Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/owKJmJmcgj9pGmeRvTpTyfQwhhc.roa
File: owKJmJmcgj9pGmeRvTpTyfQwhhc.roa (raw, json)
Hash identifier: 3yGoLmsBUfKnCDFQtePlHt9/sH/6+SUcqbBeZw1lXGk=
Subject key identifier: A3:02:89:98:99:9C:82:3F:69:1A:67:91:BD:3A:53:C9:F4:30:86:17
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9EC5A90B2BE4ACEAA45E636A88C91BB4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/owKJmJmcgj9pGmeRvTpTyfQwhhc.roa
Signing time: Sun 05 Nov 2023 09:17:15 +0000
ROA not before: Sun 05 Nov 2023 09:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9e:c5:a9:0b:2b:e4:ac:ea:a4:5e:63:6a:88:c9:1b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 09:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3028998999c823f691a6791bd3a53c9f4308617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:e2:4e:07:3a:78:cc:1d:26:19:b8:d3:1d:
31:f3:b8:b8:41:7d:aa:f7:59:7d:b7:f1:ca:88:40:
4c:13:29:5c:de:1e:21:c5:1e:40:69:96:7e:6b:37:
4a:ac:91:f4:45:31:ed:56:4e:19:26:58:1c:02:8f:
2c:ff:f3:85:0e:e1:f4:61:b1:d4:61:ad:1b:61:d6:
8c:bf:b6:6a:ed:0e:d6:8a:31:9d:aa:d6:03:ca:c9:
a6:94:17:b3:6d:d8:5f:95:3f:23:be:94:7c:ed:35:
9d:3d:f4:75:00:94:7d:1b:0a:65:9a:8d:8d:c1:ce:
c3:41:f4:19:63:e8:c7:a5:22:ed:be:be:e1:24:da:
bf:0e:cf:0d:76:d8:34:13:7f:bc:15:4d:e4:d8:5c:
9a:3f:6b:06:f1:bb:4f:82:c8:3c:25:18:9d:0f:e4:
15:bf:a9:eb:0b:4b:db:34:68:29:68:d8:87:69:b4:
f2:1e:4b:90:5f:50:a9:25:11:f9:58:6f:6f:81:f0:
9e:45:a8:b7:df:71:39:15:9d:e0:ce:29:40:af:70:
2c:06:20:e6:8f:c4:55:48:e6:3d:38:31:da:c9:62:
0f:bb:29:5e:e7:9c:f9:c9:11:46:e2:b1:61:18:66:
06:07:55:e5:d7:dc:08:6e:59:69:13:59:19:f6:14:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:02:89:98:99:9C:82:3F:69:1A:67:91:BD:3A:53:C9:F4:30:86:17
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/owKJmJmcgj9pGmeRvTpTyfQwhhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:48:d1:50:91:13:4f:da:d4:d3:e5:e6:82:29:b3:0a:8a:e3:
0b:7c:c0:29:d3:58:3c:2c:df:22:1b:40:8b:a2:b4:60:cd:e6:
0f:13:73:78:e2:f3:dd:da:03:f5:a0:87:e9:4f:9f:27:7a:27:
c9:11:58:72:d7:f5:46:cf:a2:70:c9:f1:c4:f9:2b:45:58:1d:
48:76:73:7e:71:3c:34:61:f1:ea:1a:c4:ed:0c:8b:9d:49:34:
b7:b4:e8:5d:41:5b:c6:1b:47:7f:02:c4:27:8c:a3:f1:e3:51:
cd:19:68:d2:2c:3b:0e:0f:51:5f:42:d0:cc:e3:20:4a:37:f4:
2d:4f:d8:40:7f:4f:81:0b:5a:1d:c9:07:b2:39:d2:d6:d7:fa:
9e:8a:88:8a:92:58:c4:55:28:17:00:d0:22:b7:45:79:6e:0f:
38:79:54:40:84:a6:01:0c:53:12:14:36:f7:00:89:45:54:22:
8f:ee:de:c9:fb:f9:73:74:03:3b:b5:00:4a:d1:2c:70:d7:da:
e4:2e:17:92:fd:b2:c4:58:9a:fb:6b:a0:b1:34:4a:d1:ac:14:
c3:2e:ec:d8:95:90:d3:3a:0a:ed:c8:a9:aa:45:be:44:a4:e4:
39:f9:28:07:02:f9:2c:dc:75:e4:32:79:75:3f:a8:f2:eb:b2:
cc:a9:db:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:33:57 2025 by rpki-client