Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/usOkzmM9G4oDjlEiOrYFC0bMQ9Q.roa
File: usOkzmM9G4oDjlEiOrYFC0bMQ9Q.roa (raw, json)
Hash identifier: CPbHclUykIoqLLNfvo4/IPaZNSmSpwJxv+s21AqElbw=
Subject key identifier: BA:C3:A4:CE:63:3D:1B:8A:03:8E:51:22:3A:B6:05:0B:46:CC:43:D4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B26D0BC58C690E121646FE0DC2248BAF1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/usOkzmM9G4oDjlEiOrYFC0bMQ9Q.roa
Signing time: Fri 13 Oct 2023 02:14:55 +0000
ROA not before: Fri 13 Oct 2023 02:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:26:d0:bc:58:c6:90:e1:21:64:6f:e0:dc:22:48:ba:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 02:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bac3a4ce633d1b8a038e51223ab6050b46cc43d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:60:eb:77:fa:21:ba:2f:f7:ca:21:75:dc:
23:0b:d1:3e:0f:16:a3:14:da:38:c3:9a:bb:ce:e5:
ae:2f:b4:1e:df:e7:59:26:3c:83:a2:a4:1c:97:eb:
c2:bd:f2:29:c0:cc:b3:a0:25:90:c8:68:db:68:50:
e5:d7:ae:19:f6:04:02:9b:31:1d:8a:6b:4f:6b:20:
cc:2b:df:52:ac:8d:b8:b6:88:fd:41:dc:66:7b:c0:
ed:9a:75:df:df:fc:1c:c9:8d:4d:b2:fa:46:92:00:
44:38:36:60:fa:8e:08:14:d6:f1:2c:c4:34:89:5b:
48:c2:ff:f7:44:a6:8f:ad:4a:a8:98:d4:0b:aa:8b:
fb:7e:79:01:26:4e:41:e2:bf:bc:98:7e:0c:0d:04:
04:04:b4:ce:7d:ae:4f:f0:ea:8b:96:f7:6a:44:bc:
a7:25:1a:9a:f6:98:83:8b:88:d1:b1:55:2d:d7:70:
b5:a3:09:78:61:a1:cf:58:94:4f:33:93:45:60:da:
de:6e:7c:06:e6:8d:6f:ca:14:23:52:7f:94:b0:43:
5d:58:42:c0:e6:32:55:94:18:fb:3a:1d:73:69:5e:
7f:7c:6b:f9:a1:49:82:6a:74:c9:ed:15:8d:4b:8a:
32:b5:8a:c2:c3:bf:d3:da:f8:e9:dc:28:13:e0:4e:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C3:A4:CE:63:3D:1B:8A:03:8E:51:22:3A:B6:05:0B:46:CC:43:D4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/usOkzmM9G4oDjlEiOrYFC0bMQ9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:af:84:b3:4b:9a:75:b6:b5:92:64:6a:18:f7:ee:d1:fc:32:
f0:90:39:ce:96:42:38:3b:01:77:10:fb:60:c7:af:af:f2:96:
d5:f1:c0:64:e1:1e:ec:fd:cb:ba:c8:23:d6:12:ef:be:64:fe:
2b:ac:0d:d0:49:7b:3b:1a:69:82:10:ad:4d:11:34:0e:53:b2:
20:88:48:60:ae:84:41:a7:d5:c1:e9:2f:dc:25:7e:83:7d:dd:
df:81:11:03:00:2c:38:5d:ce:eb:31:4c:c8:70:5d:9b:91:48:
40:26:91:0c:27:86:a4:97:53:fd:c6:bb:db:a3:86:8a:9d:5d:
b7:58:0d:84:a3:13:fa:88:9f:5a:6f:26:26:78:39:65:a9:23:
65:37:d2:29:98:c2:ea:22:51:33:5c:dd:0e:83:df:c8:ec:70:
ca:ae:37:f2:a3:09:f8:0c:14:0d:82:3b:2d:26:38:12:7f:91:
3e:9d:c6:7e:69:ec:4d:cc:68:15:29:07:c4:74:db:99:7a:47:
df:e7:9f:d9:57:24:c9:a4:d1:92:dd:cf:b4:04:b1:ae:ca:c2:
86:f9:1a:f6:83:68:62:87:06:cc:f2:20:82:f6:00:2a:83:eb:
33:a0:17:f1:99:f2:75:e4:24:0a:12:1f:aa:09:b7:41:5f:ae:
21:59:8a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:44:07 2025 by rpki-client