Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bOW12GMS0A_bYeQNS_y47Bwiseo.roa
File: bOW12GMS0A_bYeQNS_y47Bwiseo.roa (raw, json)
Hash identifier: 8i7evZrjlFBpSwi7nHAXL2IA3HBuYo5kJVg4Cxii6+k=
Subject key identifier: 6C:E5:B5:D8:63:12:D0:0F:DB:61:E4:0D:4B:FC:B8:EC:1C:22:B1:EA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C167FC594C8B3D9222D1438B1E78B0BD7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bOW12GMS0A_bYeQNS_y47Bwiseo.roa
Signing time: Tue 28 Nov 2023 15:15:21 +0000
ROA not before: Tue 28 Nov 2023 15:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:16:7f:c5:94:c8:b3:d9:22:2d:14:38:b1:e7:8b:0b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 15:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ce5b5d86312d00fdb61e40d4bfcb8ec1c22b1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:e2:a8:f3:1e:69:37:58:71:bb:f3:56:ed:
3a:18:e9:f7:7d:8c:ea:53:c5:c0:a7:d5:c6:e0:ed:
db:a9:30:c8:02:9f:96:14:ad:f3:a8:39:7f:86:af:
81:64:26:eb:a1:35:b9:04:0d:85:94:83:b9:2f:1e:
e6:19:25:1b:cb:d9:53:4c:e3:af:ac:1b:83:ff:85:
81:35:7b:1f:64:bc:a7:8b:52:e9:fa:f3:b9:e2:10:
52:20:38:4a:42:fd:5b:9c:c1:e1:67:1a:76:bc:1b:
6f:06:10:2f:fc:6b:d7:86:7b:09:46:0f:f9:64:da:
ba:61:8d:ab:bb:a4:19:25:c0:f3:46:0f:34:a7:38:
4a:9f:04:54:37:be:e6:69:92:09:8b:3b:a5:a5:10:
4b:ab:13:5d:24:85:97:ba:12:cf:4c:23:08:e3:d9:
bb:7c:43:3e:8b:83:4c:37:4c:ec:63:b7:98:71:83:
5e:a1:89:25:65:d1:89:ce:8e:ac:21:8a:4c:31:b1:
3c:9e:4d:00:6c:fb:a5:cc:1a:00:4a:84:13:10:3c:
76:01:aa:34:56:a2:e0:f2:26:85:2d:f1:bb:e8:d8:
91:c6:c4:7f:fc:7e:ba:ea:2b:74:53:31:95:d4:7f:
94:7d:a7:70:13:3e:86:8a:d2:a3:c6:2f:08:96:ed:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E5:B5:D8:63:12:D0:0F:DB:61:E4:0D:4B:FC:B8:EC:1C:22:B1:EA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bOW12GMS0A_bYeQNS_y47Bwiseo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:65:ed:c9:14:8b:34:25:7c:67:73:c1:6f:6d:25:64:6d:00:
81:00:03:01:33:e0:51:71:c4:ae:56:4e:1d:5c:9c:1a:85:65:
9e:c3:02:7b:eb:a2:c4:b0:7f:db:1f:c9:f4:a3:4e:db:70:c3:
3f:c8:12:90:90:08:0b:81:ef:2d:a4:6c:bc:5a:02:04:28:ea:
01:4f:dd:a7:29:3c:c9:e7:7b:90:a6:1c:ef:25:4f:25:ec:1f:
dd:7d:69:96:80:b5:5c:62:24:6e:60:18:4f:af:71:c5:ce:f9:
24:19:b8:8e:d8:d8:e7:aa:8c:59:d9:67:fc:6a:fc:59:57:96:
f5:41:7d:83:1e:36:2e:45:28:c8:a4:77:d0:be:18:54:f0:df:
a0:37:79:f7:15:59:f9:aa:08:66:60:e9:a6:8c:a6:07:c4:b6:
ac:ec:cc:02:ca:b2:2c:f2:51:dd:e4:c8:9e:27:b1:1e:df:9c:
c3:2b:41:30:54:ed:52:7f:3e:58:45:1a:5c:b0:63:42:d4:f0:
d6:3f:d2:24:b5:de:16:bc:08:21:a3:6a:57:d9:46:7f:98:2c:
04:7d:18:31:a5:d0:0d:2a:f4:7c:91:32:cd:41:5b:98:ea:0b:
a5:77:ef:c4:ec:61:41:1d:ef:83:17:85:8b:27:0c:5b:c4:28:
24:a0:7e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:47:32 2025 by rpki-client