Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oawDg76XNA6AnM-nXsjd9Q8sq_g.roa
File: oawDg76XNA6AnM-nXsjd9Q8sq_g.roa (raw, json)
Hash identifier: SUNif25fRkjgdPsm+jNyGDl1CGyVyL0WXar/W7+3RnA=
Subject key identifier: A1:AC:03:83:BE:97:34:0E:80:9C:CF:A7:5E:C8:DD:F5:0F:2C:AB:F8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3D8CE8972E1535B6668212D5B0CC24B8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oawDg76XNA6AnM-nXsjd9Q8sq_g.roa
Signing time: Tue 17 Oct 2023 12:12:06 +0000
ROA not before: Tue 17 Oct 2023 12:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:8c:e8:97:2e:15:35:b6:66:82:12:d5:b0:cc:24:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 12:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1ac0383be97340e809ccfa75ec8ddf50f2cabf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:02:0d:99:a9:0d:42:b1:c0:8d:bd:2e:6b:
95:0c:a2:16:af:4d:5a:3a:88:44:1d:cd:a4:66:dd:
46:36:ec:cc:4f:10:3a:28:d5:44:71:97:be:8a:5f:
76:47:3e:31:84:e7:55:d0:f2:01:96:61:11:76:e8:
b2:bd:07:ac:b0:ad:eb:30:fa:6a:a1:11:ca:54:7f:
9e:05:38:dd:bd:e5:4d:c2:c5:ef:15:22:2a:db:28:
12:37:3d:9c:64:35:95:82:d6:99:ac:59:42:5e:75:
96:65:8b:41:d5:01:a4:84:e2:65:a2:dd:25:50:30:
00:4c:54:4b:70:c3:7e:64:9e:12:ed:76:8f:7b:54:
c4:52:78:dc:64:06:cc:51:5e:f3:4d:47:b0:d2:a6:
43:70:06:eb:df:bd:f6:82:fa:49:c6:f2:15:9c:2b:
dd:5b:b4:28:f8:93:18:e1:cf:71:39:9c:19:df:87:
9e:d2:1b:a0:66:0c:a0:f8:03:48:29:09:ae:cd:a8:
95:a1:e4:e0:59:d7:ab:09:ba:b4:88:ea:9c:9f:0b:
3c:d7:34:90:5e:22:a3:c1:91:fd:16:a5:d9:33:49:
cc:be:a1:08:30:96:56:b2:74:55:6c:f4:98:90:fc:
a0:80:22:98:b4:d7:f4:e2:65:f4:92:57:87:b0:a6:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AC:03:83:BE:97:34:0E:80:9C:CF:A7:5E:C8:DD:F5:0F:2C:AB:F8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oawDg76XNA6AnM-nXsjd9Q8sq_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:6f:68:c6:c5:5d:0a:15:0b:d1:56:7d:86:76:01:5f:4b:10:
62:00:76:ce:bd:43:f1:aa:65:d2:5d:67:c7:fa:5d:2d:f4:01:
ce:f3:47:50:0f:00:d8:d7:d1:ca:29:db:b3:73:f7:d3:42:70:
d8:7b:78:b0:d6:6d:71:6d:5d:f2:41:d2:2f:7c:63:04:f0:f6:
9e:69:de:b8:5d:32:18:2f:77:42:5f:4a:68:6a:bd:ce:ed:de:
a5:48:ef:cc:ad:2e:5f:a1:33:69:a5:e0:ff:28:6b:7c:5e:01:
b5:41:0d:e6:2e:5e:7f:26:3e:0f:77:5f:d3:bb:b0:dd:64:6f:
09:18:a4:5c:07:0c:6f:f5:80:20:a3:ed:60:cd:f7:93:20:f9:
cd:ca:d8:ba:a2:92:47:2f:30:7d:0c:83:2e:0b:0e:59:be:9f:
3c:ba:c4:06:ef:cd:34:b9:9b:87:d0:91:c1:2d:c9:f6:fe:f8:
31:35:f9:3a:c5:61:19:ac:b0:e4:1f:88:c9:18:e3:f9:4c:36:
04:ed:b8:8e:68:e3:05:9d:19:d0:9b:a4:a7:be:cf:f7:c9:33:
bc:ad:c6:43:b0:63:78:f1:6f:4e:26:38:2b:d9:0d:c6:61:68:
19:5e:61:04:50:47:40:94:fd:83:2f:bc:39:2d:f4:03:b3:ea:
be:20:ee:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:29:13 2025 by rpki-client