Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0nhDL2ZU56f_RgME4aO2cpaJwlc.roa
File: 0nhDL2ZU56f_RgME4aO2cpaJwlc.roa (raw, json)
Hash identifier: P2nNpue447HWy4WDpoW7rER7JNrhcSqAaymqQfhPBqE=
Subject key identifier: D2:78:43:2F:66:54:E7:A7:FF:46:03:04:E1:A3:B6:72:96:89:C2:57
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9A0D2A237F666ED4C975D8920C78501B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0nhDL2ZU56f_RgME4aO2cpaJwlc.roa
Signing time: Sat 04 Nov 2023 11:17:15 +0000
ROA not before: Sat 04 Nov 2023 11:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9a:0d:2a:23:7f:66:6e:d4:c9:75:d8:92:0c:78:50:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 11:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d278432f6654e7a7ff460304e1a3b6729689c257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:82:5e:bd:90:ca:74:f0:9b:2b:56:6a:37:a3:
c0:27:92:9e:36:9d:1a:62:8a:1a:5a:12:5b:09:b8:
84:c4:14:14:3e:aa:21:8a:4d:bf:d8:d9:2d:43:6e:
2f:6b:a0:97:98:40:4d:d4:00:f2:d0:e8:b3:bd:04:
54:ef:83:a6:29:4e:34:b0:23:49:8a:52:7c:fa:6f:
ab:bd:4d:92:91:53:cb:4e:9d:71:c5:e1:3e:47:2f:
25:2f:a8:a3:47:81:c2:80:a5:3e:b1:ed:7f:46:cb:
1e:dd:d0:3b:7c:f6:2d:26:94:c7:e2:86:74:10:0d:
75:3f:f1:86:61:71:e6:b4:0d:ac:c3:8b:fc:50:ea:
6e:0c:d5:cc:c1:3b:6e:38:b4:33:e0:d5:37:38:d1:
53:60:5e:d6:c7:e2:eb:ea:0f:81:b2:bd:31:92:9d:
58:85:d8:a9:02:b4:0e:ed:4d:e4:be:f1:da:c6:c1:
d7:91:5d:62:63:20:29:2b:51:42:22:92:46:ca:23:
71:59:c5:bd:54:72:75:a3:8d:56:58:b8:8f:2c:4c:
0f:05:b8:43:cb:4d:39:30:90:3b:fc:e3:fc:d6:00:
b4:35:ae:4c:d7:36:2f:0d:c5:3b:81:b9:49:f2:fc:
ec:91:fc:14:0a:18:52:bb:a6:66:b1:c3:41:84:7f:
52:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:78:43:2F:66:54:E7:A7:FF:46:03:04:E1:A3:B6:72:96:89:C2:57
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0nhDL2ZU56f_RgME4aO2cpaJwlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:64:2e:60:20:61:52:03:14:58:0d:b2:f7:fd:14:35:9d:ea:
c8:1e:42:43:0f:df:59:8a:b5:ae:8f:06:5b:83:6e:c4:8a:cb:
c0:6c:bc:d4:b0:50:e3:09:4b:51:ae:f4:00:1a:ee:bd:d4:ca:
d2:10:7c:72:d5:f4:be:97:c8:21:c6:62:6f:80:b4:64:d5:20:
55:50:85:e6:c9:b0:f8:c0:3c:96:4d:98:a9:12:04:c3:e5:e6:
88:1c:82:a8:bf:4a:e6:b2:75:16:1e:d3:d3:6d:58:e6:05:fe:
f7:27:f6:34:8b:5e:cd:f0:d5:64:19:10:95:d3:d0:3d:38:33:
76:09:16:22:f3:72:89:b4:f1:28:b5:16:3c:6d:f9:1c:a3:33:
67:0c:ae:cc:54:8f:7e:56:9c:a9:0e:8a:be:4d:72:50:4f:9a:
e4:ff:10:6b:00:31:34:0f:8c:28:dd:f4:e9:f8:33:52:2e:02:
79:0f:bc:ec:cd:97:65:0a:24:aa:29:d1:3c:c5:7e:1d:95:ac:
91:a2:d3:b9:c3:01:42:66:6b:cd:56:9d:e9:28:2f:b6:34:5d:
a0:94:c7:9d:2d:7d:53:b1:ce:ae:c2:fd:80:9a:a3:4a:b8:9b:
51:03:37:2e:4e:85:4f:8b:3b:19:a0:63:56:6b:51:4f:d6:ff:
86:23:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:46:35 2025 by rpki-client