Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cnoSf4X-AJWwgT3kdLHE3a5ZRwY.roa
File: cnoSf4X-AJWwgT3kdLHE3a5ZRwY.roa (raw, json)
Hash identifier: 84vqDf3+a3axzqp+ED6t5uFcyD3Etg0zRNF0aKYaj+c=
Subject key identifier: 72:7A:12:7F:85:FE:00:95:B0:81:3D:E4:74:B1:C4:DD:AE:59:47:06
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA6AB26005D806E89C8E20CE2D6B7EEA8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cnoSf4X-AJWwgT3kdLHE3a5ZRwY.roa
Signing time: Mon 06 Nov 2023 22:05:15 +0000
ROA not before: Mon 06 Nov 2023 22:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:a6aa:7681/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a6:ab:26:00:5d:80:6e:89:c8:e2:0c:e2:d6:b7:ee:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 6 22:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=727a127f85fe0095b0813de474b1c4ddae594706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:5b:7d:88:f5:85:72:bd:97:76:3e:35:bb:
b9:5a:60:ac:7b:1a:a1:e6:dd:29:e9:c3:68:15:a6:
83:9d:ff:c0:46:0f:af:ac:31:37:ab:4e:f1:cc:8c:
f5:bb:3c:d6:c0:28:50:b6:0e:2e:62:47:51:43:ac:
1f:2a:f0:76:eb:a5:6c:fe:e1:f3:bb:1a:ad:c3:da:
dd:91:cf:66:d6:87:ab:99:a5:1c:7f:df:9d:51:8d:
1d:c7:78:fb:33:2a:a8:5f:42:40:c8:05:df:aa:29:
9a:5d:d6:b0:e6:74:07:86:ed:87:23:8e:fc:62:e4:
d3:e7:a5:41:5c:d3:6e:b5:e4:d5:17:93:6f:96:ce:
72:a6:e1:fa:6a:9e:16:3d:32:39:95:44:46:04:26:
93:13:14:de:58:29:ff:02:53:93:4e:e1:94:fb:30:
08:4f:5a:0c:31:1e:83:21:29:b4:f8:0f:26:4f:14:
a5:58:e7:38:88:35:98:ce:ec:9a:fa:09:a4:c6:33:
f4:81:6a:f8:ad:e9:4f:60:91:c3:4c:09:44:8a:2f:
24:51:a4:33:8f:3d:1b:09:44:84:52:cd:8a:86:32:
2a:52:c9:3d:00:cc:7d:a1:e4:5f:57:cd:7b:7d:aa:
57:6d:bb:2a:b3:f9:2f:67:d8:77:88:42:39:e5:36:
34:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7A:12:7F:85:FE:00:95:B0:81:3D:E4:74:B1:C4:DD:AE:59:47:06
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cnoSf4X-AJWwgT3kdLHE3a5ZRwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:fb:8f:10:4c:da:f3:cb:f9:12:96:72:c3:8e:be:3e:77:78:
10:2c:4b:9f:87:da:4b:1e:5c:97:62:a0:b2:e2:d0:ba:80:08:
61:04:0e:97:71:73:4c:32:18:9e:01:a1:6c:94:51:e7:3d:7f:
17:7f:08:7a:19:fa:24:27:32:d6:3a:1d:1c:3b:24:fc:31:d0:
04:4d:9d:28:3b:66:92:ac:46:61:f1:35:15:1f:5c:b1:a5:b0:
21:50:24:ed:5b:80:29:bd:22:32:64:6c:6b:5b:ca:5f:7b:99:
41:ac:83:21:e0:f8:6d:f4:4b:48:82:e2:d7:92:3d:90:b5:cb:
1f:75:d8:52:da:82:de:63:48:38:a5:ef:6c:c3:08:1c:4c:a4:
eb:db:d4:8c:af:69:1e:8a:4a:c0:7c:d8:6b:e8:52:87:6d:60:
4f:6a:03:ca:cd:cc:4e:2c:87:ad:de:c2:61:f7:3b:b6:d9:65:
c0:77:db:af:8d:08:4e:ee:fb:82:79:d8:ea:6d:a4:53:84:0a:
b4:d6:db:cc:7a:7e:06:5b:37:4b:f0:8c:63:85:0b:a6:c3:8b:
95:c6:7e:7f:56:b6:6d:75:c9:4d:0c:6d:70:a8:33:96:3f:2d:
13:8e:b3:28:fe:80:d3:6d:c9:d5:da:38:b5:ec:bc:c6:51:42:
74:f2:72:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:07:22 2025 by rpki-client