Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/h_dlja-nkm1B4MjrHZ7cW_O2S4g.roa
File: h_dlja-nkm1B4MjrHZ7cW_O2S4g.roa (raw, json)
Hash identifier: aOtM+R7ZkY/cU4sPwfya/Lm+y0C88tgF9Zwqe7ivnr8=
Subject key identifier: 87:F7:65:8D:AF:A7:92:6D:41:E0:C8:EB:1D:9E:DC:5B:F3:B6:4B:88
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C593972A761F7A9AF570EF361106D6B6B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/h_dlja-nkm1B4MjrHZ7cW_O2S4g.roa
Signing time: Mon 11 Dec 2023 14:13:06 +0000
ROA not before: Mon 11 Dec 2023 14:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:39:72:a7:61:f7:a9:af:57:0e:f3:61:10:6d:6b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 14:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87f7658dafa7926d41e0c8eb1d9edc5bf3b64b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:12:82:af:d7:42:7b:88:1d:39:e3:2c:dc:
00:15:a6:cd:12:67:9c:ed:4c:58:74:38:c0:cb:4e:
00:7f:37:c6:da:52:1c:1b:d2:59:c4:38:c4:bb:1c:
6f:db:b0:43:22:c2:d7:dc:70:d8:05:91:79:97:ce:
7e:15:4f:36:56:b5:75:10:a3:62:45:05:e8:86:64:
24:39:38:8c:69:d3:9b:98:94:35:79:01:8d:c2:36:
17:ed:2e:e4:ec:5b:41:cb:27:b1:93:00:4c:a8:0a:
2c:05:29:4c:f3:7d:66:b0:77:03:40:1a:ec:82:c5:
07:4c:c8:86:3f:b6:d3:97:dd:f1:1c:b4:fa:93:6b:
7b:c0:fc:46:a8:52:38:3a:ff:2d:15:1e:a1:f5:76:
0a:08:57:4d:d7:5f:e9:c1:d9:cf:79:92:3a:bf:4e:
b3:18:be:80:1a:97:79:ab:0d:cc:ce:7f:ce:0a:1c:
d8:e0:84:aa:76:f9:ae:94:f3:6a:e8:08:5f:04:84:
62:ef:0c:c8:51:cf:14:ee:ef:23:25:9f:5a:65:8f:
96:81:4d:e5:c3:45:05:cd:d2:81:c2:87:9a:75:29:
ea:6d:fd:88:19:66:e6:6b:54:28:9a:22:20:17:9c:
e8:8c:dd:12:f2:ab:e0:9f:1f:d0:99:20:2d:9b:57:
3a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F7:65:8D:AF:A7:92:6D:41:E0:C8:EB:1D:9E:DC:5B:F3:B6:4B:88
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/h_dlja-nkm1B4MjrHZ7cW_O2S4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:3c:11:d3:46:d5:cf:34:5f:ac:5e:a6:d9:aa:8f:c8:7a:4d:
d8:b5:cc:91:29:1d:07:35:6b:84:e0:e1:35:9b:cd:48:17:99:
2f:cc:cd:4b:0e:e8:cb:8c:0a:f8:93:5d:71:9e:9c:68:1c:1d:
2f:d2:a0:d2:bf:1a:48:a1:0a:23:0c:0e:c6:db:85:c9:02:12:
4a:56:25:46:fd:27:9c:f3:5b:7c:45:ea:20:d8:de:fc:6d:a8:
66:8b:40:8c:5d:a3:0a:69:85:4d:f3:1e:b6:fb:6e:98:1c:1c:
e6:8a:ef:f8:d7:89:bd:ed:1e:7a:ec:1c:c0:a2:4e:e6:84:73:
b5:8f:4a:f0:d6:73:a8:bd:86:aa:5b:5e:ee:b7:eb:ef:7d:95:
c8:b0:a6:5f:6c:a5:c2:fb:b4:3b:02:45:0b:02:d2:0c:86:1a:
c4:d6:26:e6:a9:11:42:e8:17:e0:c0:80:15:39:06:84:b9:82:
81:ba:a2:3b:65:40:58:dc:52:35:c0:9e:b7:46:d7:3c:df:86:
66:7b:5e:19:93:3e:17:a7:0a:45:77:5d:7e:87:ac:6d:3d:8d:
27:26:f7:f6:7a:15:ef:b8:b7:e1:62:58:d9:53:36:25:10:be:
79:06:80:ff:aa:61:36:2d:90:04:b8:dd:e4:da:80:f2:da:7b:
b3:c3:23:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:11:23 2025 by rpki-client