Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lOmcSvunsm2EtK-yzCXM7x_i54I.roa
File: lOmcSvunsm2EtK-yzCXM7x_i54I.roa (raw, json)
Hash identifier: HX9+7H77EHrZWscqGqxRDidkM7isOXdlmsQthSIKuY4=
Subject key identifier: 94:E9:9C:4A:FB:A7:B2:6D:84:B4:AF:B2:CC:25:CC:EF:1F:E2:E7:82
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCF747273A3053A8A62779B2E98BF12B9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lOmcSvunsm2EtK-yzCXM7x_i54I.roa
Signing time: Tue 14 Nov 2023 20:09:57 +0000
ROA not before: Tue 14 Nov 2023 20:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cf:74:72:73:a3:05:3a:8a:62:77:9b:2e:98:bf:12:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 20:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94e99c4afba7b26d84b4afb2cc25ccef1fe2e782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:1d:ce:43:9c:82:e1:57:dc:5e:97:d4:71:
1f:b2:10:1d:80:55:a6:cf:c2:f0:e5:99:01:cb:8e:
c0:ff:cb:4b:66:06:96:2b:16:f4:d5:54:9c:53:33:
50:eb:a9:80:f5:6f:f9:9d:be:16:59:7e:94:f7:ab:
f8:9c:3e:22:e7:91:b3:cd:41:74:2f:98:36:2f:26:
b3:6f:04:d9:14:25:08:e7:b6:1b:ac:9f:f4:27:d8:
08:b6:68:e4:34:87:6d:53:db:df:bc:62:d4:17:53:
b0:f7:3f:84:72:82:92:28:2b:b2:20:79:60:e0:3c:
09:a2:51:e9:6c:72:57:19:a2:7a:92:d5:1e:a5:da:
f3:a7:3d:5c:5c:c9:ae:13:c0:08:36:a0:05:0f:d0:
b0:b1:54:89:5c:f8:8c:25:ac:8b:80:f8:12:cb:5b:
03:6e:1c:78:22:48:e1:ea:f2:c5:4f:57:4f:20:a5:
0d:6c:48:4c:67:59:c4:b2:eb:bd:a9:0f:db:43:20:
2b:19:f3:4d:28:70:91:c6:17:88:39:94:76:30:6d:
f5:8a:7c:75:a0:2f:b5:3b:1b:7f:48:cd:bf:b2:8a:
d0:34:73:06:b4:49:50:f2:5d:8d:65:7b:d8:ce:8b:
9d:d1:00:0b:28:08:27:5d:19:2d:af:4b:44:66:8b:
78:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E9:9C:4A:FB:A7:B2:6D:84:B4:AF:B2:CC:25:CC:EF:1F:E2:E7:82
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lOmcSvunsm2EtK-yzCXM7x_i54I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:93:5c:62:c8:19:00:a3:e8:85:78:62:69:7e:d8:b7:b9:cd:
ac:3c:15:6e:ab:d0:b4:02:72:55:15:43:97:d8:63:49:30:f3:
a7:e9:a0:0e:5f:f9:cb:68:00:b7:09:84:74:74:04:37:4d:28:
42:e9:7f:e4:0d:5e:ac:36:aa:52:5d:a7:e2:9c:d8:de:da:36:
f6:75:0d:f2:ac:f7:09:37:10:0a:1e:98:93:94:f5:e8:6c:d7:
91:a3:58:11:39:52:cb:4a:75:28:68:6d:69:12:e7:95:9a:f9:
9c:b3:14:4c:74:36:e0:c0:25:1c:53:ab:a0:53:8c:69:8c:81:
fd:ac:d0:c6:45:71:a0:b0:ce:39:0f:3b:c7:2b:4b:04:9c:fc:
6b:b7:ef:32:8e:3e:0f:16:b5:22:bd:8f:fa:6c:24:85:03:62:
83:ea:0e:78:19:c9:df:59:a8:f2:16:a9:f3:b3:bb:9f:41:c3:
8b:cb:7d:d2:9a:bd:0e:b7:e0:9c:50:d8:6c:ac:7a:78:b2:f1:
0a:48:9c:53:56:76:e5:33:eb:15:cc:b3:a9:4c:81:46:72:0b:
f5:0b:0b:4b:51:24:06:22:52:9e:2b:a4:a6:8b:46:b5:6b:13:
de:88:de:0a:d5:7e:85:ab:67:68:68:d7:57:15:4d:be:72:b9:
25:2d:f1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:03 2025 by rpki-client