Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dB47Tt3Ip1yVqNQ_J9ZCO7JGEOw.roa
File: dB47Tt3Ip1yVqNQ_J9ZCO7JGEOw.roa (raw, json)
Hash identifier: Dk7ubJY7F5BSbuNyMnlyQfY6NeJ1rhTYkAm3nXdWriA=
Subject key identifier: 74:1E:3B:4E:DD:C8:A7:5C:95:A8:D4:3F:27:D6:42:3B:B2:46:10:EC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF38543AED2FAFD6EA1C8EE60EAB41E24
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dB47Tt3Ip1yVqNQ_J9ZCO7JGEOw.roa
Signing time: Tue 03 Oct 2023 03:11:51 +0000
ROA not before: Tue 03 Oct 2023 03:11:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f3:85:43:ae:d2:fa:fd:6e:a1:c8:ee:60:ea:b4:1e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 3 03:11:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=741e3b4eddc8a75c95a8d43f27d6423bb24610ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:c7:68:43:48:64:bc:d3:ac:72:25:3b:26:
9a:6f:66:44:2a:99:b4:88:7a:b3:76:6d:1a:54:bf:
86:0e:a4:83:ed:d0:78:eb:b0:97:0a:67:be:49:46:
e5:ea:e4:93:5e:8d:71:73:c4:db:dc:ac:7a:1b:19:
f7:0c:60:f9:ab:29:46:38:80:c7:c1:62:28:5b:54:
d6:7c:1f:e9:b1:ca:ba:18:4b:a3:6a:70:d1:b7:4e:
d9:2c:f5:9b:f6:00:5b:33:10:6c:9b:1a:3a:ba:82:
d3:df:56:08:e4:13:80:39:31:ef:e8:52:fd:fe:e4:
3b:f8:f0:5d:9b:76:d9:6e:16:f2:9b:65:cc:71:b8:
2d:a8:3a:95:cc:b4:68:60:62:d0:8d:21:23:28:e7:
20:1a:62:05:69:72:d7:ca:f1:a1:b4:98:3b:16:74:
c4:b0:b6:77:fa:39:0d:df:59:f7:13:d1:c3:81:10:
7d:e5:35:9a:42:29:e4:f0:61:03:b3:31:aa:d1:5e:
c3:ba:f8:1b:b7:ba:b2:25:4f:f9:92:17:22:70:d5:
ee:72:26:9a:ce:7e:d8:5d:52:28:73:49:dd:26:f3:
6a:21:5a:7f:8c:95:8c:a4:8b:9e:83:7f:d4:9a:04:
a7:7e:c0:6e:05:1e:76:de:03:ed:58:82:d9:68:1a:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1E:3B:4E:DD:C8:A7:5C:95:A8:D4:3F:27:D6:42:3B:B2:46:10:EC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dB47Tt3Ip1yVqNQ_J9ZCO7JGEOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:9d:2f:12:5e:34:a8:ad:a0:cd:36:1c:83:3d:33:8e:86:d3:
c2:dc:b0:6f:1e:fe:8a:77:a9:8f:60:78:6d:3a:78:b4:71:80:
73:a6:8a:9f:58:e9:71:9c:f8:e8:50:84:71:e4:00:f6:4a:61:
e7:59:f7:9e:87:84:2e:3c:6e:07:f5:49:8b:54:4a:a6:22:08:
f4:01:67:39:ab:25:c7:c2:cc:f6:6e:d4:49:da:f5:4a:45:e7:
6b:39:dd:0f:89:53:9d:8a:03:71:e9:fa:d1:52:72:f3:da:86:
6e:1d:a4:31:2e:b6:0b:a2:7d:de:2d:16:7c:9d:be:24:9f:f8:
a6:be:35:b1:f0:02:d4:41:b5:0c:62:8e:d1:ac:c6:50:ba:93:
89:79:93:fd:4b:3c:4f:c7:6f:40:8a:15:eb:9c:49:4a:5d:65:
c8:72:d3:b9:f2:99:b3:7a:6e:ba:e6:74:17:6b:c4:8e:b0:ea:
7f:b6:4b:16:8d:7c:e7:1c:7c:7e:2e:68:58:46:d4:9d:fe:a3:
88:f7:cd:00:50:f9:e5:7d:b6:42:a0:fe:21:16:05:ff:c4:af:
38:4f:ca:41:db:c7:1a:8c:24:d2:33:b1:1a:c2:65:5f:0b:17:
b7:ac:7b:38:ea:a5:c2:b8:22:54:ed:78:07:37:95:ae:e9:48:
a8:a0:11:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:03 2025 by rpki-client