Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oc9qkBj_ytB9Tro7BmfcGffBS7M.roa
File: oc9qkBj_ytB9Tro7BmfcGffBS7M.roa (raw, json)
Hash identifier: XpKSolN9FvbLL7HlSMOcB7T1/sXkpTzeckcY8mpz5Gw=
Subject key identifier: A1:CF:6A:90:18:FF:CA:D0:7D:4E:BA:3B:06:67:DC:19:F7:C1:4B:B3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C63F4F26891155EAD64A51B7A3954827C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oc9qkBj_ytB9Tro7BmfcGffBS7M.roa
Signing time: Wed 13 Dec 2023 16:14:06 +0000
ROA not before: Wed 13 Dec 2023 16:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:63:f4:f2:68:91:15:5e:ad:64:a5:1b:7a:39:54:82:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 16:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1cf6a9018ffcad07d4eba3b0667dc19f7c14bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:74:e8:49:f1:04:b9:b2:46:38:88:1b:9f:
ea:b8:7e:90:37:24:6e:91:9f:61:cf:3d:22:71:c7:
aa:0e:85:0c:c2:7e:f5:c0:56:bf:6e:16:ed:ce:fa:
2d:de:eb:0a:00:41:a7:69:a6:8c:ae:97:d8:e8:03:
52:a1:d8:61:e4:c9:15:03:d2:c9:27:2b:12:32:00:
f1:3a:d1:7b:51:48:f5:39:8c:5c:1b:e8:ef:f6:ee:
79:54:a6:b4:99:ac:f3:c5:52:3a:7a:57:86:be:c5:
cb:e4:3f:66:2c:d3:93:a2:41:b3:84:a9:c2:c1:b0:
31:dc:bf:c5:19:fb:03:46:29:3e:e1:5a:03:db:09:
dc:90:d4:b3:b6:35:dc:78:a4:6e:b5:da:98:e0:ff:
0e:52:b6:03:69:a7:dd:03:f8:21:18:dd:2c:a5:73:
f2:e5:a2:f6:03:cf:06:df:3c:39:66:f5:bd:be:68:
27:3f:59:e9:94:65:95:f2:d6:b9:6b:ed:8c:32:b8:
cf:5a:37:06:36:51:1f:7a:83:19:4c:2b:f4:f0:cc:
04:9a:3b:01:5a:1c:43:0e:27:e3:04:15:5d:d6:69:
10:ea:65:89:91:76:47:9e:de:45:37:f1:a4:e4:58:
45:60:23:cb:40:74:6e:ff:a2:c0:55:3f:7e:b5:f7:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CF:6A:90:18:FF:CA:D0:7D:4E:BA:3B:06:67:DC:19:F7:C1:4B:B3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oc9qkBj_ytB9Tro7BmfcGffBS7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:28:cf:c0:b5:82:fc:8b:49:ae:aa:c3:21:3d:27:a5:d4:00:
90:26:bc:1b:64:18:96:92:b8:9a:bb:c7:6a:10:40:1f:4e:e6:
d4:f9:7d:13:2e:ba:52:c3:53:a3:0e:7e:a1:38:c4:88:ee:43:
6a:a2:6e:93:48:5b:9d:e1:93:b9:c9:68:ce:cf:de:64:47:fc:
07:99:5f:7f:51:a0:c9:90:08:ec:90:d3:40:93:38:65:5d:6a:
4e:ee:32:52:40:72:b4:81:95:8d:a3:81:d1:fb:b5:d9:f3:98:
64:8e:4a:ee:16:ff:e5:43:73:c4:38:cc:8a:2d:71:c4:21:a8:
28:0a:0b:d8:2f:1f:31:ac:b2:84:cf:c6:ac:7b:54:e4:ae:fc:
02:87:61:53:c5:39:14:4e:1c:c0:d3:cb:50:21:c9:80:87:7f:
64:d9:8d:a3:34:4b:0d:8c:1e:93:c6:8a:c9:6d:c7:1a:e7:0e:
e7:6b:f4:c4:0b:35:b3:d1:b8:a7:84:c6:52:f2:aa:10:1a:91:
4b:bc:88:77:54:cd:95:b9:93:2d:23:35:ad:44:8c:c4:79:86:
99:61:97:06:ce:15:e1:54:b4:a1:79:fc:93:31:e4:c9:a8:bd:
94:14:50:fe:34:8b:e6:08:56:3a:e1:72:cb:c0:a9:34:7b:cf:
43:e2:25:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:53:13 2025 by rpki-client