Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OJ9qHr81vhFNTpu3s8RT4Ka5pPw.roa
File: OJ9qHr81vhFNTpu3s8RT4Ka5pPw.roa (raw, json)
Hash identifier: 3v8fmAk9o5kvWDAFvF5qXaKvhLbIWi/9/9oe+sWyfcc=
Subject key identifier: 38:9F:6A:1E:BF:35:BE:11:4D:4E:9B:B7:B3:C4:53:E0:A6:B9:A4:FC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF7D1B2D189042C7BA0CC860E1C705905
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OJ9qHr81vhFNTpu3s8RT4Ka5pPw.roa
Signing time: Wed 22 Nov 2023 16:16:36 +0000
ROA not before: Wed 22 Nov 2023 16:16:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f7:d1:b2:d1:89:04:2c:7b:a0:cc:86:0e:1c:70:59:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 16:16:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=389f6a1ebf35be114d4e9bb7b3c453e0a6b9a4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:31:e0:30:f8:f6:1b:a0:17:c6:8c:7c:54:89:
e5:3f:6c:e3:45:f3:99:89:79:4f:05:f1:35:72:93:
cd:f5:36:6d:7a:92:27:39:37:8a:19:c4:c7:ed:2a:
ff:38:70:a2:71:b6:b5:7d:72:9a:5d:06:e6:b0:00:
34:a6:20:56:99:64:3e:ba:c3:9a:76:cb:03:74:ec:
38:72:3b:f4:da:65:2a:f7:f2:7b:ba:63:c1:b3:e2:
10:09:54:27:c6:73:ac:ef:39:d2:a1:7e:4f:03:5b:
b5:23:20:5c:92:50:12:7b:bb:99:13:b3:65:93:e4:
04:0f:54:69:ab:25:ff:bb:3d:b8:d2:77:48:71:55:
35:4e:4e:b0:52:85:55:b7:57:38:f8:3f:03:cf:31:
3b:1e:16:e7:87:6f:b4:42:b5:c9:05:01:ba:e3:1a:
7c:0d:bd:f5:73:07:a4:64:4a:90:d0:ba:e4:d7:2b:
43:da:5c:e7:0b:48:2a:d0:46:0b:1c:d1:cb:da:59:
36:85:71:07:18:4c:19:f5:5c:46:2f:a6:44:07:b3:
96:30:17:cb:42:ef:d4:32:af:83:9b:1a:f7:43:04:
9b:11:4b:49:ee:ac:77:ec:8b:e3:b8:60:82:2e:38:
75:dc:f1:53:91:3d:37:75:9b:da:80:0f:f7:88:90:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9F:6A:1E:BF:35:BE:11:4D:4E:9B:B7:B3:C4:53:E0:A6:B9:A4:FC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OJ9qHr81vhFNTpu3s8RT4Ka5pPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
be:40:65:94:1f:2d:c3:9c:ec:49:81:5e:ea:5c:7f:dd:bf:21:
e4:f6:ce:9b:78:18:4d:ad:5b:f7:fe:60:93:28:38:9c:d6:33:
1f:43:89:86:82:0f:42:89:a7:26:6f:99:90:df:2c:a5:f2:90:
3b:b8:52:97:8a:30:55:22:72:6f:e5:6e:97:e1:1a:a4:2d:b8:
3b:62:32:94:60:0b:22:25:fb:b0:07:d4:a4:f5:91:93:2e:0a:
df:d1:c5:aa:3d:f0:96:ea:30:85:78:8d:2f:01:40:c8:e5:93:
0a:0b:a3:5e:dc:3b:70:c7:b4:e8:54:c9:3a:93:47:59:f6:59:
82:06:a8:37:78:7e:82:40:18:fb:4a:53:7e:df:f3:04:c6:ef:
ee:7c:b8:c6:86:da:9c:1e:14:d0:7b:c3:12:17:18:ef:8f:dd:
2e:98:3e:5b:25:06:21:7d:86:1d:b1:1b:d3:af:fa:38:20:a0:
f0:4c:c8:54:7f:63:2e:bd:17:58:b6:1a:49:bb:ec:bd:7a:77:
d5:dd:3d:d3:0e:f0:10:d4:b8:c9:b8:bb:e8:fc:d2:18:e3:24:
71:fd:ce:cf:fb:8e:11:97:28:bc:b2:81:f5:e3:8a:56:f0:d5:
1e:e4:9c:29:ff:9a:38:06:21:bd:e2:47:61:20:bf:3a:56:4e:
f6:33:0c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:07:22 2025 by rpki-client