Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cwtzDjSY8z3Uos9USRXyDzGLg2Y.roa
File: cwtzDjSY8z3Uos9USRXyDzGLg2Y.roa (raw, json)
Hash identifier: d8Hfwwdh+TakvwJlxMFT0lSTRO6zX6ceSwu6EnlRfZU=
Subject key identifier: 73:0B:73:0E:34:98:F3:3D:D4:A2:CF:54:49:15:F2:0F:31:8B:83:66
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA6AECEC8A2720E9438272CAF5DDF49B8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cwtzDjSY8z3Uos9USRXyDzGLg2Y.roa
Signing time: Mon 06 Nov 2023 22:09:15 +0000
ROA not before: Mon 06 Nov 2023 22:09:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a6:ae:ce:c8:a2:72:0e:94:38:27:2c:af:5d:df:49:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 6 22:09:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=730b730e3498f33dd4a2cf544915f20f318b8366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:43:7e:98:40:5f:f7:b1:7a:4d:7c:33:aa:
d8:d5:fa:42:d1:55:47:5b:6a:35:8e:55:97:93:ec:
61:d3:e1:39:7d:58:7c:82:2b:00:0e:91:ba:60:15:
c4:5b:c5:4b:55:74:4a:8e:ba:71:18:29:d4:dd:59:
8f:04:e2:e1:e8:0c:5b:fe:dc:51:67:a6:07:b2:b4:
20:10:70:8a:aa:43:41:25:75:f8:03:49:55:f6:c1:
60:b7:bc:67:cc:a6:73:6c:3f:06:55:92:f6:3e:36:
9d:1f:c9:5b:ba:0a:3d:fb:a4:8c:42:10:68:fd:32:
7e:cc:a5:7c:55:a1:8d:ee:5a:8c:c4:26:b8:2d:52:
d4:55:33:28:ef:ff:20:b1:d9:ee:a4:f6:40:97:aa:
c0:91:a8:90:40:9a:c0:e3:00:37:bd:03:7c:bd:c9:
02:0b:45:ef:2e:f5:0d:fd:5b:cf:cd:c0:8a:50:da:
e3:be:5c:7c:ee:71:6e:98:64:92:f7:fb:06:2f:66:
a5:1a:17:0a:91:05:2f:c9:9c:7c:b4:63:71:d4:fd:
69:f7:bb:f9:42:17:58:41:93:b7:f9:f7:a4:ba:61:
f6:3a:67:18:71:ef:60:51:22:dc:bd:55:f3:39:cd:
00:c8:8c:ea:53:7b:17:e0:94:35:53:14:52:e1:42:
f1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0B:73:0E:34:98:F3:3D:D4:A2:CF:54:49:15:F2:0F:31:8B:83:66
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cwtzDjSY8z3Uos9USRXyDzGLg2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:ff:d0:40:63:fb:96:f5:0e:8d:2a:2b:ae:8f:7f:8c:61:c5:
ba:5c:3a:f6:1b:66:45:f6:75:ae:1b:e8:60:f3:1e:cc:20:79:
58:0e:f6:1d:73:7b:a2:68:4b:41:61:44:83:15:2f:83:22:84:
0e:39:2e:de:57:85:08:a1:7a:a1:6d:42:3e:14:c8:03:cd:9f:
4f:93:e2:80:d8:1b:e0:d4:75:0a:f1:2d:2f:9c:d6:04:88:e7:
c5:15:93:1b:e8:79:61:c6:cb:7f:05:35:ca:c2:75:68:83:89:
bc:5c:c3:4e:8c:d6:0b:5b:dc:bd:4e:6f:0c:21:95:a5:0e:d3:
2e:93:1d:49:f4:d8:e5:34:d4:77:1c:0e:a0:21:a0:08:5f:ee:
31:19:da:16:9c:79:45:cb:b4:8b:86:31:99:da:e3:37:20:c6:
5f:ef:67:e2:04:73:5d:be:0b:99:fb:c8:2f:47:dc:56:07:ec:
66:c9:74:08:b2:e5:4b:a2:ca:eb:44:46:8b:75:de:4c:40:c2:
12:5f:08:60:53:26:65:34:54:28:00:47:5c:75:21:ca:d7:78:
8d:1d:97:62:cb:38:f5:f6:10:e6:ac:9d:2b:ec:9a:4d:97:0c:
a2:62:b0:10:bb:83:cf:92:6f:7e:9f:8f:cb:b9:06:21:ae:1a:
6b:8e:ff:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:15:57 2025 by rpki-client