Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CbwJwGy9flSlOJoalDiS_0rGQJw.roa
File: CbwJwGy9flSlOJoalDiS_0rGQJw.roa (raw, json)
Hash identifier: 8Dsjcc3niyUqKM4SJ9BmS9nXKhk28axeTeocphXRZDI=
Subject key identifier: 09:BC:09:C0:6C:BD:7E:54:A5:38:9A:1A:94:38:92:FF:4A:C6:40:9C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B238F9B4CBC16F5E85930368B4A1B652D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CbwJwGy9flSlOJoalDiS_0rGQJw.roa
Signing time: Thu 12 Oct 2023 11:04:55 +0000
ROA not before: Thu 12 Oct 2023 11:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:238e:f6dc/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:8f:9b:4c:bc:16:f5:e8:59:30:36:8b:4a:1b:65:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 12 11:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09bc09c06cbd7e54a5389a1a943892ff4ac6409c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d4:85:92:71:fe:ac:94:6b:73:83:7b:82:d7:
44:71:60:bd:d8:01:97:ee:8c:34:a5:e9:98:b5:0b:
60:0e:34:7f:03:4c:08:93:2b:93:c3:f8:af:46:d9:
d6:00:0e:d5:ad:b4:2d:9b:ee:c1:4e:de:93:15:60:
34:fe:5f:55:bb:65:0d:31:9f:c3:56:56:28:ba:1f:
ec:a1:54:93:fe:53:2f:09:70:08:e6:2c:be:74:c2:
6d:ad:d2:4b:f2:ec:e5:4e:b9:7e:76:d0:37:24:22:
88:91:df:f5:1c:0b:02:fd:c8:e9:b0:48:f7:9f:1f:
c6:9f:10:c6:77:47:07:d9:85:6e:95:38:fc:1a:b1:
c3:b3:96:e6:96:4d:d2:2b:4c:6e:3f:12:ce:3f:3f:
11:de:51:78:dc:af:38:f2:0b:14:9e:f5:0e:ef:8b:
e6:2e:da:46:e4:19:2d:a3:bb:09:d2:29:2b:85:fd:
90:08:0b:b4:39:5f:24:eb:fe:a0:84:b9:57:0b:5c:
7b:b0:06:92:2b:20:8c:6f:f6:85:0c:29:63:af:4c:
43:98:ae:ee:d1:b7:1d:fd:67:3b:0b:89:34:31:a4:
7c:99:fc:91:f5:b8:be:11:06:27:b9:cf:eb:eb:5b:
5a:c7:fa:84:9f:8d:bb:a2:fd:25:2d:79:ed:f8:de:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BC:09:C0:6C:BD:7E:54:A5:38:9A:1A:94:38:92:FF:4A:C6:40:9C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CbwJwGy9flSlOJoalDiS_0rGQJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:52:d0:be:5f:8e:e2:95:72:6c:87:50:b9:07:00:b4:13:2e:
97:3e:43:16:57:7e:44:d5:f1:ac:d0:18:fd:bc:ca:ca:b0:7c:
b0:0b:9a:71:6e:7b:72:27:61:71:b0:48:d2:f6:17:e9:f9:f3:
5b:85:57:db:cc:2f:dd:e5:b3:24:0f:1c:02:2a:39:9e:7c:fe:
9b:13:73:68:d7:4b:dc:1f:8d:f2:33:e4:7c:22:dd:ae:c7:3b:
a2:f5:25:de:45:4d:4f:41:4a:f9:30:2a:7b:a8:68:ad:40:ab:
7e:ef:a2:45:17:c5:3d:4c:4c:22:bf:5c:f3:d9:e9:c0:9a:0e:
19:29:eb:91:fd:a3:18:5d:4f:7d:39:b7:bd:e0:c1:f9:72:1b:
10:23:5c:ac:4c:ad:3d:85:5c:04:01:7f:af:7e:ca:56:63:86:
ef:0b:e9:85:49:fa:77:c2:5e:44:79:45:dd:1c:0c:63:3e:c1:
c9:80:61:03:7f:b3:80:56:17:dc:84:4b:f8:69:eb:40:8d:09:
a7:d8:b5:29:ad:47:e3:9f:44:fc:d3:1a:1a:ce:7a:f6:ac:2c:
74:0b:44:a2:c1:48:9a:83:e4:96:dd:3f:c4:d1:7e:eb:5e:0f:
35:81:14:97:af:a5:52:a5:31:42:e0:e6:ae:08:9f:39:d6:ed:
31:de:34:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:23:45 2025 by rpki-client