Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ofFNKgBMGMwYtnx7HFqcS_OGGEM.roa
File: ofFNKgBMGMwYtnx7HFqcS_OGGEM.roa (raw, json)
Hash identifier: /MQEKDTqjWNjZJvb1eJXWxKVgkKE1BTBVxitYki+6dY=
Subject key identifier: A1:F1:4D:2A:00:4C:18:CC:18:B6:7C:7B:1C:5A:9C:4B:F3:86:18:43
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCD1834D9CD15D1E69DBE7E088D73C83F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ofFNKgBMGMwYtnx7HFqcS_OGGEM.roa
Signing time: Tue 14 Nov 2023 09:09:57 +0000
ROA not before: Tue 14 Nov 2023 09:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:18:34:d9:cd:15:d1:e6:9d:be:7e:08:8d:73:c8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 09:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1f14d2a004c18cc18b67c7b1c5a9c4bf3861843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:06:f9:97:ec:d8:bb:6f:ff:fe:d7:cf:7f:
fb:46:3f:23:c8:8a:cb:d1:17:67:ac:08:21:e9:cb:
8b:d3:4b:37:8c:bc:8b:34:4a:1d:a2:02:dc:05:9e:
b2:3f:3e:9f:a3:74:5c:34:5e:87:6a:7b:f4:14:14:
3a:39:b7:c1:dc:f9:82:06:97:67:53:34:4a:de:9a:
25:de:55:58:08:fb:be:e2:eb:95:47:23:68:e6:e0:
c4:a5:7a:6d:1d:5d:81:f9:5f:a3:49:95:35:66:fb:
fa:d0:2e:6c:79:c1:28:b1:5d:0f:fa:ea:73:0e:f7:
69:d7:df:21:02:a0:98:d0:2f:45:0b:de:53:06:e5:
b6:fc:54:85:df:19:ed:c4:c3:9d:1a:a8:39:2e:6c:
b3:58:4c:24:d0:78:4d:f6:ad:8f:0a:33:bd:ee:44:
89:18:fc:5b:07:c4:6f:b2:fd:5d:2e:0a:20:3f:97:
38:b5:dd:20:50:41:71:c7:ff:ee:26:e3:23:b2:d8:
aa:fc:2c:11:a0:a8:22:c2:d0:06:fb:82:10:d7:2b:
5a:64:2a:3d:2a:d1:5a:7b:87:dd:fa:56:3c:fe:83:
56:3f:37:9a:64:84:3c:7b:e0:60:0b:1b:b2:2b:19:
a9:ae:6e:eb:72:9e:9c:c1:e6:49:99:ef:32:40:96:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F1:4D:2A:00:4C:18:CC:18:B6:7C:7B:1C:5A:9C:4B:F3:86:18:43
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ofFNKgBMGMwYtnx7HFqcS_OGGEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:2d:e8:1c:49:58:8f:b4:1a:e5:9d:f7:25:5c:64:86:a5:21:
a1:d4:8d:94:50:b9:bb:f9:5f:eb:96:49:0b:29:93:13:0c:45:
3f:f9:bd:07:0a:0b:5f:90:a9:1b:68:b4:94:e7:9e:55:60:d7:
67:05:c6:89:f4:93:fa:8a:7d:6b:19:b0:7d:15:d2:ca:59:ef:
fc:82:c1:8f:cb:13:ad:fb:0b:de:1f:85:95:5f:81:af:e9:1d:
be:7b:6e:84:4a:00:74:0a:0e:89:94:2d:34:90:a4:01:a9:e6:
aa:5e:36:f3:ac:b9:f4:07:7f:dc:b4:b0:8f:7f:ee:a2:83:f0:
f6:06:7b:a3:9c:66:3f:c9:d0:67:cb:f0:2e:aa:5b:0c:d0:00:
c2:84:43:8b:36:76:08:8a:a9:39:24:f8:b0:21:69:32:8a:0b:
0c:6e:96:8a:e7:53:a9:a0:5f:5b:9c:88:18:ce:dc:aa:23:49:
b6:42:58:05:08:db:13:82:f1:fe:86:b0:49:cd:8b:cc:11:f2:
61:71:6a:61:54:e4:ee:b5:2a:83:98:81:c3:00:60:42:95:ed:
36:60:90:20:80:95:10:b5:64:20:0b:ac:d8:4f:cc:62:76:7e:
69:11:63:33:c0:89:e6:c7:a0:98:4c:04:4b:f4:90:c4:56:f1:
68:76:dd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:40 2025 by rpki-client