Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dUiLAOBuiRombdt0KkA5hCJNj-o.roa
File: dUiLAOBuiRombdt0KkA5hCJNj-o.roa (raw, json)
Hash identifier: 6xoM+a5Ne2xJ81YniJ/FHw/YxRGLMLMRPU9xrBCeoDg=
Subject key identifier: 75:48:8B:00:E0:6E:89:1A:26:6D:DB:74:2A:40:39:84:22:4D:8F:EA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4F1F370DD457C1B41BCB9919ADD30A7C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dUiLAOBuiRombdt0KkA5hCJNj-o.roa
Signing time: Sat 09 Dec 2023 15:08:14 +0000
ROA not before: Sat 09 Dec 2023 15:08:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:4f1b:b913/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4f:1f:37:0d:d4:57:c1:b4:1b:cb:99:19:ad:d3:0a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 15:08:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75488b00e06e891a266ddb742a403984224d8fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:3a:37:3e:1a:2b:57:26:7f:fb:1d:57:b2:
06:6a:a4:0e:97:b3:6b:a2:87:2b:29:8f:28:3f:96:
0f:53:63:c6:56:cb:3b:2e:d0:e6:6b:c9:67:da:bd:
12:f3:3d:8c:35:bb:71:c4:e0:1a:78:9b:26:d9:5a:
f5:31:62:bc:6a:67:31:2a:a8:c6:f9:12:ab:59:05:
24:2d:89:8b:d1:16:09:24:3f:5f:ac:a4:25:4b:9d:
9e:cf:f6:dd:82:8b:bc:35:f5:22:42:db:0f:f9:a0:
29:06:09:c7:55:89:f1:35:be:71:1c:83:79:56:6e:
c2:c6:9d:8b:f0:24:f4:3f:1e:ed:59:22:f5:40:66:
ab:04:ae:0f:78:f1:95:99:e7:93:f2:6c:ef:df:73:
09:72:ba:a4:72:48:02:74:78:21:27:02:7e:7e:7d:
42:48:2f:0a:a6:31:77:0b:c1:a9:7c:ed:0b:e9:0a:
d8:a2:ec:4d:8a:73:fc:7b:a0:48:25:26:f1:04:d0:
c8:f3:23:c4:b7:92:7f:3b:78:aa:47:7f:14:e6:8a:
70:b9:b3:4c:38:a4:4e:4e:03:7f:91:6c:23:0c:57:
2d:c7:2e:11:00:24:1d:47:a1:dd:5f:7a:40:4d:72:
d2:e4:f9:4f:e7:47:3a:c8:0a:dc:9a:93:0b:cf:b5:
5f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:48:8B:00:E0:6E:89:1A:26:6D:DB:74:2A:40:39:84:22:4D:8F:EA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dUiLAOBuiRombdt0KkA5hCJNj-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:8d:70:a6:71:7a:dc:b8:0e:30:5f:e7:dd:09:c6:81:82:67:
27:2f:f9:3d:d1:0c:02:63:d4:2d:fe:7b:b2:2e:9f:cb:8e:fe:
bd:73:13:1d:a8:28:75:23:ef:98:72:52:1e:a2:e6:86:2e:c2:
79:60:4f:fe:0b:ec:39:ae:fd:de:39:6e:80:75:69:d0:0c:cb:
52:b9:fe:f7:21:b9:40:d7:2e:71:b5:f9:6a:e6:b3:7d:52:4d:
4d:44:f7:32:ad:ac:67:3d:ab:ff:96:30:96:5b:78:f4:a7:03:
9b:fd:91:d6:30:eb:61:9f:81:31:09:b3:7b:93:20:7d:b4:56:
70:47:59:6a:d3:bb:88:43:e8:92:40:88:1e:9b:42:97:b8:14:
2e:65:68:56:a8:18:18:24:e1:1e:e4:55:bd:6d:c4:3c:ab:5a:
34:af:7d:c0:9b:91:1e:1a:85:89:0a:00:64:35:fe:cc:ac:b4:
b8:2b:1d:21:73:cf:e5:30:ee:c7:8f:d3:1a:b8:bb:6d:7b:31:
36:b0:75:78:2d:0f:90:86:8e:72:63:76:ad:eb:c6:6b:1b:75:
42:ff:aa:03:6a:53:eb:db:e4:6c:f8:84:50:13:65:9d:24:0b:
6c:41:00:a1:b2:9b:4f:6d:b1:67:78:46:3f:70:21:9d:2b:b9:
74:b9:5c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:06:50 2025 by rpki-client