Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OtKtnpuipy2lrIOEUhs72xOAE94.roa
File: OtKtnpuipy2lrIOEUhs72xOAE94.roa (raw, json)
Hash identifier: j5oktCuoJlzlIiAw0A9ytT99O6XVBGMX1zJ5gbwcUuI=
Subject key identifier: 3A:D2:AD:9E:9B:A2:A7:2D:A5:AC:83:84:52:1B:3B:DB:13:80:13:DE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA11C6B4A0ED1AE0DD27BA09C72D2A487
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OtKtnpuipy2lrIOEUhs72xOAE94.roa
Signing time: Sun 05 Nov 2023 20:11:16 +0000
ROA not before: Sun 05 Nov 2023 20:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a1:1c:6b:4a:0e:d1:ae:0d:d2:7b:a0:9c:72:d2:a4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 20:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ad2ad9e9ba2a72da5ac8384521b3bdb138013de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:0a:c4:91:23:09:85:a1:4f:42:d9:96:cc:
b0:54:f8:4d:a5:f5:79:ad:2a:68:3e:d6:19:ae:b7:
cd:18:dd:e8:c3:04:12:e6:b3:a8:80:4e:37:2a:74:
a0:db:32:e8:a3:d5:8b:b8:c5:00:d9:66:1c:22:ac:
05:97:e4:6c:61:8c:8d:17:fd:6f:53:c9:b7:7d:fb:
0a:20:13:79:b7:81:42:c3:b3:37:6c:3e:a0:92:67:
aa:65:42:53:f7:76:16:cc:66:7c:50:f6:ed:b9:07:
15:0c:19:00:20:86:7f:3b:2f:41:33:9e:ec:4f:c8:
77:6c:66:0a:1d:e0:96:c0:de:4a:2d:14:46:8d:0d:
d0:dd:06:67:e1:54:ab:a0:d6:57:08:77:a0:d3:f4:
28:1c:fa:53:0d:32:7b:8b:a7:a6:52:85:b7:70:e4:
6b:ed:4f:fd:1e:b0:0f:9f:40:94:9a:8c:95:a6:fa:
bc:4e:05:60:63:42:85:d9:c4:91:42:e5:9f:b0:74:
a6:38:a5:44:08:8f:c1:47:c6:7e:3d:d8:49:b4:0c:
b5:50:ee:05:a9:df:d2:35:72:d9:82:af:f4:85:0c:
01:26:73:9a:5c:9a:40:f2:17:aa:b4:c9:61:94:3a:
24:40:43:17:04:14:a1:3d:fd:ba:21:2e:8e:83:31:
dc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D2:AD:9E:9B:A2:A7:2D:A5:AC:83:84:52:1B:3B:DB:13:80:13:DE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OtKtnpuipy2lrIOEUhs72xOAE94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:fa:b4:4e:4b:e3:d5:33:41:60:aa:0e:5d:f1:59:49:de:e1:
7d:e8:5b:cd:52:d3:69:b3:97:15:07:2d:5c:f4:ae:78:8a:2b:
df:44:99:eb:d9:78:13:28:30:cf:f8:9d:13:de:07:bd:0d:44:
d8:c0:05:a4:24:2d:6c:22:17:0c:d7:a8:16:be:34:10:3f:85:
05:75:ff:1b:46:ce:a9:e3:b6:4c:03:98:21:de:50:68:ff:17:
d0:16:0b:99:7c:43:a8:17:bc:18:5f:f5:e6:2b:f1:87:72:00:
04:33:2c:1e:16:7f:25:b4:27:dc:45:b1:fc:c7:99:f2:75:0d:
3a:bd:e7:00:cc:c0:ec:01:9e:58:39:2f:7c:c5:c6:59:f6:ab:
20:10:5e:db:76:b0:4b:48:f8:09:b5:83:7a:7b:e7:13:36:ac:
d8:7c:99:e3:bf:c6:53:f7:be:75:47:12:e3:c6:50:16:df:bf:
48:ff:b6:96:f7:14:bd:e5:c9:b2:f1:8f:b3:c2:7f:37:c8:87:
5b:90:d5:bb:7e:ec:de:32:0a:80:b3:ce:b4:99:ae:bf:d1:a1:
84:e3:d9:60:f2:a5:c7:2e:5a:03:a9:38:9e:ce:58:0c:80:e6:
5e:0a:55:e2:77:db:b0:dc:ca:1e:a2:12:fe:26:df:91:cd:90:
1d:a3:34:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:54:02 2025 by rpki-client