Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/01RKOfnr2Cc7PZ2tAB6D-rW8tPw.roa
File: 01RKOfnr2Cc7PZ2tAB6D-rW8tPw.roa (raw, json)
Hash identifier: S8wn3F/ysAs0rmab6VTdgR/5nGfV5W4KplAs40k3dqI=
Subject key identifier: D3:54:4A:39:F9:EB:D8:27:3B:3D:9D:AD:00:1E:83:FA:B5:BC:B4:FC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C009BF88D67B139F16F91EBF4E56834D4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/01RKOfnr2Cc7PZ2tAB6D-rW8tPw.roa
Signing time: Fri 24 Nov 2023 09:14:30 +0000
ROA not before: Fri 24 Nov 2023 09:14:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:00:9b:f8:8d:67:b1:39:f1:6f:91:eb:f4:e5:68:34:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 09:14:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3544a39f9ebd8273b3d9dad001e83fab5bcb4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:95:6f:79:ab:1b:fd:07:43:93:60:d2:c7:
7e:e7:4a:14:db:d5:45:aa:dd:f9:ac:d9:d0:e9:b5:
32:c3:63:f8:d3:7b:8b:50:78:44:02:09:5a:6e:9a:
45:3a:0d:fd:2a:0a:28:15:cd:1c:66:4d:4d:8b:d6:
cd:b2:f4:04:52:ab:e5:94:84:2c:c3:9e:ca:ff:fd:
11:d8:75:ff:fe:9e:d2:f7:24:7e:ac:77:50:8d:32:
f5:74:1f:b8:71:04:a6:f4:d1:51:75:f0:f3:dd:72:
27:82:97:9d:73:61:cc:92:66:e5:2e:07:79:a8:f1:
f4:6e:21:b4:96:2f:a6:e5:04:dd:e2:3d:72:ee:f4:
41:e1:59:98:25:66:21:33:12:d9:8b:21:9d:8a:4d:
b9:82:ba:ac:58:9a:ec:23:ef:ff:28:f4:cb:d3:aa:
bf:57:a6:03:c7:e1:3b:64:b1:84:78:10:80:d8:c9:
39:0e:cc:e6:a7:82:b9:15:8f:88:75:94:4f:bd:ab:
4a:94:bd:5b:9a:fe:74:5d:d2:2e:ef:2a:75:1e:8d:
94:c4:28:e5:d8:71:0d:d2:76:02:6f:dc:3c:4a:41:
48:32:07:a1:1e:15:97:a3:cb:84:ee:25:97:57:70:
da:3c:f7:9f:9b:72:e4:6e:1c:14:44:07:20:a7:b5:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:54:4A:39:F9:EB:D8:27:3B:3D:9D:AD:00:1E:83:FA:B5:BC:B4:FC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/01RKOfnr2Cc7PZ2tAB6D-rW8tPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:db:28:3c:b8:6c:93:4d:7e:ae:e0:5a:0f:3a:2d:d6:9f:ca:
62:c7:db:45:de:98:68:b0:81:59:19:f8:6b:c9:5f:5d:72:0f:
70:0d:fb:d5:9a:bc:13:e8:5b:b0:e6:75:5c:22:4c:c4:3d:4e:
30:36:c6:43:4e:c5:ec:28:5a:58:eb:b6:3b:60:86:ae:8b:54:
ec:66:87:92:bd:6f:61:38:1a:ff:26:76:8c:0f:7f:4b:0f:b7:
44:27:fe:f9:14:f5:22:c7:b8:e1:01:09:9c:6c:51:ec:9b:91:
7c:be:c6:d0:7a:33:7d:d5:c1:c4:19:1c:48:86:16:fb:3c:e8:
45:93:b1:18:3f:a8:a0:2e:aa:a9:99:76:73:09:62:74:ba:32:
5b:b0:a7:87:64:6a:fb:78:c9:f4:ca:e4:fc:c9:c3:8d:60:a8:
dd:0e:35:23:76:7b:df:64:4b:3a:16:77:30:1b:5a:7f:bb:d5:
57:c8:38:f9:ea:49:b7:69:2d:8f:bc:ca:4b:c0:08:22:8c:7e:
3b:53:00:cf:53:17:41:46:d3:7b:19:5f:f5:73:a5:1e:0e:3a:
1a:53:0c:68:76:fa:5b:6d:2e:8d:14:dd:e3:bf:b5:2c:e8:b1:
04:67:a6:89:d8:7d:a8:27:cf:1a:67:21:fd:78:b4:2c:c7:97:
44:78:e1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:01:53 2025 by rpki-client