Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8oe1WWNLCSkVj8mnckjnvWRa-14.roa
File: 8oe1WWNLCSkVj8mnckjnvWRa-14.roa (raw, json)
Hash identifier: sCtVVL73BxMCot+uGCWm728DAacosZJIvgBsjLs8Ucc=
Subject key identifier: F2:87:B5:59:63:4B:09:29:15:8F:C9:A7:72:48:E7:BD:64:5A:FB:5E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF4FD485CDDF058AAF5AB9B48600A5973
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8oe1WWNLCSkVj8mnckjnvWRa-14.roa
Signing time: Wed 22 Nov 2023 03:05:21 +0000
ROA not before: Wed 22 Nov 2023 03:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18b:f4fc:e066/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f4:fd:48:5c:dd:f0:58:aa:f5:ab:9b:48:60:0a:59:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 03:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f287b559634b0929158fc9a77248e7bd645afb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:6d:97:f3:39:2c:ee:0f:f4:76:03:43:27:
60:e9:e2:cd:98:36:ea:5a:c4:b0:cd:0c:8d:4c:0a:
ab:60:01:b5:99:39:f9:3d:8d:d8:ff:1c:ab:63:41:
6b:8e:f1:c0:aa:76:f8:35:3d:57:37:14:16:c2:e0:
b1:e8:82:9b:0a:1f:c5:87:9a:93:16:62:e5:49:78:
34:a6:85:7e:26:a4:9b:61:aa:73:12:7c:d2:c7:20:
3c:8c:d2:19:c7:04:6b:06:db:47:d3:bb:5d:56:42:
60:7e:39:30:a1:1a:86:1f:c7:9d:82:28:74:81:be:
c6:d4:e2:b2:f4:d9:1d:e8:2d:ac:c4:4c:79:ae:a6:
c7:35:ea:e2:b2:67:c4:70:01:17:3d:d9:f2:9e:1f:
75:7e:00:3b:5c:f1:af:e2:6c:51:30:27:23:aa:ac:
5c:55:45:cb:0b:d5:e4:3b:81:55:b8:cb:18:8a:94:
f8:36:fc:2a:b2:ae:88:60:6a:0c:b4:12:5f:37:e0:
8c:16:be:89:e7:cc:f4:20:8e:cd:4a:f4:6f:ba:26:
00:0d:16:15:9b:e5:d6:99:e4:0b:bc:ca:59:19:7e:
4f:f4:72:6a:c9:b2:c5:c1:ea:d5:bb:50:1e:fe:13:
ea:2c:16:83:77:89:d9:31:c4:dd:bf:a1:2a:9b:5e:
98:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:87:B5:59:63:4B:09:29:15:8F:C9:A7:72:48:E7:BD:64:5A:FB:5E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8oe1WWNLCSkVj8mnckjnvWRa-14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:04:f5:a3:0e:f8:f8:c0:4d:4f:7f:df:0c:67:5c:30:bd:79:
9b:8a:98:e2:fe:4b:f3:37:1e:5a:1e:43:c6:dc:60:d0:0f:f8:
a3:d0:74:c1:1a:70:44:c4:fc:10:2a:10:50:6d:27:cd:f5:12:
3f:5f:77:2d:46:88:a6:28:01:a8:9c:4c:2d:60:4b:07:97:7e:
b6:1a:1c:61:8e:46:3f:13:2f:fa:48:54:d7:80:3c:69:ba:71:
83:7a:8f:f0:8a:22:ad:e6:a0:e8:85:c0:99:bb:d3:64:ab:f2:
0a:0b:be:1c:2d:51:32:bd:c8:1a:e6:18:d2:b9:6d:d1:64:89:
ec:00:5d:fc:c2:59:cf:56:52:df:80:d5:9f:27:29:08:c3:41:
93:b2:e6:08:d2:8f:88:39:aa:9e:43:ea:d9:14:75:02:f7:d4:
f9:4f:63:91:3f:e7:dd:0e:ed:a5:b1:1c:26:21:4b:9b:58:92:
10:7c:d8:38:70:3d:4f:ff:f3:aa:be:95:5b:43:90:e3:27:75:
de:e5:2f:93:7e:16:a2:b2:38:46:fc:21:b3:ed:a1:90:cc:28:
de:e4:f8:fd:fc:d8:dc:83:05:06:3a:32:90:54:a3:82:1e:0c:
94:17:e1:5e:fd:e6:3f:72:02:74:50:20:b1:38:9c:2d:58:63:
09:9c:d8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:09:55 2025 by rpki-client