Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OFG_IUv_xTPBVKhSBH_Z4Mhlj28.roa
File: OFG_IUv_xTPBVKhSBH_Z4Mhlj28.roa (raw, json)
Hash identifier: vbsXkGjqKBtcHcb1c4pkhOI7lz7Lf9H8YCG1r/+wkVw=
Subject key identifier: 38:51:BF:21:4B:FF:C5:33:C1:54:A8:52:04:7F:D9:E0:C8:65:8F:6F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8BA6569A3EC26FD44100BA6F7BF63461
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OFG_IUv_xTPBVKhSBH_Z4Mhlj28.roa
Signing time: Wed 01 Nov 2023 16:10:15 +0000
ROA not before: Wed 01 Nov 2023 16:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:a6:56:9a:3e:c2:6f:d4:41:00:ba:6f:7b:f6:34:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 16:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3851bf214bffc533c154a852047fd9e0c8658f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:26:ea:75:c1:c1:5e:d4:1e:2d:15:e3:d5:
05:60:28:f0:da:dd:b8:b5:a6:2f:ae:43:f8:d0:0f:
02:21:a5:e5:cb:31:25:96:55:e1:46:4d:5b:6a:5f:
79:f4:6e:6d:33:f2:d4:f3:fb:9c:0b:51:09:5e:14:
56:7f:91:fa:e9:02:44:0f:5c:c4:53:1b:cf:25:36:
f0:7d:34:44:35:4d:27:56:04:54:df:1a:20:bc:b9:
51:bf:68:e9:8d:2e:dc:22:6d:e3:17:df:04:d6:da:
36:22:58:30:bf:7c:d6:bc:60:38:c0:0c:53:9d:c4:
d9:7c:53:ad:37:c1:de:af:da:a5:40:3e:eb:b3:11:
53:1d:0b:ae:fa:3c:40:39:da:af:b7:e8:c1:12:e3:
66:18:6c:23:0f:bc:e8:5d:26:01:d5:4c:e9:e3:b9:
39:46:e3:58:eb:20:8a:ae:4d:69:3f:92:fc:8c:f9:
b3:5c:9b:04:c9:59:8d:bd:f9:a8:93:a5:f6:1b:fe:
d1:87:33:9b:42:41:2d:af:b7:41:60:d8:a9:49:44:
d4:8e:63:f8:9f:4e:56:4f:05:a6:70:9f:4d:cf:8f:
3b:b9:23:a4:d3:39:72:94:44:14:ce:7a:9a:a0:c7:
52:71:f9:88:a6:1c:17:1e:3e:10:62:6b:cf:18:6f:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:51:BF:21:4B:FF:C5:33:C1:54:A8:52:04:7F:D9:E0:C8:65:8F:6F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OFG_IUv_xTPBVKhSBH_Z4Mhlj28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
be:27:09:2e:b2:d6:4a:c7:d2:63:58:33:ed:92:70:bd:d4:0f:
b4:5d:98:5a:0c:ba:bf:ba:95:a0:21:57:27:db:e2:c9:46:29:
6b:90:47:37:f0:26:42:86:7e:03:8c:d5:be:84:22:ea:41:12:
a1:24:6c:6f:2a:48:8e:b8:d6:e4:fe:ed:47:a1:07:f8:9f:d0:
ef:aa:6c:86:72:6c:ed:22:58:f9:6a:e0:53:63:85:56:0f:2d:
ca:90:97:84:ab:df:55:45:e1:aa:88:09:43:ad:e8:fc:41:ce:
d8:ea:39:b3:e3:c1:4d:56:a4:1e:ec:f6:df:a1:b9:13:1d:fc:
ff:4e:b4:1e:ff:6c:da:f2:e4:c9:e7:2d:2c:4c:a1:f1:74:69:
43:89:d4:6b:c4:c7:a3:ee:02:db:98:b4:1c:dc:51:88:1b:f2:
8a:ee:2e:9f:19:a2:eb:1f:8d:8c:d9:0d:0c:20:0f:1b:41:10:
63:5c:d1:9d:95:e7:47:c2:c5:eb:85:37:e3:1e:ad:e3:2a:42:
a8:ed:c5:5f:44:8a:88:f3:dc:bb:04:be:c4:7b:d1:b7:66:7a:
ad:0a:b8:26:a4:17:00:45:d6:02:b9:e2:7d:0e:70:bc:2b:b4:
a1:30:38:57:6a:d6:d6:c9:bd:36:8f:24:c9:16:e0:49:3d:35:
25:00:3d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:08:37 2025 by rpki-client