Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O36hMljFXAcgbwW9HLk91_8P54o.roa
File: O36hMljFXAcgbwW9HLk91_8P54o.roa (raw, json)
Hash identifier: 56pXxbyrsZ9BsUMOVTmcKjeLFNJuThl88huZeBM5MXA=
Subject key identifier: 3B:7E:A1:32:58:C5:5C:07:20:6F:05:BD:1C:B9:3D:D7:FF:0F:E7:8A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B71B604B145F7D082F1066F7FE1482F4F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O36hMljFXAcgbwW9HLk91_8P54o.roa
Signing time: Fri 27 Oct 2023 15:17:15 +0000
ROA not before: Fri 27 Oct 2023 15:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:b6:04:b1:45:f7:d0:82:f1:06:6f:7f:e1:48:2f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 27 15:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b7ea13258c55c07206f05bd1cb93dd7ff0fe78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f7:bc:29:b1:13:23:50:81:48:a3:74:ff:2b:
29:34:97:14:12:fd:0b:ee:bc:fa:35:6f:76:56:0b:
e2:71:d7:68:15:72:e5:5b:a7:49:f5:41:98:c1:b9:
bf:fa:95:79:2f:46:a3:3b:de:14:77:e6:4c:a7:5c:
df:d3:6c:ea:9d:10:70:b8:f3:f0:b5:7b:e3:6a:8f:
8c:0b:f9:f8:ea:5b:d0:43:62:bb:ef:5b:33:c8:2d:
6b:a9:fe:ce:af:ad:4f:ca:16:7a:e3:38:fc:e4:68:
10:e9:00:b8:91:a5:7d:13:c3:3b:ab:ab:1f:55:09:
32:41:ea:05:28:c9:e6:6e:58:2e:63:b0:46:32:ff:
30:d9:a4:99:dc:62:06:4f:14:40:10:8b:5b:a4:d9:
bd:a7:4c:fb:30:16:48:8a:d8:96:6e:2c:a6:c0:4f:
1f:e2:67:51:98:1c:5c:fd:b3:09:49:d6:23:59:44:
59:50:f9:96:f2:4d:98:7d:e8:0b:bc:2e:c7:49:ab:
f1:10:8b:5c:e5:ca:62:ec:56:90:37:b6:f6:34:d4:
e8:76:6f:c8:81:a8:dc:ab:2c:4d:f4:87:ed:bb:80:
69:b7:6f:c5:e5:a7:b1:2b:e4:69:44:e4:ac:0b:91:
f7:17:b5:f0:40:89:62:41:53:81:54:d7:c4:3b:24:
3a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7E:A1:32:58:C5:5C:07:20:6F:05:BD:1C:B9:3D:D7:FF:0F:E7:8A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O36hMljFXAcgbwW9HLk91_8P54o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:8d:2f:c4:17:57:fc:e3:c0:e7:29:91:d7:2c:1f:87:c1:37:
a4:e3:f5:bb:86:0f:f3:ad:10:9a:88:55:e8:44:aa:94:bc:07:
a3:ca:e5:12:ea:74:66:2d:6e:6b:6b:74:e1:98:6c:a5:03:68:
51:2f:36:38:5e:8f:10:fb:d4:b6:37:c4:6f:ec:7e:8a:5c:c2:
0f:87:a0:12:ab:d3:8d:69:b4:72:ee:6c:e4:fe:73:11:92:f8:
f8:44:13:f0:f6:8c:d1:0b:84:7c:61:30:34:5e:cf:af:46:1b:
ae:83:fd:52:44:b7:5a:9f:a8:9a:17:e3:d7:7d:63:f9:af:4e:
41:2f:12:80:e9:ca:75:c7:3a:a9:04:1e:07:b2:a6:73:a2:fc:
74:a4:51:ed:73:8a:c4:6e:47:9b:9d:06:d5:ac:de:23:77:df:
20:7f:d8:96:fb:1e:fb:dd:64:5d:f5:78:aa:41:cf:eb:73:29:
6e:19:15:86:98:b3:6b:da:ae:88:e2:a0:74:99:21:10:cf:c9:
c8:6e:2a:79:b4:ee:74:d9:7c:ec:ba:35:74:ef:27:04:f6:50:
cd:6a:91:0e:c7:a8:54:e6:ad:46:83:19:eb:15:9e:b6:c8:3a:
16:c6:07:0f:53:09:d3:40:db:6c:bc:94:47:d1:87:b8:98:f4:
19:75:d2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:19:41 2025 by rpki-client