Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ou6bS36NWJl4IYkE-VuqUExyGjc.roa
File: Ou6bS36NWJl4IYkE-VuqUExyGjc.roa (raw, json)
Hash identifier: LS9hXw1y4QTgHW4YVOto7l9R5RG8p0HkWki1GyfUHIk=
Subject key identifier: 3A:EE:9B:4B:7E:8D:58:99:78:21:89:04:F9:5B:AA:50:4C:72:1A:37
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B59ADABF9CC03DC6B58D3C4939C0675AD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ou6bS36NWJl4IYkE-VuqUExyGjc.roa
Signing time: Sun 22 Oct 2023 23:17:15 +0000
ROA not before: Sun 22 Oct 2023 23:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:59:ad:ab:f9:cc:03:dc:6b:58:d3:c4:93:9c:06:75:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 23:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aee9b4b7e8d589978218904f95baa504c721a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:6a:69:8e:70:d0:56:c0:7b:1f:53:04:83:
48:b6:16:6b:b0:ba:7a:88:4d:97:0a:fd:7d:93:3e:
a0:ef:6f:92:15:5a:78:61:80:4f:96:fb:f5:18:9f:
ca:ef:cb:b5:b5:3f:85:47:34:22:21:5e:1b:bd:1f:
30:9a:82:df:8f:d0:61:38:aa:c9:7c:d8:a8:5c:66:
0b:b3:fb:23:49:23:aa:d9:66:7e:b7:c5:e7:92:82:
54:a7:2a:21:0c:56:fb:97:22:fa:81:01:fd:77:0e:
f4:fd:6d:7a:d5:1d:fc:e8:83:25:73:2e:e0:60:a9:
de:a0:6b:5e:59:d8:4e:41:f1:25:9e:17:a1:8b:37:
99:2a:4b:4f:6c:90:b5:7b:6e:c9:0d:55:45:8d:c2:
d1:32:cb:99:ce:76:60:af:b9:8e:cc:fb:80:4e:70:
d4:c0:f6:4e:f7:36:f9:f4:11:bc:dc:82:82:9e:09:
69:fc:e3:a7:bc:f8:7a:0e:48:b6:9b:a7:4e:59:25:
a6:84:fe:9c:e3:22:70:67:24:db:0a:8c:68:6c:4e:
5a:c2:87:5b:af:de:14:5d:92:e3:ab:f9:1a:d6:44:
08:e0:44:d4:47:a0:d9:61:ba:bc:5a:ce:a8:68:2a:
8d:09:61:87:86:b1:30:fa:4f:e8:98:90:78:83:47:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EE:9B:4B:7E:8D:58:99:78:21:89:04:F9:5B:AA:50:4C:72:1A:37
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ou6bS36NWJl4IYkE-VuqUExyGjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:52:23:57:d4:50:32:3c:95:6c:99:ae:44:34:0e:f2:7c:2b:
09:27:ba:15:bc:29:12:b8:de:11:eb:14:c3:af:56:4d:43:6a:
85:ac:bb:40:0e:51:72:6e:a8:45:ac:48:28:7d:ee:67:f6:96:
09:35:77:88:cd:39:eb:85:67:43:ab:aa:ea:08:51:21:a7:59:
34:e5:89:84:ca:29:8c:a5:21:c4:b9:33:3c:f3:19:9f:05:5e:
3d:0e:2f:8f:c0:d4:91:eb:6c:1e:af:be:4f:cf:14:69:16:dd:
e2:2e:ae:f2:2e:85:1a:6f:ce:c0:d8:6e:be:c3:a2:aa:2f:e7:
d9:93:61:a6:4c:92:fc:ac:5d:ad:1f:29:2e:dd:19:15:42:14:
54:ef:e9:1a:b6:37:4b:1a:d5:90:e0:b7:2a:25:da:64:08:5d:
1f:7e:8e:1d:cf:5c:b3:6d:53:85:e8:41:fe:90:8e:10:98:bf:
57:e5:a1:79:97:f5:d3:3b:89:58:2a:1a:51:cb:ab:7d:4c:c6:
18:c4:cb:83:e7:70:8b:0a:ce:26:13:28:b7:b6:97:a6:60:fc:
7c:34:07:b9:65:df:91:a9:96:68:5b:9e:89:bd:56:cd:d1:ad:
e9:88:83:dd:f5:bf:df:31:0a:13:6e:e1:96:81:ff:45:90:5a:
0c:97:d4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:56:30 2025 by rpki-client