Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dLjq8E1mdm47qOf4yGBzA1g2CgE.roa
File: dLjq8E1mdm47qOf4yGBzA1g2CgE.roa (raw, json)
Hash identifier: eRu+KXCh0HKcxRdpW1mh97Abaa7YWcg+ks3gRV3XPiE=
Subject key identifier: 74:B8:EA:F0:4D:66:76:6E:3B:A8:E7:F8:C8:60:73:03:58:36:0A:01
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B75BEBBC795A77A7E14161EE07D48173F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dLjq8E1mdm47qOf4yGBzA1g2CgE.roa
Signing time: Sat 28 Oct 2023 10:05:15 +0000
ROA not before: Sat 28 Oct 2023 10:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:75bd:e180/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:75:be:bb:c7:95:a7:7a:7e:14:16:1e:e0:7d:48:17:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 10:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74b8eaf04d66766e3ba8e7f8c860730358360a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4d:1e:42:a9:26:1e:cf:39:fb:86:1c:ed:bf:
dd:63:65:9a:2c:42:c0:a7:7a:7a:6d:94:7d:b4:4b:
e3:30:9d:a1:6e:af:1f:e1:8d:8a:a3:ad:da:a6:cc:
39:52:8f:17:b1:cb:a3:bd:65:5d:8c:1e:98:eb:d2:
03:1e:f8:9a:e7:00:19:d8:c5:ef:eb:11:79:8b:5b:
28:6b:49:8c:e2:2c:4d:77:19:01:e5:55:df:1c:de:
5d:f7:89:e7:6f:09:ab:cb:01:d2:5f:6a:eb:4a:39:
f5:17:d3:88:48:17:4d:f3:2f:92:a4:4a:ed:a0:66:
2a:e7:06:64:b3:78:c9:3f:3a:65:6f:24:47:42:f9:
18:42:73:c4:c1:8c:19:a5:7f:fb:44:35:b2:58:6e:
ac:ee:0f:9e:bb:96:57:43:4d:a2:b9:e8:e0:b7:b8:
16:fa:6c:9c:db:60:dd:0e:2d:91:f7:41:30:42:45:
72:ec:f7:9a:ad:2b:be:cc:1f:9f:ed:94:d8:2f:8f:
75:c5:9a:4d:2c:8e:55:28:8a:29:ec:90:a5:63:39:
4a:8a:88:89:72:0c:24:f2:74:0b:de:c7:eb:63:d6:
a9:b4:99:7c:1a:1f:28:7f:9c:f0:d2:36:1f:54:a6:
3f:74:b4:d0:8e:47:f5:b7:43:66:c0:6a:d8:0a:64:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B8:EA:F0:4D:66:76:6E:3B:A8:E7:F8:C8:60:73:03:58:36:0A:01
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dLjq8E1mdm47qOf4yGBzA1g2CgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c0:2d:44:d4:12:c1:3e:7e:28:d2:16:71:93:2f:d6:d6:bf:d0:
6e:01:c0:f7:da:da:80:df:2f:a3:6f:4a:00:32:4a:db:61:ec:
35:90:e9:84:ee:21:56:e6:55:79:9e:ca:7f:39:27:58:77:9a:
ed:67:24:48:9d:87:6e:60:98:09:21:31:47:a0:37:ae:a3:de:
d3:cb:fa:e4:1e:4a:34:55:7c:29:4b:eb:c0:10:9c:09:4f:f3:
0b:49:7d:fc:a7:be:83:91:44:be:eb:bd:1e:f0:ff:48:ab:a8:
6b:33:28:7e:86:ca:93:5a:2d:78:37:6c:bc:ca:16:95:c9:16:
b1:1e:34:3e:2c:05:7a:f2:ae:78:38:ec:d7:81:8e:b7:37:54:
16:28:17:56:35:b3:16:fc:ca:43:76:d8:dd:7a:f4:a1:6d:46:
76:88:69:1d:01:81:7f:9e:0f:08:f8:af:6a:0a:d4:e7:3f:e1:
3e:9e:1e:83:ab:4a:52:0e:c4:95:e0:d8:ac:f3:30:46:62:ad:
dc:ce:83:e4:26:62:b4:54:07:b6:16:d6:1d:ec:2a:5b:54:32:
f6:db:32:0d:49:b5:9c:75:ea:86:5b:93:2b:e6:b1:a3:2f:32:
a8:5c:92:a3:ff:96:5b:d7:6a:50:a5:80:f5:29:18:4b:09:7e:
49:ad:4d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 18:26:44 2025 by rpki-client