Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_3_8vBxte31gU_h-uGbbXxLaFzM.roa
File: _3_8vBxte31gU_h-uGbbXxLaFzM.roa (raw, json)
Hash identifier: KB9uT5jo8WEDFt5oGbOoHXyrSAUsvfOSj258pSLyLEs=
Subject key identifier: FF:7F:FC:BC:1C:6D:7B:7D:60:53:F8:7E:B8:66:DB:5F:12:DA:17:33
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE2CB77FC56F92271E64546E8FE73BAFF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_3_8vBxte31gU_h-uGbbXxLaFzM.roa
Signing time: Fri 29 Sep 2023 21:14:59 +0000
ROA not before: Fri 29 Sep 2023 21:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e2:cb:77:fc:56:f9:22:71:e6:45:46:e8:fe:73:ba:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 29 21:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff7ffcbc1c6d7b7d6053f87eb866db5f12da1733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:03:82:de:31:27:15:5f:e4:82:30:9f:1d:46:
f2:5d:cd:e7:72:3a:8e:00:63:dc:a3:1f:bf:eb:e7:
f4:a9:56:26:a5:02:88:7b:fc:5a:3c:44:8b:65:1f:
b0:6e:9b:7b:9d:fd:e8:bb:f2:c7:d4:9f:ea:59:c4:
f3:d7:9c:b4:a7:53:32:3d:27:3e:77:6e:ae:46:47:
bd:c9:d2:17:14:97:67:5e:17:76:15:71:0f:d5:e6:
d9:7c:d7:ac:b1:66:91:69:0d:d7:8c:b1:4e:09:8e:
2d:f6:36:a1:c8:71:b6:3a:32:6b:4c:e0:6f:08:74:
82:d1:bc:b6:95:fb:a5:7c:29:69:fe:44:61:79:9d:
47:c9:0c:91:71:e9:01:2c:d7:34:77:e9:4f:f5:02:
d5:af:6f:9d:d4:27:7d:e5:a7:52:af:7a:c4:93:ef:
b5:46:78:79:13:66:b9:4f:67:5c:50:48:0f:50:23:
4c:89:5a:d8:f0:63:4b:1a:0e:03:a1:0f:84:07:6b:
24:ca:c4:dd:4f:53:ef:9d:f0:69:0c:50:ad:1b:eb:
0f:cd:75:d7:3b:5f:c0:14:61:a2:ba:44:1d:51:5f:
a7:56:a1:c1:86:37:e5:2e:c6:e9:35:5b:a4:0b:cc:
6d:a0:01:73:bb:96:72:61:0b:3d:1f:33:5b:83:c9:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7F:FC:BC:1C:6D:7B:7D:60:53:F8:7E:B8:66:DB:5F:12:DA:17:33
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_3_8vBxte31gU_h-uGbbXxLaFzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:e2:9f:b6:15:a0:bd:07:cf:4e:02:c5:c4:af:9d:c8:e6:01:
c1:32:ed:48:c3:b6:f3:fc:a6:7a:7b:19:24:96:32:51:f1:c6:
ca:06:df:b7:10:b8:cb:65:4f:cb:e7:24:7b:65:9c:25:f4:94:
a8:55:e1:ba:27:f5:e0:ce:84:11:ef:05:3b:4a:87:d1:f3:0f:
a9:2a:29:9d:15:20:28:12:19:b9:5f:92:ea:a0:eb:15:ca:c6:
13:79:28:74:8c:05:48:c2:46:59:8f:eb:68:c6:70:4b:25:f5:
ea:9e:8c:4e:99:1a:06:bc:2b:d9:7f:79:17:2a:c5:82:d0:2e:
68:a0:8e:38:ac:39:8f:26:33:d6:4c:cd:0a:71:1e:9b:3d:c0:
41:2f:18:b1:a4:b2:77:e9:c3:28:68:52:b7:d4:1f:97:e4:64:
04:c6:40:a0:87:4a:c4:2a:4f:2e:3f:60:93:20:c1:05:2f:64:
28:e9:27:f7:e2:fa:a4:f1:91:4c:cd:9a:f3:19:94:b6:5e:83:
84:10:9f:f5:31:d6:4c:44:dc:35:c2:8d:b3:d1:07:32:1c:d0:
c9:2c:bf:0b:02:14:d4:10:3f:98:e5:d7:28:32:dc:ba:25:e6:
fb:6a:ad:26:b4:3f:b9:5a:42:c0:3e:d2:8e:5a:d4:c0:75:c8:
7f:ef:30:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:47:44 2025 by rpki-client