
c2:20:45:b9:f7:55:6a:46:d9:b9:08:52:fb:96:0a:71:35:ce:
a4:d4:35:60:ef:b4:52:2d:8e:22:4f:60:5d:8c:f4:57:b0:39:
c3:58:c7:74:0d:ec:44:7a:d7:d3:1f:80:d8:25:c3:65:a9:47:
ac:44:79:05:32:a2:a3:fe:40:46:19:e7:96:05:eb:91:62:ef:
6f:d7:8a:84:5e:7e:1c:21:7a:5a:f0:08:51:fa:0d:59:42:97:
b8:64:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:22:11 2025 by rpki-client