Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bCyWoxSds5ogPkQb3ZO0lBuKStg.roa
File: bCyWoxSds5ogPkQb3ZO0lBuKStg.roa (raw, json)
Hash identifier: 7H2vr7OnXEuMD+a98bhl1GNAEHPMmIacMWjRLQnAvrk=
Subject key identifier: 6C:2C:96:A3:14:9D:B3:9A:20:3E:44:1B:DD:93:B4:94:1B:8A:4A:D8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7B2618824003E4969BA75427B5D4EC78
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bCyWoxSds5ogPkQb3ZO0lBuKStg.roa
Signing time: Sun 29 Oct 2023 11:16:16 +0000
ROA not before: Sun 29 Oct 2023 11:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7b:26:18:82:40:03:e4:96:9b:a7:54:27:b5:d4:ec:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 11:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c2c96a3149db39a203e441bdd93b4941b8a4ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b0:cd:c5:32:db:37:f1:61:1b:e2:7c:a1:8f:
29:e6:27:ec:c3:b2:3b:c0:9d:4a:59:bc:21:c5:72:
d6:c7:14:4c:09:d7:86:1c:03:01:04:93:fb:2b:e4:
79:3d:0e:a9:70:41:3e:64:a8:2d:86:f1:f1:14:b9:
76:51:e7:12:a6:8e:5d:28:96:e3:d8:18:86:88:a0:
c9:be:9e:68:f2:3d:eb:90:43:df:1e:1f:c9:2a:49:
06:e4:58:93:7a:30:e6:9e:7e:07:76:c5:03:3f:10:
37:e7:a5:b8:cb:9f:7f:dd:81:3a:c5:21:9d:25:52:
b1:ff:df:bc:60:49:37:f3:cb:40:c9:00:50:54:56:
b8:2d:07:77:b6:45:97:10:b2:28:64:2f:29:86:b6:
fb:83:b1:94:ca:96:b3:4b:a1:f8:fa:10:a2:5f:7c:
df:27:11:52:0c:70:36:ad:d7:8e:b5:ff:f8:c1:e8:
bc:5b:90:83:42:5e:74:e2:8c:5d:9f:a6:3d:a3:2c:
a4:88:8f:54:fb:81:53:1a:84:32:3d:58:55:27:85:
13:b0:89:16:67:a8:7f:15:e0:c2:88:98:cd:9f:fd:
a0:54:da:2e:30:b3:27:39:79:6f:32:65:24:21:68:
94:1c:47:09:2d:4d:a1:e4:04:dd:de:e7:93:2f:95:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2C:96:A3:14:9D:B3:9A:20:3E:44:1B:DD:93:B4:94:1B:8A:4A:D8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bCyWoxSds5ogPkQb3ZO0lBuKStg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:cc:83:2d:4f:f5:73:b3:77:c1:ec:ba:f4:f1:7b:57:d2:8c:
8a:77:e3:b8:23:1c:0c:4b:c0:97:c9:dc:31:24:c1:fc:23:44:
ed:33:42:15:d1:16:09:a6:a8:5a:55:9d:9e:93:a4:68:da:f9:
99:7c:dd:ea:d7:cc:7a:1b:83:63:be:48:cc:ac:09:78:14:82:
bf:f5:51:4b:70:39:19:42:64:81:71:4d:3e:36:b7:c0:cb:e1:
8c:32:27:86:ab:55:00:62:fb:20:06:37:cf:c1:20:ba:1a:bc:
40:e3:31:eb:05:87:86:8f:e4:3b:86:da:6c:9c:50:c4:8a:db:
ba:6c:c0:5a:85:86:9f:06:5f:5e:63:2d:00:62:31:76:bd:fc:
7e:64:fd:06:fe:dc:0c:ca:ab:96:3f:66:bd:a7:42:1d:a4:9f:
4a:8c:d0:b6:03:c3:a7:d4:c7:07:67:4d:b7:bf:0b:84:7d:63:
0c:b3:2d:2e:83:95:84:9b:11:22:a3:f9:23:22:8a:7d:24:c7:
2f:02:ac:c3:2d:48:0e:3b:1e:51:27:31:c2:3e:47:86:4c:f9:
4e:81:5e:8e:ab:f2:50:3e:cf:b2:cb:21:b4:4c:6e:01:61:6f:
61:39:12:6b:1f:13:d2:33:f8:0d:a9:76:14:95:35:32:93:1c:
64:fb:47:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:46 2025 by rpki-client