Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CoSSRDgaFa5RL0d-snTyhzcmDN8.roa
File: CoSSRDgaFa5RL0d-snTyhzcmDN8.roa (raw, json)
Hash identifier: ebmUj4IJA0DmzlVn8pZsh1vKq6C3kxKA/nNBfQ8Ne5k=
Subject key identifier: 0A:84:92:44:38:1A:15:AE:51:2F:47:7E:B2:74:F2:87:37:26:0C:DF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4C950365B52804DB9F7D716885FC93AF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CoSSRDgaFa5RL0d-snTyhzcmDN8.roa
Signing time: Fri 20 Oct 2023 10:15:16 +0000
ROA not before: Fri 20 Oct 2023 10:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:95:03:65:b5:28:04:db:9f:7d:71:68:85:fc:93:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 20 10:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a849244381a15ae512f477eb274f28737260cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:d3:51:bf:b5:fe:be:33:9f:46:b0:e5:b0:
46:a3:84:1f:a8:48:fb:2b:cf:d1:c9:df:2f:d7:ba:
45:07:92:25:0e:80:34:a1:a7:5f:3f:98:7b:1b:26:
78:e3:d8:41:f7:f5:bc:0a:1d:01:17:da:6a:0e:c3:
4a:61:8d:53:7b:05:b2:44:cf:79:ed:10:54:97:ab:
00:63:b3:69:17:e1:35:9f:a2:54:54:12:16:56:6b:
76:67:54:1f:48:a4:ae:2e:a9:fa:3f:6f:d4:de:cc:
23:a4:fa:59:d6:ba:f2:14:1b:91:c2:c1:f0:02:04:
be:b1:b5:58:9b:cc:11:08:67:82:54:4b:38:79:c9:
c8:15:75:a6:fb:ea:29:10:b4:77:6d:d0:20:a1:c6:
4c:51:c2:ff:df:61:ad:90:ae:f9:fe:e2:99:e4:4d:
33:17:94:a2:67:95:75:4a:b1:b1:3c:e2:6a:e3:5a:
e1:06:86:4b:b6:fa:06:f9:a6:2f:ca:d7:28:ef:fc:
dd:7d:1a:6b:ea:71:5c:5f:d3:0e:21:ab:be:bf:63:
cb:21:d0:d1:c0:65:7b:0f:2c:a8:a5:97:8b:36:fc:
7d:e3:ba:bc:80:61:28:48:fe:1a:7f:da:b3:3d:67:
9f:dd:e9:07:35:ad:01:39:ab:b7:fb:88:02:ad:b3:
76:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:84:92:44:38:1A:15:AE:51:2F:47:7E:B2:74:F2:87:37:26:0C:DF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CoSSRDgaFa5RL0d-snTyhzcmDN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:77:41:4f:44:98:34:36:1c:92:1a:71:17:ee:c1:df:b0:3d:
6c:bb:bc:3c:04:71:e7:fc:d0:86:a5:5d:08:1d:8c:bf:76:21:
e7:06:ba:81:35:ae:e2:cb:be:10:71:d0:f1:eb:7d:3b:4f:fd:
c0:0f:59:20:bc:3c:74:21:9d:8b:b9:6e:d1:55:ad:81:d4:fe:
d0:3d:80:ea:da:8c:dc:a9:d2:c8:70:d6:b5:48:53:99:c8:e6:
f6:87:e8:55:c8:95:e6:ad:2e:44:c2:c0:dc:4f:1e:80:03:32:
82:86:89:22:43:04:f7:61:5a:fe:4d:8b:d1:68:af:8d:4b:81:
02:c4:7a:07:8d:46:ee:83:bf:f5:10:bd:94:4d:31:a4:67:f3:
81:cc:98:42:87:2c:39:2e:1f:ab:22:ff:d1:f9:6c:50:88:17:
13:fe:d3:a1:3d:e8:23:fc:1a:dc:84:9f:96:c0:a1:ce:5b:63:
92:c2:de:23:24:2e:65:23:6a:2e:87:05:9a:cf:03:f8:18:2c:
87:f6:3f:1f:c9:91:92:6d:b0:f4:4a:c0:cf:1d:7b:a5:74:53:
af:dd:65:9f:35:e9:9f:8f:a2:4e:e9:d1:a9:16:84:96:f4:11:
92:a7:a0:3c:50:20:c1:a4:fe:0a:6a:27:a6:17:2c:4d:d7:ed:
55:d3:6d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:36:49 2025 by rpki-client