Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/o-pycD390Mxaf4wPNBunzvjxh30.roa
File: o-pycD390Mxaf4wPNBunzvjxh30.roa (raw, json)
Hash identifier: siEEfFPuQiQb4ENpPxMvDOAMY9jtuEPVee7y4XE9rAU=
Subject key identifier: A3:EA:72:70:3D:FD:D0:CC:5A:7F:8C:0F:34:1B:A7:CE:F8:F1:87:7D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD5AE62D0E389ECE56CA3B0EE098A2606
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/o-pycD390Mxaf4wPNBunzvjxh30.roa
Signing time: Thu 16 Nov 2023 01:10:57 +0000
ROA not before: Thu 16 Nov 2023 01:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d5:ae:62:d0:e3:89:ec:e5:6c:a3:b0:ee:09:8a:26:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 01:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3ea72703dfdd0cc5a7f8c0f341ba7cef8f1877d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2d:33:c2:fc:3e:1c:39:42:ea:aa:6c:dd:27:
66:ce:4c:97:f1:ce:cc:4a:ae:21:5a:c0:cd:d4:b9:
27:ac:7d:1c:62:23:9c:3a:f3:99:1a:93:a9:b1:78:
05:0d:d3:cb:8b:1b:33:65:cd:9c:a1:84:27:0b:63:
4a:51:d9:ec:36:6d:04:29:83:e5:a1:07:e4:b5:83:
94:4d:4a:60:a5:1b:6b:1f:fe:6b:9d:ec:51:e4:2d:
30:07:ae:f8:50:cb:4b:af:26:35:16:0c:b2:90:16:
ec:d0:66:ca:9b:c7:a6:83:0f:7d:e5:33:2f:fb:6c:
bd:59:7c:b6:ec:3e:7b:10:a2:38:19:72:5a:1c:18:
2c:da:8c:ba:a0:f7:4a:b8:1a:3e:f8:31:2b:25:27:
f4:ec:7e:6a:8f:1f:b4:4b:69:aa:73:a7:c2:ac:77:
7d:21:88:0e:2c:8b:a4:da:88:ec:dd:8a:e7:a8:5c:
a6:af:dc:c2:c1:ce:13:d3:f1:b1:e6:34:6c:87:16:
c1:4f:f9:6a:c7:29:1e:b1:74:90:74:bb:ac:d4:dd:
f1:d6:6d:7b:07:03:e4:72:fd:1a:d6:4e:ad:5e:92:
ed:54:25:19:ec:13:2c:df:0d:28:03:20:ed:c5:25:
8c:ed:b1:47:7e:c7:cc:76:7b:a3:f4:bc:9e:7d:a8:
cc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EA:72:70:3D:FD:D0:CC:5A:7F:8C:0F:34:1B:A7:CE:F8:F1:87:7D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/o-pycD390Mxaf4wPNBunzvjxh30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:5f:df:b8:bc:62:49:56:88:b4:ea:1e:4c:5d:0c:af:f3:3d:
a7:f3:71:8d:77:33:4d:19:7e:b6:a9:c7:b5:1a:a7:10:d7:d0:
59:ac:19:df:2b:63:ad:4b:57:74:ce:13:59:88:23:b1:f2:5f:
26:ac:6c:a0:1d:3b:a2:77:a1:f3:de:9a:e8:41:10:86:31:ab:
be:cf:e9:fe:64:76:d9:f3:1d:97:f4:a9:e0:2e:25:9d:49:ea:
a4:05:3d:3f:cf:72:12:33:ae:57:f3:b7:e8:55:57:a4:54:23:
90:51:27:a9:b4:62:0a:17:5c:56:34:e4:ac:11:79:99:94:3e:
60:d3:a3:25:86:e0:07:6f:1f:76:22:0c:d9:6b:05:ba:9c:d6:
a5:00:20:dc:2f:dc:bf:ce:e5:0d:39:0d:dc:fa:7e:f8:c4:18:
8f:a7:bb:ab:6f:4d:d4:af:94:9a:2e:3e:1b:be:4a:97:f6:50:
ef:0d:12:47:c5:5e:5c:56:04:32:37:bb:54:e6:dd:8a:b4:5e:
3e:4e:27:93:56:96:6c:33:44:2a:6e:3b:ad:af:63:ba:34:6f:
e1:35:4a:ef:4b:5d:be:dd:af:1b:69:08:84:51:86:4a:63:05:
e6:3d:ed:d5:21:09:5a:cc:1d:d0:05:74:b0:7a:2f:1f:aa:3a:
20:c2:db:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:20:15 2025 by rpki-client