Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/onrjXC2ua0PcJ-itVQQYx2xiU1M.roa
File: onrjXC2ua0PcJ-itVQQYx2xiU1M.roa (raw, json)
Hash identifier: e0Hs5dygDdiIzaTPS2C3nfeYNmJPZLwJmeJWS8wTnIE=
Subject key identifier: A2:7A:E3:5C:2D:AE:6B:43:DC:27:E8:AD:55:04:18:C7:6C:62:53:53
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD61C3E9CD3CED5C4544C43D72688042D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/onrjXC2ua0PcJ-itVQQYx2xiU1M.roa
Signing time: Thu 16 Nov 2023 03:10:57 +0000
ROA not before: Thu 16 Nov 2023 03:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d6:1c:3e:9c:d3:ce:d5:c4:54:4c:43:d7:26:88:04:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 03:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a27ae35c2dae6b43dc27e8ad550418c76c625353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:47:bc:66:ee:fa:26:fc:d0:a3:55:21:85:97:
d2:2c:8a:a8:9c:a7:e5:8f:89:44:e8:93:32:c9:a4:
80:27:8d:07:90:7a:de:82:46:71:77:e5:2c:f4:88:
24:b3:c5:56:26:86:0c:96:27:d9:95:36:c2:7e:4b:
1b:23:fb:e9:41:f7:ed:a4:5d:97:5d:dd:21:e3:47:
8d:c1:5a:64:a7:1f:65:6c:37:d6:ce:8c:1b:f7:ee:
85:e4:ec:37:dc:31:3f:75:44:f5:43:3c:d4:24:49:
ab:31:54:d0:d5:36:a4:f9:96:28:07:b9:2e:26:57:
8c:d0:21:a3:5b:de:17:d5:a5:8a:24:2a:aa:12:7f:
fa:fa:b1:f7:7c:36:26:8a:f6:9a:ab:f4:24:cc:a4:
77:b6:6f:23:58:51:f3:87:52:16:61:be:e0:8d:b7:
1b:e8:fd:54:73:3c:83:aa:2b:8f:8c:06:28:a0:d2:
b9:d4:cc:16:2e:b1:d1:bf:4e:09:33:75:be:c0:b8:
de:fe:46:51:61:42:15:24:fb:27:38:0b:6b:d4:10:
ce:f4:8b:aa:2a:8d:0c:c3:d5:8b:18:71:28:3b:ab:
56:f4:3f:d9:8a:d0:d0:bb:90:db:b2:01:aa:03:a5:
67:15:d0:86:7a:13:ef:ed:4b:62:58:2d:e4:5e:b4:
65:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7A:E3:5C:2D:AE:6B:43:DC:27:E8:AD:55:04:18:C7:6C:62:53:53
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/onrjXC2ua0PcJ-itVQQYx2xiU1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:38:a2:0e:0a:7e:57:6b:85:73:ec:2f:2b:52:78:7a:fa:04:
ca:41:9e:8a:c1:20:e9:78:86:72:d4:0f:a9:97:56:26:f6:dd:
5d:a6:1f:42:59:3e:69:57:5f:37:16:d1:a6:68:d7:de:cb:7e:
2e:a7:47:d9:4b:eb:f6:d2:db:44:c3:36:08:c0:0e:27:98:3e:
e8:34:47:d5:bb:c3:fc:27:9f:94:cd:24:34:16:03:94:51:18:
2d:ba:b3:dd:50:6f:80:f5:7a:da:15:44:64:be:8a:05:3b:7c:
b8:29:af:ca:56:31:d8:3d:e2:89:38:69:91:79:2a:83:b0:a1:
62:c0:83:cc:c5:ed:ad:7c:52:33:7c:14:42:04:7b:03:a2:e7:
cc:ad:80:cc:ca:eb:24:58:73:62:9a:fa:77:cf:2a:2b:33:e1:
67:b3:19:d7:f7:20:3f:47:93:5e:ca:7c:29:83:1f:3f:42:a2:
69:45:5d:4d:69:60:cb:59:e6:fc:20:aa:ec:73:04:c2:61:89:
a8:37:30:ae:86:11:ba:3e:8a:05:dc:39:ff:90:28:57:c1:3f:
26:c3:c2:22:0e:8b:bd:68:1a:2c:e0:cb:d8:fe:68:ad:25:11:
65:8f:9e:bc:de:c8:60:f7:41:ea:e0:9e:e9:79:f6:45:aa:37:
0f:04:c0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:04 2025 by rpki-client