Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ouNfsjuKXKAf2yyLYcBSeYKt_S4.roa
File: ouNfsjuKXKAf2yyLYcBSeYKt_S4.roa (raw, json)
Hash identifier: 0H6ihRNX1ONeYbUbc1k3HMXOjZPnqVaGuqkADou32X4=
Subject key identifier: A2:E3:5F:B2:3B:8A:5C:A0:1F:DB:2C:8B:61:C0:52:79:82:AD:FD:2E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0AEB70946D26AC77D6F8DA4488172960
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ouNfsjuKXKAf2yyLYcBSeYKt_S4.roa
Signing time: Sat 07 Oct 2023 16:14:43 +0000
ROA not before: Sat 07 Oct 2023 16:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0a:eb:70:94:6d:26:ac:77:d6:f8:da:44:88:17:29:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 16:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2e35fb23b8a5ca01fdb2c8b61c0527982adfd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:06:7f:28:11:07:3e:f1:20:40:a5:6f:24:7d:
42:44:89:ba:e1:9a:ee:23:2a:f0:4c:43:b7:82:84:
70:26:dc:e6:db:cd:93:49:9e:cb:b5:f4:11:b5:ab:
63:c6:8a:a4:18:bf:c1:2f:15:fc:6c:9d:3b:76:b6:
bf:fc:b2:b8:3d:63:42:83:64:ce:d4:62:c2:d0:02:
10:6c:bb:e4:f5:32:37:9e:7e:38:f0:5b:cb:af:bb:
34:b3:72:cc:0c:d4:ad:84:02:8f:f4:c7:89:73:31:
40:c3:c6:89:e3:5a:2e:5e:f8:d0:09:8e:4b:c8:78:
6b:04:bb:13:fa:f9:3d:77:3b:46:1a:72:6d:11:3b:
3a:7d:b3:ad:98:1f:69:bf:04:ad:8e:32:d7:72:0a:
da:de:df:40:34:ba:72:c6:5e:7b:0a:d5:6c:d7:c9:
7b:2d:e6:5e:8a:82:c7:eb:92:5e:26:07:3f:19:2f:
8c:58:df:31:8c:71:ad:ff:88:ff:f6:0a:f7:1c:e8:
77:a3:81:15:c5:75:3a:bb:23:b8:1d:ad:06:33:22:
98:e1:1a:0a:c2:15:f9:57:20:7b:53:5e:10:b5:d6:
81:c6:0f:21:fe:03:03:cf:4b:f4:b6:7b:f6:4d:de:
04:4d:67:2b:be:d3:f9:54:6b:3b:3d:60:08:d6:ad:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E3:5F:B2:3B:8A:5C:A0:1F:DB:2C:8B:61:C0:52:79:82:AD:FD:2E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ouNfsjuKXKAf2yyLYcBSeYKt_S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:9b:d2:67:e9:74:b8:d5:57:f9:a3:2b:6e:b7:e9:b2:c5:0d:
72:1b:52:ea:f5:05:01:35:75:ab:ee:f7:49:e1:b8:9d:ac:22:
7f:a6:fe:9a:1e:b8:d1:ed:12:75:5a:c0:63:0d:7a:80:eb:cf:
76:52:7d:fe:32:06:af:7b:fc:41:db:8d:90:30:e8:24:79:df:
10:44:ba:77:a6:14:ba:c9:57:7a:77:c4:8a:59:75:d8:09:4f:
bb:9e:33:4b:4b:1d:7e:8c:5f:3e:79:ee:e1:be:f9:ac:d1:9c:
36:3b:60:85:b7:65:66:05:7b:37:77:6b:47:9c:05:bf:4b:32:
e8:1a:74:62:ae:62:70:9a:05:91:10:1d:cd:6a:e9:49:01:51:
7d:80:3e:74:b0:e6:69:cc:bb:0c:35:8b:e5:41:a8:22:54:a3:
ab:e7:3e:90:da:52:21:76:f1:44:58:20:39:3d:c8:ff:c8:39:
1e:24:bd:57:79:6b:70:1c:11:10:b1:4d:05:e3:08:44:93:da:
4c:bf:07:90:35:bd:d4:0e:84:06:58:2f:b7:e1:8b:75:a8:9a:
2b:1c:0b:f6:07:a1:1c:2a:6c:25:8d:19:56:f8:3c:a0:44:1f:
54:14:2c:2a:a0:59:e9:3b:33:81:a1:af:20:56:d5:97:85:13:
d0:64:38:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:29 2025 by rpki-client