Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/37yPWp8wjbd2sDEP4oPq2_UrOjk.roa
File: 37yPWp8wjbd2sDEP4oPq2_UrOjk.roa (raw, json)
Hash identifier: BUmAp15xJvwLSje6ySPSrBkkQeU+bh40g320CPrqbrc=
Subject key identifier: DF:BC:8F:5A:9F:30:8D:B7:76:B0:31:0F:E2:83:EA:DB:F5:2B:3A:39
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCF07812E9F2FD9BAD9ED368D6EA07928
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/37yPWp8wjbd2sDEP4oPq2_UrOjk.roa
Signing time: Tue 14 Nov 2023 18:10:57 +0000
ROA not before: Tue 14 Nov 2023 18:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cf:07:81:2e:9f:2f:d9:ba:d9:ed:36:8d:6e:a0:79:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 18:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfbc8f5a9f308db776b0310fe283eadbf52b3a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d5:04:99:8c:76:0e:1e:a5:e9:2d:42:10:70:
d0:58:ac:9d:83:11:6f:71:1b:8f:bc:e0:b1:3d:96:
06:f3:e5:ef:14:98:28:da:e2:e9:9c:5a:36:a4:e4:
48:24:8a:9f:73:87:41:5b:5d:26:eb:09:a5:b2:d6:
1d:52:8c:64:da:92:4d:79:0b:15:a6:93:eb:ea:d7:
1b:39:54:06:6f:4d:3d:a6:5c:b1:99:86:12:8e:b8:
ca:bb:09:c3:8a:11:ee:ee:b0:25:df:6b:36:bc:7e:
98:d6:ec:c4:e5:6f:e5:fc:fb:c5:b0:49:68:76:6c:
e3:fa:df:7c:ba:d5:27:c7:f9:02:e5:f5:0e:87:88:
14:b1:f5:9e:86:16:20:c7:f3:f0:df:c9:f8:37:b3:
2a:11:c1:5d:10:43:5b:e7:bd:cb:9d:85:c6:37:9e:
06:b8:eb:10:49:9e:0b:28:2f:70:4e:f6:3a:9a:88:
cc:f1:e2:74:52:ad:43:59:51:3c:0f:8d:e4:a2:d6:
b6:76:7f:71:66:8f:22:f7:45:11:2c:bb:8e:8d:a2:
61:44:a0:7b:b2:1b:3b:a5:98:37:d7:04:14:dd:fe:
1d:99:28:76:03:03:79:1a:1f:2b:94:30:61:49:32:
0f:c6:76:0a:4b:56:c7:09:d8:6c:e9:08:e5:e0:6c:
f4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BC:8F:5A:9F:30:8D:B7:76:B0:31:0F:E2:83:EA:DB:F5:2B:3A:39
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/37yPWp8wjbd2sDEP4oPq2_UrOjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:5c:7f:82:2c:e7:b3:b9:24:a3:d0:ab:3b:58:db:12:aa:a9:
b3:a9:04:6e:2b:02:3e:6b:4b:0a:4b:3d:4c:1c:22:80:22:0f:
57:be:48:4e:d8:2a:34:50:53:01:76:a3:e8:5e:8b:a3:39:4f:
5d:8f:dd:75:05:72:fb:0a:50:ef:60:94:f8:9e:84:9a:bb:da:
70:c5:ef:c0:30:e0:47:94:0c:bb:4c:77:c4:8f:dc:86:c2:06:
82:c7:2e:85:f6:34:d8:93:e3:fc:28:e7:37:80:1f:b4:94:fe:
cd:25:b4:e9:bd:7e:48:a9:94:b5:74:d7:99:4b:ef:b5:ae:4f:
68:1e:68:2f:d1:18:02:c9:96:5b:fb:63:b8:92:2f:33:b3:7b:
48:1c:14:96:c8:87:d3:d6:57:28:ed:9f:f1:8d:32:30:21:11:
5f:78:ca:df:c1:2e:79:06:0e:8f:a9:fa:a0:be:69:a4:3f:e4:
00:65:a6:9c:f3:e7:1d:41:d2:f8:b8:c2:55:c9:15:45:d3:13:
4c:8b:48:d4:25:20:37:7d:be:04:1a:95:58:4b:50:64:75:2e:
a0:24:76:74:42:3d:07:0d:c6:d0:6c:c9:17:05:91:5b:ea:66:
d5:a4:de:3e:d1:01:fb:61:74:4a:c8:b8:d6:12:b9:3f:10:08:
f5:68:38:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:58:04 2025 by rpki-client