Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/30REblt8O4j7BvWC0voggXYuyx0.roa
File: 30REblt8O4j7BvWC0voggXYuyx0.roa (raw, json)
Hash identifier: Gj5lNESM4A5dD9pvqq9ao9i8nTv+EFvCIAiYreGEibU=
Subject key identifier: DF:44:44:6E:5B:7C:3B:88:FB:06:F5:82:D2:FA:20:81:76:2E:CB:1D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA48A69C6904A2A69842D401C22EB9BBD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/30REblt8O4j7BvWC0voggXYuyx0.roa
Signing time: Mon 06 Nov 2023 12:10:16 +0000
ROA not before: Mon 06 Nov 2023 12:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:8a:69:c6:90:4a:2a:69:84:2d:40:1c:22:eb:9b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 6 12:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df44446e5b7c3b88fb06f582d2fa2081762ecb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:2e:84:d1:c2:c9:31:58:0f:83:5e:ae:1e:
5d:d4:2f:85:2c:b7:18:fd:7d:30:64:5f:de:70:67:
b6:b5:14:fa:4b:38:6b:05:43:9b:fb:2a:cd:c1:3e:
c8:5b:5b:32:d4:3e:f0:1b:27:56:7f:45:2c:24:e1:
bd:c6:7d:0a:db:4c:58:6a:9b:5d:83:00:92:e3:e6:
fa:66:32:8d:fe:b9:6f:b7:6d:bd:ba:99:c6:84:e2:
c4:ec:6a:81:ee:c4:2e:cf:8e:8a:9a:dd:3d:19:c6:
19:08:3b:5d:52:02:58:b9:4f:d6:3d:ea:c7:cb:91:
c1:1a:ff:f6:c6:de:37:25:7c:82:6c:56:f7:97:05:
0b:09:62:3d:8b:a9:40:41:6d:ec:da:13:9b:4b:a5:
b5:40:fa:39:be:1f:fb:76:dc:d6:fc:08:f4:d6:51:
dc:bd:dd:01:60:28:96:aa:d1:c0:78:87:47:03:1b:
cf:ee:2f:89:e6:94:d3:e7:3f:fa:de:12:88:24:04:
42:fa:97:87:0f:42:54:85:e6:b3:b7:85:45:19:f9:
ed:77:35:7a:79:6d:fb:83:73:dc:8d:d5:57:da:a7:
2a:b4:63:fd:72:ae:4b:26:04:09:c9:82:d9:df:11:
0f:a2:cd:9f:eb:5d:68:f9:2d:1a:38:4c:f6:cf:83:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:44:44:6E:5B:7C:3B:88:FB:06:F5:82:D2:FA:20:81:76:2E:CB:1D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/30REblt8O4j7BvWC0voggXYuyx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ce:6e:95:b4:2d:f8:00:2a:e2:fb:2c:75:f7:c3:8a:a6:be:28:
0c:47:19:e6:52:71:cc:12:e3:84:96:6e:a0:ba:7c:25:1f:28:
23:24:b0:95:f9:e5:04:b6:5c:1b:a9:69:af:c5:d5:c5:9e:44:
af:25:e4:48:f3:8c:98:cf:30:2f:66:6d:cc:fa:dd:63:c9:f2:
d0:fa:2f:ff:33:62:14:2f:32:0c:27:a2:fa:e6:c0:ac:f7:39:
54:9e:7d:bb:bc:4b:22:25:21:fc:61:34:25:5f:66:d4:52:99:
00:6c:29:df:ea:53:bd:5e:74:f3:f8:55:5e:58:c9:8b:f9:e7:
35:6c:26:f5:ca:93:67:15:fb:74:61:86:f8:ac:04:06:5a:bb:
8f:aa:00:57:3e:93:74:71:20:7d:7c:67:51:4a:b7:97:9b:51:
64:01:bf:a4:e5:eb:34:23:94:7b:6d:c2:ec:02:c8:40:14:8b:
58:a7:16:59:9e:3d:16:cb:20:e2:66:3a:d6:cf:12:c0:77:18:
0d:1f:af:94:df:74:a6:fd:87:5f:28:57:b5:6a:8a:17:8e:95:
a9:46:a0:f0:89:79:73:47:f2:e4:dc:03:61:a7:4e:7a:b5:19:
98:97:15:6d:9f:1b:5b:3f:58:68:53:5c:1f:86:56:00:96:6b:
44:bb:ed:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:21:32 2025 by rpki-client