Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ogcT47be8yBFbBiZaRGL1a4VFDs.roa
File: ogcT47be8yBFbBiZaRGL1a4VFDs.roa (raw, json)
Hash identifier: fd7wFPja36iiRs0TIdGKe7zG8dbBvnXPuocWDEb2H/U=
Subject key identifier: A2:07:13:E3:B6:DE:F3:20:45:6C:18:99:69:11:8B:D5:AE:15:14:3B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB5B4A7354953F7E238B108E6FD1ABD42
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ogcT47be8yBFbBiZaRGL1a4VFDs.roa
Signing time: Thu 09 Nov 2023 20:09:57 +0000
ROA not before: Thu 09 Nov 2023 20:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b5:b4:a7:35:49:53:f7:e2:38:b1:08:e6:fd:1a:bd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 20:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a20713e3b6def320456c189969118bd5ae15143b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:7e:77:4a:7c:1a:9c:c9:9e:87:0e:62:58:
ff:d4:e5:0f:85:9d:1f:88:77:7e:1e:0a:cb:95:84:
e6:c0:67:cb:db:2d:4e:78:f4:5c:51:5a:b5:11:33:
0a:28:a2:76:5f:a3:fd:f6:a0:4e:19:d0:18:5b:85:
f0:27:5a:cd:5f:63:83:5d:78:f5:05:07:a4:64:50:
c5:3b:d8:c3:70:78:39:8b:a5:85:0f:72:f1:d7:07:
b7:87:43:0d:e0:03:29:65:5a:5b:7e:18:97:7c:68:
1a:e6:27:b8:e3:3a:b1:b7:e0:43:fc:a4:ca:47:77:
27:87:c8:3c:04:13:5a:51:6e:f9:a5:cd:a6:b2:ab:
29:20:94:ca:98:23:1e:8c:3b:39:3b:56:89:4f:66:
ac:f5:f8:65:56:bb:5f:a7:d8:b7:53:8b:de:26:f3:
c1:7d:4a:6e:cc:e9:8d:4d:a8:24:78:ab:55:c8:c3:
1b:37:05:bd:43:fa:2a:5a:c1:31:93:c7:25:d3:ea:
62:29:39:93:5d:e4:3a:f5:6a:73:b2:ab:53:b4:87:
7b:43:15:da:d3:eb:bf:6c:40:cf:b2:f9:15:ff:88:
27:4c:07:04:8f:a4:a3:99:12:90:60:65:cc:1b:a4:
49:bf:7f:8f:d3:69:f2:d6:2c:bf:8b:53:e6:85:91:
a8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:07:13:E3:B6:DE:F3:20:45:6C:18:99:69:11:8B:D5:AE:15:14:3B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ogcT47be8yBFbBiZaRGL1a4VFDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:51:9a:4e:ee:17:c7:8d:bc:5b:12:ef:c8:5f:da:fd:cd:bd:
4c:be:5d:d4:42:1e:32:4d:21:40:02:ed:f9:09:5b:4d:0a:b6:
ed:2d:43:e3:80:c4:34:2c:cc:d5:a2:aa:c3:f5:a9:26:57:4a:
04:e3:fa:7c:b5:08:33:c9:ab:3b:04:30:5d:32:82:4a:69:71:
d4:2e:0a:20:5a:73:31:c4:3a:8b:19:2c:56:cb:44:77:ab:6b:
bb:e5:fc:9c:62:96:13:b7:e2:fd:d0:04:03:ea:4d:dc:24:ef:
d6:fd:99:fc:9d:42:63:10:f7:15:3e:49:79:ed:d8:51:64:5f:
f1:31:b8:4d:02:bb:f8:ee:21:d4:5c:2f:3c:22:8e:10:f3:28:
37:05:9b:18:7d:36:d5:66:d9:df:7a:ea:e1:a7:88:5a:7a:ba:
e7:ad:a7:59:cd:b8:4d:7f:0b:26:bd:eb:1c:cc:68:b9:cb:12:
3b:0e:36:30:61:40:e6:d3:17:fc:ad:d3:7a:90:c9:75:c7:ba:
fb:b8:99:ea:67:e5:ea:2f:af:40:d1:9a:fd:c7:af:c3:7f:b3:
a3:f9:8e:49:30:53:36:eb:46:df:fa:19:1b:c6:34:f3:10:1d:
ef:a1:d0:cc:93:1f:a7:df:35:0b:28:3a:60:14:33:0e:59:20:
a8:da:ac:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:48 2025 by rpki-client