Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0kfv7htDwGjASj6yBgRXkSayFRA.roa
File: 0kfv7htDwGjASj6yBgRXkSayFRA.roa (raw, json)
Hash identifier: kuyeInJ3SnlbBzMyIMsAm7C9tk/NkRXZDkMbwiPb/EE=
Subject key identifier: D2:47:EF:EE:1B:43:C0:68:C0:4A:3E:B2:06:04:57:91:26:B2:15:10
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7109F163BD75F43F649DF8ECB2C65A37
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0kfv7htDwGjASj6yBgRXkSayFRA.roa
Signing time: Sat 16 Dec 2023 05:12:06 +0000
ROA not before: Sat 16 Dec 2023 05:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:71:09:f1:63:bd:75:f4:3f:64:9d:f8:ec:b2:c6:5a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 05:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d247efee1b43c068c04a3eb20604579126b21510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:9b:00:94:69:cb:16:85:ce:73:e7:1a:30:
05:24:4b:b8:c1:41:9c:ae:7b:d5:dd:2c:8f:f6:d3:
90:83:b4:bf:17:0d:e8:7f:37:c4:5e:18:c2:0f:96:
3c:2f:f3:2b:d3:9e:b9:3b:64:3c:73:38:02:a3:5b:
99:12:57:33:39:59:40:36:dd:ea:61:31:8a:46:ef:
7c:04:85:c7:cb:79:e8:c5:d6:18:2b:6c:a3:ab:03:
31:f1:cf:e0:23:58:6d:80:14:a1:c1:0c:17:42:4f:
e8:8d:34:d7:1e:7a:a1:38:54:54:4c:cd:b7:d5:67:
7c:6e:54:5b:ae:84:78:dd:12:45:79:d7:af:fc:a7:
3f:20:2e:78:7d:23:7d:ed:39:81:8d:ab:f3:76:47:
2a:f6:ee:0f:5b:35:c2:38:da:19:53:f4:df:02:26:
78:87:21:73:b0:1d:a6:7e:7c:ef:9c:b8:f3:a3:b8:
56:42:bb:ab:91:18:8e:71:99:9e:74:36:81:e0:0a:
c6:eb:7f:db:b5:8b:b8:08:18:59:82:97:15:66:68:
f0:0a:5c:c8:e4:7d:08:a7:f2:f0:7a:7d:85:f6:63:
31:96:a3:74:5c:aa:a9:49:b9:e7:65:42:14:e1:3e:
1e:e9:76:a5:f3:35:67:33:4b:45:30:a6:c9:92:15:
7f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:47:EF:EE:1B:43:C0:68:C0:4A:3E:B2:06:04:57:91:26:B2:15:10
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0kfv7htDwGjASj6yBgRXkSayFRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:a5:94:1e:41:aa:65:09:5c:71:63:70:99:6e:68:34:c9:64:
e7:c5:1b:5c:43:34:83:b9:e7:86:96:7f:4e:95:c7:d5:29:67:
8a:90:de:1d:f9:30:a6:92:a5:40:da:00:51:d4:3f:30:9f:90:
bc:ec:b8:b9:92:a0:d0:89:c1:2d:b4:87:ba:92:82:3c:bc:65:
af:fb:41:3d:47:c1:cb:c2:d2:3c:cb:f8:d5:a8:e0:bb:81:83:
90:39:d2:67:0f:91:b1:0d:3d:e2:65:ff:43:5f:2a:f9:02:bc:
c4:58:e6:b3:73:fa:ca:ad:c6:64:7b:f2:c0:d0:79:ce:41:7a:
c1:34:fa:26:5a:b0:2a:b3:54:36:db:54:3f:dc:74:31:5a:24:
f6:49:cd:98:4b:24:18:e3:92:84:70:8c:f0:83:41:2b:2c:51:
78:c8:2e:cb:72:04:66:ce:00:b3:60:f3:72:c1:43:d7:d2:b2:
f9:ee:07:48:cb:f5:25:c4:5c:5e:a7:5a:b8:74:86:ca:91:0e:
16:d3:26:8c:33:3e:17:e5:36:fe:7f:33:d5:c5:24:d2:9f:30:
98:03:be:02:02:cb:fe:69:3d:65:29:c6:a5:65:ae:fe:d6:fd:
13:fb:6b:0f:39:cd:e7:c4:e1:3e:8f:7a:6f:ac:74:36:2f:80:
cb:13:56:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:00:30 2025 by rpki-client