Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d0uPqFDPs2PA7NGMUE_5kAjt9jA.roa
File: d0uPqFDPs2PA7NGMUE_5kAjt9jA.roa (raw, json)
Hash identifier: /sEcW/I46GTYNJezCSN+QlHiDeI9vVknJb2F1WS4MzM=
Subject key identifier: 77:4B:8F:A8:50:CF:B3:63:C0:EC:D1:8C:50:4F:F9:90:08:ED:F6:30
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2098A184880E8DADBF03CE927AA562A7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d0uPqFDPs2PA7NGMUE_5kAjt9jA.roa
Signing time: Wed 11 Oct 2023 21:15:55 +0000
ROA not before: Wed 11 Oct 2023 21:15:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:20:98:a1:84:88:0e:8d:ad:bf:03:ce:92:7a:a5:62:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 21:15:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=774b8fa850cfb363c0ecd18c504ff99008edf630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e3:bd:bf:be:81:0d:5f:87:22:0d:72:e6:82:
d7:86:44:00:3a:2c:09:69:ae:9e:24:e4:22:a2:89:
42:10:a5:a0:bb:48:73:2d:36:92:51:9f:f8:4b:d5:
00:ca:4c:cd:0a:6b:ee:6f:da:fe:c8:ea:79:d0:ea:
01:0c:02:73:9d:ba:bb:ff:48:da:65:a3:61:05:78:
e9:a8:ff:1c:13:15:b5:9b:92:ee:cd:99:9a:15:7d:
5a:d3:c7:54:2e:19:90:1b:6e:43:19:54:6e:96:c7:
11:60:df:59:c0:a1:28:c0:b9:d1:8f:f2:63:4d:4e:
74:6c:9b:c1:e7:ea:0d:c6:09:cb:77:c4:13:96:97:
9d:aa:17:41:a9:b5:2f:71:48:14:cd:51:6e:b3:03:
e8:d9:78:99:02:93:30:ae:7f:87:5c:bb:a9:8a:5e:
44:9f:5d:24:0f:66:70:e0:9d:5f:7c:f3:44:3a:e6:
9e:fe:25:25:3d:86:65:92:4a:16:75:9c:e0:36:f4:
08:a7:3e:89:c4:5c:e3:49:93:bf:11:a2:86:34:c5:
ec:58:5a:00:d8:25:1a:2e:26:a5:13:35:d1:22:8b:
da:c5:c5:44:6e:12:63:0e:30:b4:47:38:c4:e5:b3:
1b:41:24:74:d6:ad:5e:ba:86:49:0e:9c:42:96:98:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4B:8F:A8:50:CF:B3:63:C0:EC:D1:8C:50:4F:F9:90:08:ED:F6:30
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d0uPqFDPs2PA7NGMUE_5kAjt9jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:20:2e:23:56:99:4d:4e:1c:15:56:bb:06:30:a8:5f:33:4c:
a1:fe:00:8c:df:01:bd:76:b4:17:68:48:c4:fc:3d:08:3d:97:
23:47:e3:90:c8:1d:13:1a:de:08:29:ff:2f:9f:1f:e0:81:1c:
85:29:51:a0:ae:4a:a6:0c:1c:4c:86:a0:b4:ef:a6:d8:b9:79:
3a:1c:12:72:0b:05:5b:a4:70:6b:78:48:fd:6e:d5:ad:41:ff:
91:1f:d7:80:0e:0e:aa:4b:46:36:6d:ba:40:2c:29:c1:38:59:
41:de:1f:f6:f8:df:54:c4:9b:a8:af:7f:5a:32:c0:60:57:a9:
59:d1:4c:18:02:1b:97:7b:b1:9b:83:a1:d7:e5:5e:c8:76:ba:
cc:26:94:f9:dc:f5:ef:8a:4d:85:dd:59:a7:55:61:7a:40:b3:
be:3e:9a:55:6d:2e:72:10:5b:d5:0b:39:e1:8b:e8:b6:73:ac:
53:c9:e5:e3:9d:3b:5a:9f:76:b5:2c:39:7c:55:f5:23:4d:02:
c4:e6:92:0a:bd:f1:ed:ac:4d:26:0b:29:b3:05:4c:d0:ea:5c:
2a:c3:5d:1e:d9:05:51:18:96:87:ea:f4:1f:60:30:13:dd:fc:
89:64:bc:35:0d:bf:df:19:60:d7:5a:d0:7b:00:0e:fe:28:40:
2b:af:c0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:57 2025 by rpki-client