Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/C0VW_OUjIKRBtFZlrgnJcZm7fmE.roa
File: C0VW_OUjIKRBtFZlrgnJcZm7fmE.roa (raw, json)
Hash identifier: XBsxA11sPLNOjVakY1fzCIG9QIM9iX8gHHJ1wRyZ0+g=
Subject key identifier: 0B:45:56:FC:E5:23:20:A4:41:B4:56:65:AE:09:C9:71:99:BB:7E:61
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF2747063DE07F8261DC680029B3E79BB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/C0VW_OUjIKRBtFZlrgnJcZm7fmE.roa
Signing time: Mon 02 Oct 2023 22:13:51 +0000
ROA not before: Mon 02 Oct 2023 22:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f2:74:70:63:de:07:f8:26:1d:c6:80:02:9b:3e:79:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 22:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b4556fce52320a441b45665ae09c97199bb7e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:aa:fe:69:6e:25:66:be:1c:7e:a9:fa:e1:
a3:06:83:e6:80:2c:3d:98:cc:e7:ef:8a:78:00:19:
93:c8:94:4a:8f:79:b5:84:ba:93:60:c3:c5:65:a3:
7f:14:6b:9b:23:f1:d8:57:6a:7f:24:38:ac:aa:8e:
c3:d6:9b:55:4c:a8:50:fc:ba:e6:e9:25:f1:85:10:
45:4f:aa:15:69:cf:b8:4f:b8:6e:a5:fe:51:ed:e9:
ad:08:fd:7f:66:72:a6:0a:00:91:84:93:11:c7:e8:
d7:20:2c:2f:eb:18:cd:34:f6:4a:06:b4:e1:41:25:
44:92:bf:02:99:d0:94:11:71:3a:75:dc:05:12:a2:
e1:87:42:dd:b2:4c:c3:ef:44:d9:aa:8d:a0:d6:3a:
e0:39:f0:69:28:4e:dc:8e:43:09:ac:35:d8:40:a9:
f1:5e:d1:83:31:0b:d0:58:83:57:8e:39:a4:c8:d0:
05:c6:c9:d9:a7:3e:06:60:2a:8a:7b:05:55:dc:51:
b7:85:1f:dd:ae:dd:99:4a:27:4a:b3:74:7e:79:17:
dd:07:ad:af:b0:88:29:f5:11:f6:7c:66:11:9f:9e:
a8:3d:fa:4a:d3:27:6f:9e:c6:5a:bd:ce:5d:7d:8b:
40:b8:af:12:4c:d1:a4:84:3a:b8:c8:61:a6:4a:11:
74:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:45:56:FC:E5:23:20:A4:41:B4:56:65:AE:09:C9:71:99:BB:7E:61
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/C0VW_OUjIKRBtFZlrgnJcZm7fmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:71:0d:c4:9a:83:bb:62:c6:7a:a1:49:8d:4a:a7:cb:2c:46:
f3:72:50:f4:6e:92:39:55:f8:4b:4d:de:af:79:9a:84:1c:e3:
bc:6e:27:19:78:06:7a:b6:49:cc:87:8a:43:56:c7:a8:ad:ae:
47:00:5b:f2:fd:7a:23:ae:13:83:14:1e:81:3f:ad:04:2e:6b:
ac:57:f7:aa:d8:a9:ce:4e:ba:3b:da:14:53:a3:7d:fc:8a:d3:
ec:c6:bf:6f:d4:d9:3f:29:b9:6b:63:1a:92:cd:03:91:37:0f:
4a:30:26:9f:5f:03:8a:e8:e9:01:34:0b:00:55:67:cc:48:46:
00:78:3d:63:ba:fd:10:eb:7c:1a:b6:94:23:82:ab:93:b5:61:
a3:fd:c1:f6:d5:47:45:a9:1c:7a:c0:4e:eb:93:db:91:92:6c:
5f:35:c4:34:42:97:c9:5c:60:c0:84:5a:8a:76:db:5a:2c:35:
49:b7:f4:be:41:74:09:93:f4:7e:c0:87:3a:b9:dc:6b:42:7d:
68:39:61:50:74:d4:b3:0d:ad:ab:45:0c:4e:4f:4c:08:9e:56:
69:12:0e:5c:6d:1e:58:6a:93:76:c5:67:f7:33:9b:45:83:f1:
2e:29:f7:65:1e:db:f2:9e:56:9e:2b:87:b4:9e:a6:a9:93:ce:
ae:4a:3c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:19:52 2025 by rpki-client