Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d7_y7jH2Wuxx4-37hJxfEdS9m4U.roa
File: d7_y7jH2Wuxx4-37hJxfEdS9m4U.roa (raw, json)
Hash identifier: 1nSg7MVsTu28a7CTmAw+2DG8GTe8SKcAHOTjoYhmuhE=
Subject key identifier: 77:BF:F2:EE:31:F6:5A:EC:71:E3:ED:FB:84:9C:5F:11:D4:BD:9B:85
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC1BAA7A1E68A936902CC459648BED834
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d7_y7jH2Wuxx4-37hJxfEdS9m4U.roa
Signing time: Sun 12 Nov 2023 04:11:57 +0000
ROA not before: Sun 12 Nov 2023 04:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c1:ba:a7:a1:e6:8a:93:69:02:cc:45:96:48:be:d8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 04:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77bff2ee31f65aec71e3edfb849c5f11d4bd9b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3a:8c:81:c2:1e:df:4d:7d:7b:ed:ef:02:9c:
9b:c1:51:9d:e2:63:14:69:ae:39:e4:f6:57:85:76:
f9:ec:51:90:2d:e0:3c:4e:d2:ef:44:1e:4c:a4:3e:
f7:67:fb:6a:8d:73:cf:1c:b0:7e:59:1d:05:80:14:
90:e3:ac:4d:c0:c5:fd:77:fc:54:a4:d1:dd:5d:93:
81:04:5e:ff:b8:d5:88:30:a7:6a:99:40:9b:68:6e:
8f:73:9b:19:9a:25:ae:ec:78:44:65:b3:3a:1a:99:
ce:b3:7a:df:54:2a:92:3b:6f:ab:c7:1f:92:9c:d8:
86:f6:10:6d:f7:a1:74:ab:e3:47:ee:7f:c7:3c:ac:
b8:b0:18:21:23:9e:5f:77:07:bc:59:80:67:9d:a7:
2d:bc:10:91:85:fe:a0:38:e2:dc:aa:91:fa:c5:8c:
e9:60:b2:ed:b6:8c:74:77:a1:6c:df:9f:3c:5c:f3:
ce:6f:75:a8:ae:5d:ae:3d:96:f2:cb:11:c5:10:2f:
24:0b:69:f6:c7:6f:ef:95:e5:8f:18:75:87:58:49:
a3:bd:78:0e:21:2b:6f:d2:02:95:d0:17:b0:84:0c:
89:89:45:e7:8a:6d:9e:0d:20:1f:25:29:7b:83:d9:
cd:8d:18:2e:a8:34:6a:f8:13:8a:92:d1:05:f2:7d:
6d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BF:F2:EE:31:F6:5A:EC:71:E3:ED:FB:84:9C:5F:11:D4:BD:9B:85
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d7_y7jH2Wuxx4-37hJxfEdS9m4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:41:8c:ac:9d:ce:90:25:e3:41:21:65:0b:dc:fb:5a:0c:7d:
56:10:7e:0f:fc:b6:65:ab:47:be:a1:db:cd:28:52:9c:9f:4e:
5e:f2:8f:51:d9:70:6c:18:98:b2:4c:dd:d4:e2:8b:76:4b:8f:
ec:42:4f:50:53:7d:fa:12:7e:c9:36:96:c9:5c:b8:a3:c4:73:
b5:e0:56:62:89:5f:a4:d5:41:38:89:4b:d2:f7:96:3c:d4:03:
5e:1e:3c:55:88:46:0e:59:0d:63:5b:b0:64:0e:3c:be:84:fe:
61:08:39:8f:ee:f9:5c:69:ab:80:35:36:1d:0b:5f:dd:50:90:
30:ba:f1:50:b0:df:70:23:25:e2:e8:14:09:66:1b:0f:85:8f:
2c:66:40:dd:88:78:be:cc:64:23:de:23:40:4d:52:d4:ef:a7:
94:78:c9:4e:48:d2:7f:2f:56:ab:15:ac:c6:c1:78:87:96:68:
30:90:9a:e5:3d:8c:7f:5a:7d:3d:c2:35:ef:f8:06:79:9d:3b:
3b:2c:00:f3:4e:a1:64:a3:09:9c:51:74:3c:1c:e6:67:a0:54:
19:9e:40:df:e4:9c:d2:98:dc:5e:ba:f3:92:c1:4b:7f:67:ff:
b2:62:f5:b7:80:55:b3:8d:a5:e6:6e:9e:27:b0:3b:c0:1b:b2:
14:22:5b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:28:45 2025 by rpki-client