Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dmDueA4HJBuYjHzLghXVDbCFRU8.roa
File: dmDueA4HJBuYjHzLghXVDbCFRU8.roa (raw, json)
Hash identifier: pee6hNTVlNuE6pCyzuGV63pqevZoqb2Z+cEXpNOmEmQ=
Subject key identifier: 76:60:EE:78:0E:07:24:1B:98:8C:7C:CB:82:15:D5:0D:B0:85:45:4F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5ED32027B33F01DD8FF31831108528A9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dmDueA4HJBuYjHzLghXVDbCFRU8.roa
Signing time: Mon 23 Oct 2023 23:16:16 +0000
ROA not before: Mon 23 Oct 2023 23:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5e:d3:20:27:b3:3f:01:dd:8f:f3:18:31:10:85:28:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 23:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7660ee780e07241b988c7ccb8215d50db085454f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f8:88:13:1e:65:a3:99:5b:b9:1b:4f:7d:91:
9c:80:91:c7:52:ff:16:b2:20:ee:3b:47:7b:88:47:
63:7a:55:03:7c:04:5b:ef:9a:d1:66:d7:0d:66:a2:
97:58:fa:7d:ac:51:5d:16:59:7a:cc:10:a2:8a:44:
22:f2:cf:8d:a3:cf:ae:cb:a6:93:2b:1a:c3:3b:e3:
60:83:a9:28:ea:56:c6:b8:21:af:3b:5a:31:3a:1d:
40:f3:ec:e9:90:ac:e9:7e:e0:77:7b:90:43:7e:95:
59:68:5b:ce:5e:22:7d:f6:5f:0a:ee:ae:22:77:4f:
b5:90:18:74:de:de:e6:49:91:f0:59:71:72:9e:48:
ec:e2:c2:f6:e8:87:c6:58:b0:b6:b7:8d:99:37:a4:
e0:e0:cd:72:f8:d8:31:b5:49:9a:1f:c7:0b:d8:f0:
3f:48:c3:b6:97:5d:4c:67:0b:e8:bf:48:63:0c:d1:
a5:57:19:aa:cb:e8:fa:ef:bb:4b:e6:9c:89:6d:d0:
d6:41:50:83:d0:c1:fa:ad:31:07:8e:bf:de:f5:98:
be:72:d2:44:62:e6:1a:c9:c4:1f:38:62:d4:f9:5e:
be:b6:4f:e6:8c:fd:4d:ae:19:63:4d:15:07:79:74:
67:8a:1d:5b:9b:d1:67:99:0b:32:ce:9c:e3:b7:f2:
a0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:60:EE:78:0E:07:24:1B:98:8C:7C:CB:82:15:D5:0D:B0:85:45:4F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dmDueA4HJBuYjHzLghXVDbCFRU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:6c:cd:57:69:d5:a0:58:0a:a1:11:7b:3a:08:b8:22:21:c8:
5d:0a:e7:1c:48:6f:10:a4:df:50:d9:62:8e:ec:d0:29:13:33:
24:05:a4:d3:e1:81:ba:f9:24:61:a4:cc:6f:92:91:f7:b0:0c:
29:48:02:eb:44:9b:aa:cd:74:32:6d:e5:2e:ef:82:68:47:15:
41:c1:07:7c:20:08:d7:16:11:9c:d3:9d:38:71:50:8c:fd:29:
04:1b:a5:ca:86:08:bc:54:8b:fb:19:bd:2e:b1:cf:d6:a4:b3:
88:48:ac:09:73:81:17:f2:47:f3:bc:b4:d6:a8:d5:85:8f:58:
57:a6:9e:be:ae:1d:15:cb:20:b5:fe:6d:0d:64:3c:71:ce:ba:
2b:73:15:89:81:22:cf:ec:0c:b3:85:9d:f7:a4:96:b6:2d:9d:
77:8b:60:43:20:07:1e:c6:6c:82:63:0a:d4:f7:85:0d:93:7e:
83:1b:92:4d:c8:21:b6:c9:64:9b:5c:7c:b5:50:00:74:8f:56:
80:4d:23:23:7c:86:5d:63:f9:6a:03:2e:16:4c:a3:cc:63:97:
14:80:6c:6d:39:6d:48:21:ce:81:77:2d:3c:cb:60:8d:ce:38:
30:d0:d3:57:0e:5e:78:49:97:3d:af:11:eb:2d:e3:0f:5f:6d:
8a:af:8d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:43 2025 by rpki-client