Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IHwM8cWjBrittKfPYmNiZPC3g_o.roa
File: IHwM8cWjBrittKfPYmNiZPC3g_o.roa (raw, json)
Hash identifier: 8u7hFSKjXvLJIp4OcuNzVaGbCDJnfQbkonWHsmjI5Ek=
Subject key identifier: 20:7C:0C:F1:C5:A3:06:B8:AD:B4:A7:CF:62:63:62:64:F0:B7:83:FA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2884327E24B66D945D664F463210D9FB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IHwM8cWjBrittKfPYmNiZPC3g_o.roa
Signing time: Sat 02 Dec 2023 03:13:21 +0000
ROA not before: Sat 02 Dec 2023 03:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:28:84:32:7e:24:b6:6d:94:5d:66:4f:46:32:10:d9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 03:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=207c0cf1c5a306b8adb4a7cf62636264f0b783fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d5:74:5b:d0:40:ac:d4:cc:c8:50:96:68:55:
26:73:ab:46:b0:d7:18:5c:82:89:db:9a:d8:06:8b:
14:f7:d2:38:ce:38:39:4d:ce:58:18:5d:b9:09:87:
fa:eb:8c:e2:bd:74:58:7e:ca:bc:fa:dd:7b:42:c6:
5d:5c:3b:e2:01:21:a4:86:dd:67:e6:6a:d2:e0:3f:
0f:40:26:55:f2:f3:63:19:dc:46:9d:bb:82:8b:6b:
84:b8:ee:bc:9f:84:fd:69:ce:95:81:1a:13:3e:05:
c8:19:f3:f9:87:b8:c6:c1:3a:e3:ac:e1:5c:56:8c:
85:85:fd:37:91:0a:9f:e3:ad:94:f1:aa:ac:ff:e4:
a2:be:1f:8e:d9:af:f3:10:ab:93:c9:d2:92:3e:12:
c5:15:db:eb:30:0b:f2:62:37:3f:f3:a2:28:6a:79:
7b:86:ea:5d:4b:8f:a5:33:cc:fb:82:2d:57:9b:08:
c1:91:9f:b1:53:8c:92:22:9b:0c:aa:62:1a:86:08:
4a:d5:26:bc:a1:d2:c8:73:db:66:bf:e2:cf:f5:ac:
1b:73:4e:b3:b0:3d:34:c4:e7:2f:cc:6c:91:61:74:
0d:2e:94:de:ef:9e:d3:a6:0e:61:73:86:19:2b:95:
0c:b7:45:92:20:41:e0:07:a1:aa:82:84:af:db:74:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7C:0C:F1:C5:A3:06:B8:AD:B4:A7:CF:62:63:62:64:F0:B7:83:FA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IHwM8cWjBrittKfPYmNiZPC3g_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:f9:23:3e:1d:3b:7c:c9:f1:e8:dc:53:f7:7e:d9:ea:a6:ac:
41:22:6a:41:b9:46:00:b4:74:04:13:95:3a:fc:7f:40:3f:b5:
87:d1:0b:0d:47:d8:b2:93:01:2a:83:a8:d3:5b:d8:c9:6b:2a:
3a:fb:08:c4:32:55:9f:6b:a4:d2:47:f1:94:5a:24:dd:fa:1f:
50:e8:bb:ab:c5:5d:66:4c:d5:3e:c5:f2:d7:80:12:74:f8:45:
0c:20:fa:b4:06:59:a3:7f:ba:c8:6e:84:f0:a4:17:b6:f7:ff:
0c:a3:f0:f2:f3:46:5e:1a:fe:df:89:dd:a7:48:91:e9:cd:2a:
73:96:29:b0:49:73:10:c5:d6:f2:23:c1:15:6c:c0:60:11:a0:
37:ec:08:37:23:f3:b8:a6:80:c2:f5:2a:ec:48:3d:9c:7b:f9:
08:b8:3c:c3:1f:72:cb:6b:26:77:4f:ba:c5:7d:ff:12:e1:b3:
b1:c4:e5:5c:aa:02:6c:29:e2:2a:7e:78:89:ca:30:3c:f9:82:
db:db:e0:46:bb:1c:ba:70:18:d0:c7:f0:ad:12:bc:db:a2:c4:
2f:ec:13:dd:84:b4:86:dd:1e:73:50:ca:97:84:d1:bf:a3:36:
6d:f1:b1:be:4c:39:1e:9f:21:7c:49:f9:73:a7:32:93:fc:4a:
a3:79:58:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:59:24 2025 by rpki-client