Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/C0SKdU4zwJzY7ySx9gO5r_r189Y.roa
File: C0SKdU4zwJzY7ySx9gO5r_r189Y.roa (raw, json)
Hash identifier: ciue1YZxgcdmB/c7OU+IXpM6Z2ju697QbNppBYXyPdY=
Subject key identifier: 0B:44:8A:75:4E:33:C0:9C:D8:EF:24:B1:F6:03:B9:AF:FA:F5:F3:D6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B83E83956723DA199908401BBC885F271
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/C0SKdU4zwJzY7ySx9gO5r_r189Y.roa
Signing time: Tue 31 Oct 2023 04:05:16 +0000
ROA not before: Tue 31 Oct 2023 04:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:83e7:93c3/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:83:e8:39:56:72:3d:a1:99:90:84:01:bb:c8:85:f2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 04:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b448a754e33c09cd8ef24b1f603b9affaf5f3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ee:7e:8b:42:a4:8c:2e:8f:8b:a8:af:ee:5d:
cb:e0:68:fb:9a:b1:65:43:e3:81:ce:f8:95:80:d6:
f6:39:a3:3e:57:5b:38:a6:cb:02:59:5b:83:e1:53:
1d:75:08:29:84:66:64:6e:5f:b7:36:78:17:f8:8f:
81:f4:22:d5:01:aa:a5:7d:ce:74:ad:83:0a:49:7b:
93:91:bf:1c:e2:fa:c8:13:d4:38:ba:89:f6:f5:3b:
37:49:b2:5c:c8:63:6c:0f:76:8e:aa:12:7e:c8:15:
c5:10:79:cf:f6:fb:69:6a:30:05:ab:f3:e9:9e:2d:
93:12:71:01:79:41:ec:cf:8e:a6:70:79:7e:c5:35:
39:de:ec:c5:07:fe:9e:4d:c2:5b:25:bd:d8:9b:0f:
df:b9:12:7c:73:77:54:ff:71:33:ea:33:66:77:dd:
75:09:b3:40:9f:88:fa:0f:37:49:a9:c7:75:8d:a8:
4f:85:be:69:f9:b0:2c:3f:c5:46:e4:6b:9d:84:b9:
44:e7:44:6e:6f:ef:0a:26:6a:40:79:ef:8b:bd:e7:
cf:c5:26:91:fd:c7:20:c9:75:12:b8:47:69:31:63:
6c:3e:56:19:06:dc:cb:6d:52:fd:59:8d:f4:87:7b:
2b:b5:f6:28:ba:d1:22:9b:9a:e0:5e:ba:95:1d:ab:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:44:8A:75:4E:33:C0:9C:D8:EF:24:B1:F6:03:B9:AF:FA:F5:F3:D6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/C0SKdU4zwJzY7ySx9gO5r_r189Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:0b:e2:f2:7a:ea:c7:85:fa:07:06:94:15:75:f0:2a:44:00:
30:7e:fd:2a:80:c3:80:c4:d8:93:36:2e:59:36:1d:68:c5:a2:
b0:a2:7c:24:06:d4:96:33:9e:79:ba:b1:fb:53:97:0c:9c:5a:
2a:ec:49:70:5f:07:1c:b7:3b:f8:1e:c6:a2:ec:c2:8b:3f:04:
03:40:43:06:03:77:e1:52:52:66:c6:cd:cf:ea:92:7d:9b:5f:
ad:60:39:d8:9c:2a:6a:78:28:8a:68:2b:60:54:9b:f3:31:85:
62:9f:da:e2:ef:94:34:2d:00:49:49:84:1c:42:a0:9e:73:98:
a1:6d:46:be:3b:99:9b:0e:c7:a1:8d:0d:ba:e5:08:6b:99:1f:
12:f6:5f:68:18:11:63:ca:b7:a1:1b:a5:2b:85:c3:a4:3e:3e:
65:bc:bd:5d:13:a4:b6:f3:5f:86:2b:88:84:12:61:55:77:9f:
0a:bd:58:db:01:f5:be:4b:24:fe:8b:c3:03:20:6e:fb:b8:41:
fa:1a:25:d8:6b:de:76:e9:c4:7e:3c:62:99:22:a7:0f:d9:d8:
7d:ea:a2:88:6c:a1:0e:fe:de:d4:f0:22:bd:b1:de:b9:78:f6:
73:37:8a:f9:e4:16:2f:25:f0:8e:ab:35:db:f6:26:04:6f:61:
44:4c:e1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:46:11 2025 by rpki-client