Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ouU1rj6ghe4BtD8fHRztESJLip4.roa
File: ouU1rj6ghe4BtD8fHRztESJLip4.roa (raw, json)
Hash identifier: 9QLXd0dS/ahwi12Awg4FpqCqNRS5atFUgFA/CepZnbM=
Subject key identifier: A2:E5:35:AE:3E:A0:85:EE:01:B4:3F:1F:1D:1C:ED:11:22:4B:8A:9E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C336E6475E1D5FEA06F6E15686870E9E8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ouU1rj6ghe4BtD8fHRztESJLip4.roa
Signing time: Mon 04 Dec 2023 06:05:21 +0000
ROA not before: Mon 04 Dec 2023 06:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:336d:7e3f/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:6e:64:75:e1:d5:fe:a0:6f:6e:15:68:68:70:e9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 06:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2e535ae3ea085ee01b43f1f1d1ced11224b8a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:71:f6:3f:5e:be:da:8c:ac:f4:c2:82:20:
20:3e:60:3d:19:aa:64:bd:73:22:22:40:c1:66:4c:
b3:41:c4:15:75:a6:ad:f6:4c:45:04:de:cc:13:24:
b3:56:05:72:6c:ff:05:37:c7:71:bf:6b:08:be:ba:
63:25:2a:89:10:c4:24:fa:fb:5d:df:ad:e4:6e:68:
a8:82:b4:3f:f5:d8:ad:5b:3f:de:d2:2e:c8:51:82:
ab:96:82:9c:50:cc:3f:8b:1b:3e:05:2b:18:8c:92:
b3:ab:20:27:07:db:ae:d9:8c:0d:e7:1a:d8:8f:bf:
1c:b0:ac:bd:e1:b2:cf:9f:c6:fb:47:0f:f7:69:9d:
31:d2:51:19:6b:6c:a5:40:2a:ca:d5:d7:b9:21:8b:
9f:b0:03:1e:b0:88:4f:ac:e2:19:4d:aa:dd:7d:c8:
95:20:43:d9:0a:81:a4:a4:50:ab:ef:bd:90:af:ee:
67:69:63:8c:52:23:ea:b7:25:48:e3:13:35:7e:e9:
69:9e:94:35:ee:e7:c7:a4:30:d4:f8:ba:c0:d3:40:
03:41:7f:1d:55:92:25:17:b5:10:70:8b:34:00:a2:
b0:cf:43:b3:d7:af:4c:ca:77:72:a7:a9:5f:15:a1:
6d:91:6e:df:2e:33:e6:85:c7:75:0c:6b:ca:e1:e4:
70:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E5:35:AE:3E:A0:85:EE:01:B4:3F:1F:1D:1C:ED:11:22:4B:8A:9E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ouU1rj6ghe4BtD8fHRztESJLip4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:fc:d9:17:77:7c:8e:38:13:8d:92:82:34:c2:c7:89:58:95:
2b:2f:8e:f0:45:ee:d3:f9:64:08:ed:e2:6a:ad:bf:db:de:ea:
ec:17:27:b6:a6:d9:a1:ee:ee:38:1b:32:ba:bb:2d:7d:e7:8b:
97:4d:65:07:ad:75:33:aa:f1:eb:37:ee:ee:45:4b:f4:e3:60:
df:e0:3b:8c:5a:cc:70:15:29:eb:43:de:ad:0d:3c:4b:59:09:
8e:50:cf:0b:dd:0c:6e:bb:09:5a:d5:d2:11:8d:b9:30:0c:bf:
ef:51:d9:ae:fc:73:c2:36:59:c8:2f:24:14:17:85:a2:6d:f4:
12:e8:82:9d:46:aa:a6:cf:66:be:4b:37:25:f8:8c:f5:99:07:
ff:19:1e:6f:6b:1e:73:9e:f8:65:c6:63:37:14:97:6b:2f:af:
be:90:9f:0d:7f:e7:7b:41:2d:3f:cd:c6:f1:09:17:73:65:bc:
e8:f2:57:c9:5f:3d:07:65:b1:a3:d5:f4:dd:7d:e3:91:3a:2a:
7e:a1:4f:db:5d:ad:0b:48:f7:68:71:3e:b3:7c:a2:46:e6:82:
e0:55:56:b6:ed:69:5d:7c:3c:49:86:b6:0a:00:75:2b:7e:06:
41:c5:64:b9:9f:77:27:c8:b4:5a:33:2b:91:21:a4:5f:66:6e:
81:82:f9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:27:14 2025 by rpki-client