Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oaGk5PWe2b2Cjc-YT5Nkar1skZg.roa
File: oaGk5PWe2b2Cjc-YT5Nkar1skZg.roa (raw, json)
Hash identifier: oruPHenHO+JUb1jQirwG7vNjnFK6K1qmCX26l+8yUF8=
Subject key identifier: A1:A1:A4:E4:F5:9E:D9:BD:82:8D:CF:98:4F:93:64:6A:BD:6C:91:98
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B63BFCC4D53267B1EF45EE07F5F863C31
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oaGk5PWe2b2Cjc-YT5Nkar1skZg.roa
Signing time: Tue 24 Oct 2023 22:13:15 +0000
ROA not before: Tue 24 Oct 2023 22:13:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:63:bf:cc:4d:53:26:7b:1e:f4:5e:e0:7f:5f:86:3c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 22:13:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1a1a4e4f59ed9bd828dcf984f93646abd6c9198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:81:ca:73:da:52:0d:66:d4:56:b1:da:61:3e:
7b:4e:9c:c0:87:6c:a7:ad:01:3d:95:14:51:7c:47:
fd:16:be:75:0f:86:35:cc:37:44:57:4b:df:f0:ab:
45:1f:15:00:bf:29:4e:fa:0c:e9:9b:16:64:f2:9b:
e9:ac:7b:4d:0b:91:f1:41:d9:07:9a:41:7b:95:9e:
7c:37:41:9c:5a:98:00:5c:cd:5e:0d:8c:a6:86:e0:
0a:c8:57:cb:a5:30:58:cb:d3:7c:57:77:37:26:30:
2d:bd:cd:2e:e3:e1:71:ca:d2:aa:49:db:ea:6b:d6:
ae:42:a8:2b:ed:63:2f:05:3f:20:fd:66:75:d4:ec:
c5:67:44:24:73:f9:ac:c8:ac:3e:6f:a6:3a:59:1c:
f9:4b:6f:31:46:00:04:57:e1:e7:34:34:fd:01:6e:
0b:c2:c5:48:33:e7:54:d0:fa:2d:84:4b:b8:1b:50:
8e:30:04:d8:7b:03:cf:be:7c:fa:9e:91:e4:9e:61:
0d:99:49:b7:a8:a3:a5:2b:24:2d:8a:a3:55:45:f5:
f7:da:82:53:f7:e6:96:d9:28:02:d2:be:af:aa:df:
5d:4d:24:c4:e6:68:f4:9b:50:f5:07:c0:b7:fb:23:
70:0b:b5:5f:ae:d1:b7:ad:40:51:b0:1f:7a:45:a4:
9e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A1:A4:E4:F5:9E:D9:BD:82:8D:CF:98:4F:93:64:6A:BD:6C:91:98
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oaGk5PWe2b2Cjc-YT5Nkar1skZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:9a:bc:e4:d4:7c:e2:da:e2:db:32:42:d9:66:e7:eb:91:00:
32:9f:82:b1:b1:9c:f4:79:bd:a9:72:ca:d9:fb:c7:00:0e:5d:
52:35:68:6b:c2:39:1f:13:1e:16:d7:c0:e9:a4:25:ae:8f:dc:
e4:9c:ef:69:5c:52:5f:37:4e:03:32:51:03:d1:07:c8:c6:cc:
f6:bf:a1:b1:86:af:26:06:7b:d0:f7:cb:69:de:14:56:00:7c:
24:d6:c3:ad:6e:db:18:ae:e9:85:94:7c:0f:29:49:b5:b3:82:
f6:e6:72:b5:97:66:28:7c:6b:7b:11:4d:d5:21:db:59:18:a3:
03:08:34:31:5b:cf:21:72:71:d7:5e:e0:90:40:df:b8:c5:47:
70:10:f8:7f:fb:2e:05:52:7b:af:10:fe:9d:6f:be:ec:d8:c8:
96:2f:99:dd:50:15:42:ae:bd:07:36:28:91:59:e0:9e:2c:9e:
b6:c4:a5:a7:81:cc:75:96:bc:5b:6b:df:de:ca:32:22:16:3e:
3f:24:f3:9d:46:44:9a:b0:23:f4:34:74:da:3d:dc:0f:5c:c3:
7a:b4:d1:e1:03:43:ad:de:88:5f:d6:75:97:3d:72:96:ff:0d:
a7:d7:89:da:63:7c:f7:cf:6e:25:3e:5c:34:c4:39:8e:5a:71:
d4:ec:66:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:39:42 2025 by rpki-client