Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DekBKnTFEimMgWGvHalx3FeAo78.roa
File: DekBKnTFEimMgWGvHalx3FeAo78.roa (raw, json)
Hash identifier: 4nbKIMofotBqshi7nHWdpJRPkx6VSWaEwvHXLJwr76s=
Subject key identifier: 0D:E9:01:2A:74:C5:12:29:8C:81:61:AF:1D:A9:71:DC:57:80:A3:BF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C72F1EB645D7FA4B548BFC7639D0FB042
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DekBKnTFEimMgWGvHalx3FeAo78.roa
Signing time: Sat 16 Dec 2023 14:05:06 +0000
ROA not before: Sat 16 Dec 2023 14:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:72f1:69db/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:72:f1:eb:64:5d:7f:a4:b5:48:bf:c7:63:9d:0f:b0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 14:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0de9012a74c512298c8161af1da971dc5780a3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:b6:1c:60:3a:f0:0e:a3:79:a4:30:bd:b1:
df:79:f0:22:50:95:b7:fb:c3:64:b4:9a:05:d7:92:
ed:d6:a4:01:a5:4d:b2:37:5d:b3:04:8c:a4:ad:43:
49:63:3f:97:54:0c:d5:a5:cb:64:c5:14:eb:79:60:
d0:36:d7:8c:d0:3e:74:0e:65:da:a8:4f:9d:41:e4:
cd:2f:06:4c:77:ac:7d:dc:70:74:52:89:e7:3d:5c:
09:aa:3d:b2:96:11:37:d7:cd:e8:ab:03:f8:ca:49:
a0:2b:3c:64:32:85:8a:b9:8e:aa:b7:19:5e:6e:f9:
a1:0f:04:82:34:17:53:3d:c5:77:cc:4e:13:0f:9c:
c1:02:a3:8f:1a:de:fc:16:a6:2e:c5:bf:00:df:bf:
4f:78:29:c8:57:f6:58:fb:ae:80:07:64:59:d9:f0:
e5:a2:eb:6c:88:1e:c2:89:19:57:a9:35:6d:7e:d9:
57:ed:20:dc:7e:91:c2:44:5a:3e:35:21:ab:14:e3:
32:05:72:ea:a2:11:c6:78:1f:f5:ae:40:73:d4:05:
2c:c0:fd:ca:e7:46:27:1d:e9:80:9b:b8:9e:15:da:
37:89:5b:59:a5:8f:ef:b2:26:c8:b2:9c:e0:b7:37:
b2:b5:09:dc:f8:58:be:30:1a:40:04:ac:77:f4:88:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E9:01:2A:74:C5:12:29:8C:81:61:AF:1D:A9:71:DC:57:80:A3:BF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DekBKnTFEimMgWGvHalx3FeAo78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:a9:08:f1:72:ba:93:03:cf:b4:e4:b8:85:2d:f6:ff:e1:9e:
3f:91:17:f4:3b:e5:6a:43:5f:1e:e7:1a:07:04:fe:7c:7a:5f:
ef:13:3a:c8:c0:34:32:37:74:9d:2c:e2:e4:a6:c5:21:1b:24:
e3:76:f4:57:ec:f0:c7:90:d0:c7:07:5d:11:65:4d:9d:de:9a:
fb:5a:7a:8f:ec:a8:1d:42:fb:09:e8:19:22:e6:4b:4e:82:f9:
65:5a:a3:ee:e9:83:c4:e2:52:3b:1d:61:14:6b:e1:fb:55:66:
8e:22:f8:af:21:32:ad:9d:7c:4d:6b:f4:fb:39:ec:01:43:2b:
ae:98:ef:21:32:a9:28:b4:a8:3c:7b:bf:8a:2d:64:8d:36:0b:
aa:82:c7:4c:8b:93:de:85:7c:f2:6f:b4:50:54:e8:ca:cc:0d:
81:74:6e:9b:51:29:57:29:c7:ab:be:8a:29:1f:7b:2c:53:ea:
d3:de:38:8f:ad:1a:27:95:53:b6:44:a7:62:0d:eb:c4:c6:ce:
88:6e:3d:6c:c6:e6:8d:8e:50:3c:97:db:87:1d:dd:93:81:e4:
06:fe:db:a6:53:71:04:92:9c:88:bf:f7:2c:0a:ed:db:68:f3:
da:3b:b6:71:4d:84:44:11:f5:0f:9a:b8:de:0e:29:7b:4c:4f:
5c:93:24:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:35:42 2025 by rpki-client