Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1pU7rsg3RtiJyNdut_O1vtYQGlg.roa
File: 1pU7rsg3RtiJyNdut_O1vtYQGlg.roa (raw, json)
Hash identifier: mDwhZBVOWPnu+2MlY1z2Sr5gzQwH0EGeK4i8J/V+DMQ=
Subject key identifier: D6:95:3B:AE:C8:37:46:D8:89:C8:D7:6E:B7:F3:B5:BE:D6:10:1A:58
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C37B89CE0417BFB5F13165FECE7604A47
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1pU7rsg3RtiJyNdut_O1vtYQGlg.roa
Signing time: Tue 05 Dec 2023 02:04:54 +0000
ROA not before: Tue 05 Dec 2023 02:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:37b7:f529/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:37:b8:9c:e0:41:7b:fb:5f:13:16:5f:ec:e7:60:4a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 02:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6953baec83746d889c8d76eb7f3b5bed6101a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:a5:68:3e:fa:2a:9f:70:ab:b7:12:6c:cb:
d4:f3:b2:aa:50:4c:06:b5:51:f3:04:91:3c:79:d9:
2c:9e:8a:17:f1:54:6c:08:72:62:49:74:c8:32:42:
3a:9f:3c:a3:4c:28:6a:f5:d1:05:92:b8:88:13:ed:
9a:b5:76:aa:e6:4d:95:bb:88:22:25:9b:8a:ee:e1:
a5:5c:8d:bb:22:9f:84:7b:8e:ec:1e:cf:e0:57:44:
b7:5a:10:79:81:72:f1:e9:bf:43:94:67:8a:c5:6f:
b8:33:e5:b7:f6:43:7a:d1:ff:cf:7d:3c:4e:c5:20:
51:e8:64:06:f8:12:49:99:14:c1:49:57:bf:d8:6c:
c7:61:c5:84:02:58:e3:fb:83:f3:a6:73:1b:48:35:
33:d4:c1:65:e5:cc:9d:b8:c7:1e:13:92:ea:2f:c8:
01:b1:7a:46:b4:2b:1d:34:6b:d9:0f:06:25:42:8a:
9a:2c:02:44:e0:e2:bc:80:f6:0e:e0:8c:7a:e2:d4:
60:51:5c:7b:ad:05:81:b3:65:09:20:f5:93:c4:a8:
39:a7:d1:d8:cd:96:7f:eb:d6:85:1d:b6:49:c5:e8:
e2:d2:51:cd:c7:7b:e5:53:66:f6:bb:5d:86:60:d0:
81:06:e6:aa:7c:70:ed:1b:f3:ee:b9:25:c3:b3:b1:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:95:3B:AE:C8:37:46:D8:89:C8:D7:6E:B7:F3:B5:BE:D6:10:1A:58
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1pU7rsg3RtiJyNdut_O1vtYQGlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:76:a7:6b:a8:23:32:ed:45:ca:c6:e5:30:22:6a:10:55:19:
a6:ab:ce:1f:aa:39:e8:51:cd:ec:b6:b8:6f:1a:99:a8:37:ef:
7c:f1:69:3b:8f:9a:c3:99:ad:0e:c3:bc:db:02:b5:ee:a1:75:
f3:69:28:59:68:27:1f:6d:5c:5f:e7:70:b1:a1:5a:e5:a3:46:
81:5c:cd:62:03:2c:0b:45:cb:c1:79:d1:64:02:60:cf:00:1d:
7e:a8:19:51:68:57:24:d6:74:2b:10:b4:54:12:b1:6b:91:5c:
33:12:a0:72:1a:04:12:0a:a6:72:d6:f0:a8:79:5e:eb:39:9d:
58:c2:b9:36:cb:94:83:5e:a0:cb:04:df:39:d4:50:9b:7c:9f:
98:ed:5f:99:a7:95:a4:39:4c:86:7d:1b:0f:d7:50:82:32:db:
f8:08:57:af:03:af:e6:bc:f1:5b:a4:5f:97:22:c0:9c:8c:c6:
03:92:7c:a0:80:e0:d9:14:75:58:7e:e8:a3:89:96:79:ee:62:
f9:6c:7a:a7:6c:bf:37:1e:c2:b3:f9:50:c2:9b:65:ac:34:ce:
9b:99:09:cf:ce:0a:2c:b5:69:90:28:94:02:61:8f:9a:42:eb:
db:49:46:ae:c6:db:43:b4:2d:4e:0e:b0:43:52:dd:51:86:bb:
1a:b6:d1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:56:09 2025 by rpki-client