Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OZgarmexRy1YPYSK9afY4jdoxn4.roa
File: OZgarmexRy1YPYSK9afY4jdoxn4.roa (raw, json)
Hash identifier: KN4qujD4TzaM2VkjHxfPW5sXwPKbb+DB/6z/w4GoLxA=
Subject key identifier: 39:98:1A:AE:67:B1:47:2D:58:3D:84:8A:F5:A7:D8:E2:37:68:C6:7E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0962AD5CFE9DEA27437BF86F2066F195
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OZgarmexRy1YPYSK9afY4jdoxn4.roa
Signing time: Sat 07 Oct 2023 09:05:43 +0000
ROA not before: Sat 07 Oct 2023 09:05:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:961:d234/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:09:62:ad:5c:fe:9d:ea:27:43:7b:f8:6f:20:66:f1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 09:05:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39981aae67b1472d583d848af5a7d8e23768c67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3d:c4:8c:a3:73:74:c0:1b:a2:37:e1:2e:93:
dc:9a:65:12:88:cd:16:d0:3a:f3:01:09:3f:2c:2c:
8a:7d:ad:86:e3:8b:15:2c:a0:81:81:a3:c1:eb:39:
54:3d:23:93:ae:81:fb:12:d6:9e:09:65:75:68:6e:
24:ff:6f:6c:b7:e6:2d:20:4b:69:91:61:33:98:53:
29:e9:e7:76:98:0d:67:76:b0:b2:a6:5f:30:b1:05:
fd:6a:1b:a5:36:68:70:d1:57:45:60:3c:30:e5:0c:
06:75:2c:16:14:1e:4f:68:ed:d4:27:27:21:f5:85:
19:8c:96:2e:15:39:a5:f5:87:cc:21:01:24:1c:56:
5d:e3:b3:e8:1f:f7:01:89:3d:c2:2d:b3:c4:34:52:
1a:4a:fe:96:be:8f:61:b9:d5:21:44:b5:76:32:ba:
32:31:43:e4:a6:15:d8:29:96:e9:e1:d4:0a:c1:fc:
ed:3b:8e:72:b5:5d:6d:34:f4:51:43:d0:24:ad:8a:
64:67:c7:72:a7:3c:d1:1a:08:c9:b8:19:7e:0e:f0:
3f:17:47:2e:1c:ef:b7:6b:3c:8b:a2:c0:69:85:ae:
a5:88:db:29:65:0a:fe:2a:fa:73:e0:0a:5c:cc:c6:
bd:c7:50:d0:af:e0:d2:ed:3c:e4:37:23:ef:ee:90:
37:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:98:1A:AE:67:B1:47:2D:58:3D:84:8A:F5:A7:D8:E2:37:68:C6:7E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OZgarmexRy1YPYSK9afY4jdoxn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:4e:73:e5:b9:79:a1:6e:d9:dd:33:e3:9b:23:b3:bf:02:89:
50:4e:92:4f:f3:97:c0:59:cf:1c:42:e0:92:08:34:d9:e5:33:
30:d1:97:1b:c6:24:b3:23:82:ec:4d:b6:f4:22:8e:9e:20:e4:
e9:a9:93:45:1d:42:c5:12:1c:48:13:d3:16:64:c8:73:0f:1f:
e1:b2:02:75:2d:ae:a0:3f:16:15:ff:c9:19:28:dd:93:01:7c:
53:bf:45:f6:17:5e:eb:df:a7:2b:14:d8:79:23:22:c4:11:fc:
bd:b5:d4:06:a3:ee:32:24:2e:d5:09:c9:13:6f:34:0c:bd:cd:
b8:8c:8f:08:0b:72:53:b9:6b:d6:f5:9f:ea:9a:ec:5f:4a:9c:
97:b5:08:d2:30:94:45:69:0d:56:53:14:58:bd:75:1b:02:69:
49:cf:58:6f:3b:5e:88:d3:fe:04:79:6e:9b:ad:80:c5:c1:4c:
e9:dd:32:85:16:24:9f:f2:d8:50:81:58:fe:b9:bd:c7:32:ce:
92:99:50:16:9f:1c:9a:41:a6:a2:ac:f6:e0:b8:05:df:8c:ee:
26:47:70:a9:a1:41:dc:e9:2b:8e:1e:0f:21:92:05:f3:a5:5a:
ec:d7:43:ad:76:2d:eb:7f:c6:e9:c0:f7:ec:cb:86:26:f7:35:
51:fa:5e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:46:38 2025 by rpki-client