Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OHtAxm4_NOu_Kkh1l9Q-F4suxd4.roa
File: OHtAxm4_NOu_Kkh1l9Q-F4suxd4.roa (raw, json)
Hash identifier: hwjRIQfV9duquysA7/hrty9zKoaQqUIMjlDjlvOmRQU=
Subject key identifier: 38:7B:40:C6:6E:3F:34:EB:BF:2A:48:75:97:D4:3E:17:8B:2E:C5:DE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2659B77BC5E67D75B989D698F076EA3F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OHtAxm4_NOu_Kkh1l9Q-F4suxd4.roa
Signing time: Fri 13 Oct 2023 00:04:55 +0000
ROA not before: Fri 13 Oct 2023 00:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:2659:3b7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:26:59:b7:7b:c5:e6:7d:75:b9:89:d6:98:f0:76:ea:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 00:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=387b40c66e3f34ebbf2a487597d43e178b2ec5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:cd:a6:11:29:9d:2e:6c:b1:0a:73:f4:8a:
df:fc:9b:11:97:0a:cf:af:05:1a:c1:f8:3d:ee:93:
dd:ec:ff:48:f2:94:08:d3:79:d0:f5:87:be:b0:18:
15:0e:97:7a:e6:b2:06:79:6a:37:7d:85:e6:44:45:
c7:07:44:a0:35:21:47:75:a2:d5:44:94:c5:75:c4:
fc:c8:27:e2:f3:11:a8:be:d7:ec:b9:59:85:23:ff:
5c:30:55:6a:5a:ae:91:2e:b8:04:1e:92:8d:7b:b2:
af:2c:fc:49:f7:f4:fe:08:64:91:b6:24:d4:a6:ca:
8c:3b:a2:bf:2f:03:7b:98:21:16:b4:5b:1d:1c:d0:
e1:f4:0b:cc:9b:6d:c0:07:96:91:e0:51:5d:8d:ff:
2a:65:1a:da:6e:48:9e:2e:bb:86:c7:9f:35:2d:c3:
c2:a5:fd:9e:52:dc:66:b7:7f:79:ad:af:fb:ea:0c:
96:99:7d:52:8d:8c:92:02:32:3c:0c:3a:18:ff:1c:
ce:21:5c:38:24:3b:8f:3c:17:ca:dc:ca:8b:2d:ce:
ee:b7:0b:f4:4d:de:ba:b7:5e:4a:37:a6:e5:c7:13:
59:4a:a3:60:63:5d:9a:d5:34:51:fc:70:9f:94:ae:
96:ca:a3:6c:6a:b7:1d:dd:ff:10:a7:7e:86:1a:33:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7B:40:C6:6E:3F:34:EB:BF:2A:48:75:97:D4:3E:17:8B:2E:C5:DE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OHtAxm4_NOu_Kkh1l9Q-F4suxd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cf:20:33:8b:00:e7:cf:0a:08:e6:3f:12:a6:c6:48:ac:ec:74:
d1:00:10:51:20:e4:e9:bb:5e:bd:4d:8c:7a:38:16:96:80:6f:
ea:95:cb:a3:4f:a6:0f:11:64:11:e8:35:ba:16:1c:c2:64:a0:
b2:12:30:ef:d4:ce:48:d8:5a:1c:7d:2d:b0:23:31:68:70:ae:
19:35:28:25:d6:50:04:66:ed:05:06:05:1f:5a:20:92:c7:90:
de:bc:90:f3:2e:af:fb:79:ab:b5:3e:a4:b9:dc:ef:c6:07:3f:
f2:8d:f9:73:05:9c:53:86:92:7e:42:3c:3a:5e:25:48:c9:80:
e6:18:25:fc:22:73:d6:49:0f:5a:6f:b5:e5:f6:d8:94:05:a8:
ef:85:79:a0:dc:21:ff:f0:4f:b9:a4:aa:d9:b0:1f:e2:58:de:
ef:9f:7a:6e:4a:f6:01:34:af:40:53:76:58:23:88:40:12:0d:
67:f5:71:c3:c1:d6:b2:d8:7b:5c:b1:ca:35:7f:6e:17:0c:62:
60:01:7c:f2:16:ff:51:3b:cf:a0:26:16:03:15:a6:7a:f5:6d:
9f:c1:e0:79:52:1f:e0:76:05:d4:07:66:fa:d3:0a:57:93:72:
c5:49:f4:6f:48:ea:f4:40:38:3e:29:c5:9e:89:7e:d9:ca:a6:
85:d4:f9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:45:15 2025 by rpki-client