Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oNONcBVI6v1vQ9Xfa8EFHuGYXhk.roa
File: oNONcBVI6v1vQ9Xfa8EFHuGYXhk.roa (raw, json)
Hash identifier: I7XivB0iXHzLrccNJyf8WnKnC7nw9Dd8Mls3fqz+jbs=
Subject key identifier: A0:D3:8D:70:15:48:EA:FD:6F:43:D5:DF:6B:C1:05:1E:E1:98:5E:19
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B66BF02B862C7043E1A8CABCC48E7FFA7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oNONcBVI6v1vQ9Xfa8EFHuGYXhk.roa
Signing time: Wed 25 Oct 2023 12:11:15 +0000
ROA not before: Wed 25 Oct 2023 12:11:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:bf:02:b8:62:c7:04:3e:1a:8c:ab:cc:48:e7:ff:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 25 12:11:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0d38d701548eafd6f43d5df6bc1051ee1985e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:5d:21:86:e1:e4:86:22:cc:0d:4f:c0:4e:
37:df:7c:b0:69:25:98:15:42:31:79:74:dd:4b:db:
1d:97:d3:86:74:e8:ae:21:3f:17:f5:26:c7:11:63:
b6:d0:59:c0:2c:6e:db:38:27:86:5a:9b:9d:d9:f1:
3c:6e:18:23:f9:b8:31:1a:01:4b:02:23:41:11:f3:
d8:49:f1:24:3a:79:d0:49:31:e5:25:13:62:42:82:
44:a8:57:a9:54:c0:3b:2b:ad:6a:5e:04:f9:d5:1f:
8f:07:8f:c7:3f:39:90:cc:d3:48:45:81:b2:52:02:
79:0e:7a:7f:4b:02:43:38:11:bc:39:7d:58:c5:5f:
96:42:7a:64:d6:06:5a:07:d2:e3:cc:db:f3:dd:fd:
97:eb:48:e5:93:68:24:1f:15:a7:de:91:00:95:b1:
63:5a:65:8a:0a:47:1a:03:f8:2d:3e:37:87:34:5a:
b6:f9:15:de:c1:17:bb:3b:85:e0:2d:b6:a4:15:26:
29:94:45:1c:cc:b0:dd:08:da:30:8c:01:bf:66:b8:
00:29:28:65:ed:2c:8f:d6:04:18:73:1b:9c:e8:74:
c5:fa:48:48:a6:30:0a:2d:ef:b1:8e:36:7d:45:c9:
27:ef:53:23:52:d1:29:ad:d7:0f:44:03:3e:ba:64:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D3:8D:70:15:48:EA:FD:6F:43:D5:DF:6B:C1:05:1E:E1:98:5E:19
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oNONcBVI6v1vQ9Xfa8EFHuGYXhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:6f:86:66:4c:8c:36:ca:9a:5c:52:60:43:ee:40:b1:ce:bd:
4b:32:51:e9:c1:7b:b7:f5:d6:43:0e:49:5f:7c:8f:eb:e7:4b:
a6:7a:96:de:23:d4:67:31:d5:22:ca:72:3d:72:1e:8c:44:0b:
94:30:50:79:98:f4:d1:cc:6c:02:e2:c5:f7:c4:96:4e:5b:80:
40:aa:31:23:c6:94:01:21:31:37:62:b4:73:dc:83:7e:81:81:
ce:3d:ce:ec:c1:72:91:13:70:32:71:bb:9e:57:92:e0:99:67:
21:ff:74:c4:2c:b9:ae:b7:1e:78:33:af:d4:f5:55:a0:74:ad:
b8:4a:fa:61:f9:80:d1:85:50:f9:3f:9b:e9:b6:a3:37:1d:01:
a9:a5:2d:c4:09:8d:eb:4d:c6:33:6e:ee:4a:57:b6:d6:94:42:
90:5b:77:d5:e3:8f:41:bf:6c:08:f2:55:38:5e:35:64:6d:4a:
0a:ef:3b:ce:47:5a:77:f9:b8:fd:cf:c7:77:3a:4b:0b:c3:00:
46:76:74:14:85:dc:2c:1c:4e:c4:28:9c:10:06:46:44:b8:84:
3d:41:5f:09:3a:e6:d8:96:89:94:b9:eb:1d:5e:0b:9a:b7:ed:
e7:fb:53:bb:f8:d3:37:c3:2e:6c:03:41:7f:e4:28:e1:66:d7:
3a:01:cc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:50:26 2025 by rpki-client