Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SDMN3mX0Ii1MKjJiunYwjjd2eO4.roa
File: SDMN3mX0Ii1MKjJiunYwjjd2eO4.roa (raw, json)
Hash identifier: 09h+qAlRSoFsUyUlZc8mBObKMYNk65NL2CQU8dZzVx8=
Subject key identifier: 48:33:0D:DE:65:F4:22:2D:4C:2A:32:62:BA:76:30:8E:37:76:78:EE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C13B70ECD8F86CA555A1102D105A5CBE1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SDMN3mX0Ii1MKjJiunYwjjd2eO4.roa
Signing time: Tue 28 Nov 2023 02:16:53 +0000
ROA not before: Tue 28 Nov 2023 02:16:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:13:b7:0e:cd:8f:86:ca:55:5a:11:02:d1:05:a5:cb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 02:16:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48330dde65f4222d4c2a3262ba76308e377678ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cc:88:a9:80:a7:1a:1f:65:6b:fc:49:07:06:
7c:01:fd:60:c0:aa:4a:11:33:62:87:d4:19:9d:8f:
fb:27:7c:5d:26:4d:53:cc:9d:f3:21:f6:28:b7:fa:
6d:fc:92:26:17:45:ab:07:b8:b6:d7:9d:32:47:2d:
ac:4a:10:4d:c6:a2:dc:7d:3f:d6:ea:16:fc:2a:6d:
b1:52:54:bb:f7:7d:0a:f2:59:e4:b7:27:a2:2c:ef:
78:b9:a0:a6:6e:31:e9:80:1c:d6:19:fe:fb:ee:d3:
62:b3:f7:67:4b:fe:1e:27:ab:ad:6b:95:90:a0:f0:
1c:7b:86:0f:22:30:ae:bc:08:16:c1:90:18:b6:2b:
d5:d8:56:54:55:2e:60:d9:66:ee:9e:06:d5:2e:fd:
ea:fd:fe:95:25:16:a2:b4:42:b3:57:c6:34:5a:70:
69:f2:6d:5e:5e:a4:ef:74:21:64:5c:1e:10:e3:44:
45:c4:7a:b3:cb:dc:a8:74:51:82:02:fa:17:25:fa:
e1:f6:f6:58:91:08:94:f8:0a:1a:5a:88:5a:fe:5d:
4c:18:f9:2c:f8:ea:ca:0f:7d:ba:4f:6d:d3:fb:b7:
25:a6:dc:f3:a8:92:f5:1e:a4:6f:92:37:ec:ab:f2:
fd:7b:9e:57:bd:ff:80:18:df:dc:78:da:18:a6:6d:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:33:0D:DE:65:F4:22:2D:4C:2A:32:62:BA:76:30:8E:37:76:78:EE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SDMN3mX0Ii1MKjJiunYwjjd2eO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:12:44:99:98:e2:69:1b:14:98:f5:f0:2c:54:86:21:97:98:
91:7c:c1:48:ef:6d:60:89:4a:9e:61:bf:a5:b8:20:95:4b:5b:
64:f8:ba:69:07:86:32:ab:25:27:8a:be:81:3b:75:a9:71:02:
72:1f:f3:eb:54:67:b7:20:23:1e:e0:5d:15:89:83:57:24:05:
f1:77:32:81:9e:2e:e6:e8:80:53:84:db:01:bc:1f:9c:b8:25:
aa:7a:b5:de:38:91:fc:84:e5:13:92:cb:aa:d5:f8:f6:47:23:
7e:11:d4:04:9c:1c:ce:cc:fe:d6:91:6f:11:89:52:c7:59:61:
7d:c0:f3:66:7c:19:25:b8:99:d9:92:57:ae:16:8e:d2:3e:47:
8e:87:ac:58:b9:60:83:ea:81:47:da:5c:2e:ed:b0:f3:56:d9:
3f:02:47:86:19:19:5b:ae:64:22:a0:24:eb:cd:69:c2:fa:bb:
4b:38:23:68:6e:f5:cb:67:0e:f4:75:20:d9:4f:9d:23:d2:3e:
2a:02:52:19:77:8e:b0:03:fb:db:70:21:9d:ac:8e:af:ff:c8:
ca:66:a8:b4:95:fb:f1:43:05:67:a1:ba:be:9f:90:56:60:96:
2c:bd:c6:a3:8e:cc:b8:6f:c6:14:4f:b6:f0:56:49:c4:40:f7:
61:48:e0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:26:56 2025 by rpki-client