Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Deba1I7CAstxGycpqy19_Ioxwfo.roa
File: Deba1I7CAstxGycpqy19_Ioxwfo.roa (raw, json)
Hash identifier: q5nFbdRDbgsq/ydm8VW85tnPMSbeMoTqyKjdQ3T1bgs=
Subject key identifier: 0D:E6:DA:D4:8E:C2:02:CB:71:1B:27:29:AB:2D:7D:FC:8A:31:C1:FA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7D4B692E949232B6FA5C4AAD060C3079
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Deba1I7CAstxGycpqy19_Ioxwfo.roa
Signing time: Sun 29 Oct 2023 21:16:15 +0000
ROA not before: Sun 29 Oct 2023 21:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7d:4b:69:2e:94:92:32:b6:fa:5c:4a:ad:06:0c:30:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 21:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0de6dad48ec202cb711b2729ab2d7dfc8a31c1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b4:be:ee:19:71:89:ea:e0:c2:e7:39:f9:ff:
5e:4e:ac:62:d7:8c:6c:b9:d8:07:68:cb:8c:e4:9c:
2e:5f:15:81:70:62:5f:a5:8d:c9:22:04:da:cf:71:
fb:a9:14:10:29:46:41:46:24:e4:ed:b5:52:a3:f6:
a7:22:8e:31:61:41:35:a1:0a:99:60:dd:02:0a:29:
df:d1:6c:48:8d:e9:bc:b9:20:5e:1b:8c:af:ee:04:
f0:d9:63:79:b6:03:de:27:cc:2c:d5:16:31:ea:37:
dc:90:80:8b:a5:ef:69:20:3f:39:69:bf:7d:c9:09:
ce:6a:75:ce:b7:5d:bf:69:d4:6c:71:d7:20:bd:10:
b8:4d:07:57:32:a0:cc:f8:04:50:ea:13:04:ab:e4:
dd:25:7b:5a:ff:fa:f1:37:0a:6d:74:b0:4d:4d:1c:
a0:f4:78:cf:cc:c1:c0:f6:fd:92:9a:14:a3:b7:b3:
e1:97:ae:82:ad:b4:5e:ad:1f:87:d3:15:88:40:cc:
7d:4e:cd:b6:32:23:cb:e0:b8:68:be:39:10:bb:86:
51:95:5b:78:e6:e2:46:80:b8:40:ac:9d:96:aa:a8:
4b:24:d5:d1:07:c9:6c:cc:eb:da:0c:bc:76:64:ba:
ab:9f:65:8b:54:6e:df:43:c8:67:11:66:7b:2e:6b:
d7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E6:DA:D4:8E:C2:02:CB:71:1B:27:29:AB:2D:7D:FC:8A:31:C1:FA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Deba1I7CAstxGycpqy19_Ioxwfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:c6:7e:8e:dd:7c:59:6d:94:67:eb:45:a3:f5:0c:e1:92:b7:
40:a5:05:9c:ff:b0:de:5c:18:8c:43:18:8b:9b:b1:02:18:85:
1f:67:08:f7:0f:37:59:e0:6a:68:09:95:76:9a:f3:b0:ac:53:
16:a7:46:cf:e7:b4:df:d8:01:86:98:60:68:1d:38:7a:df:5b:
13:4d:a9:47:66:e1:b0:cb:8f:d3:b3:b6:7a:b0:a8:2e:ad:44:
fa:13:2c:b6:f7:c2:54:10:87:1e:77:d7:5f:9b:eb:03:46:1e:
72:03:3d:fe:50:85:6c:22:18:71:a6:95:95:dd:11:c8:8c:0c:
93:76:23:0b:71:53:9e:bc:8e:02:ea:e0:5a:9e:12:f4:d1:2d:
07:38:a4:91:9f:a5:af:05:3e:24:27:6d:ca:81:4f:bb:9e:44:
67:87:74:c8:05:98:5c:cf:26:81:9f:f8:1d:df:13:4b:7e:a9:
22:2d:da:27:01:75:03:08:f3:ac:8a:15:dd:de:3f:8a:0d:e1:
82:9e:07:c7:71:94:77:7f:3a:60:31:c8:fe:30:c3:97:ba:4d:
82:9f:a2:c1:92:90:e3:68:4c:1d:1e:e2:12:f2:bb:a9:89:67:
59:1f:67:b8:3f:68:8b:f9:cc:91:cd:0e:ac:5a:c1:2a:23:c3:
1f:00:ae:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:39:19 2025 by rpki-client