Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/odswK9-u4iLYzDvrSAhbgVLrrJs.roa
File: odswK9-u4iLYzDvrSAhbgVLrrJs.roa (raw, json)
Hash identifier: OCvvmvqQxuUOrrJZHwj+KL25CJsqZ9FTkkrGN1+JO0w=
Subject key identifier: A1:DB:30:2B:DF:AE:E2:22:D8:CC:3B:EB:48:08:5B:81:52:EB:AC:9B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADD6E2DD202053FC25AE4FF1A1605F6F4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/odswK9-u4iLYzDvrSAhbgVLrrJs.roa
Signing time: Thu 28 Sep 2023 20:14:59 +0000
ROA not before: Thu 28 Sep 2023 20:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dd:6e:2d:d2:02:05:3f:c2:5a:e4:ff:1a:16:05:f6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 20:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1db302bdfaee222d8cc3beb48085b8152ebac9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:f4:98:fc:f7:6e:72:ba:54:b4:06:9f:d9:
59:9e:c4:0c:f0:57:97:a2:50:86:c8:13:95:70:a2:
ce:e4:a9:c1:b2:bf:6b:cd:88:8a:81:b0:58:af:31:
58:11:b3:fb:0a:fb:97:91:f0:bb:38:e0:bb:f7:74:
86:4e:fb:aa:68:a3:da:49:7a:bf:60:b6:1e:26:ce:
1a:8c:28:ba:bf:26:f9:3d:9e:d5:76:e0:07:48:4f:
39:93:be:11:b7:27:88:01:f6:92:5c:4d:57:d1:30:
d5:9e:b2:95:a2:f3:11:47:a2:35:ef:83:8c:36:16:
99:5d:49:73:2b:21:3a:55:c9:45:56:0e:8e:de:dc:
6c:46:f3:fc:64:87:66:49:62:4f:aa:78:fe:3c:6d:
f4:16:e4:b4:b9:41:a3:d5:00:d2:00:92:72:c8:8c:
66:ff:59:58:21:b9:34:a8:2b:57:8f:52:57:28:9c:
65:f5:ac:3e:59:7b:8c:4f:d6:57:61:e4:31:9c:4f:
61:da:43:c6:44:cc:93:9a:e3:ca:f4:f9:cd:6d:81:
2c:b8:d2:2e:66:c7:bf:ba:c5:f1:fd:78:53:71:0e:
95:fa:ed:b7:c6:d3:5e:0a:97:6f:51:fe:4f:4a:e4:
4f:d1:9f:1a:c9:17:10:9e:52:a7:44:f5:85:0f:8c:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DB:30:2B:DF:AE:E2:22:D8:CC:3B:EB:48:08:5B:81:52:EB:AC:9B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/odswK9-u4iLYzDvrSAhbgVLrrJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:83:f8:70:89:34:de:4a:e8:57:e2:b8:0a:91:9c:f7:b2:3e:
42:17:82:67:7b:a9:d4:46:96:4b:d3:e2:51:06:18:2a:98:ff:
c2:d7:dd:d3:67:9d:ae:92:61:d8:dd:70:32:e4:1d:a4:67:49:
7c:62:ac:f8:b5:56:0f:38:f2:2c:56:2d:44:32:b5:0d:98:db:
bf:44:95:74:30:76:2c:f3:bd:68:fd:e4:52:bd:4e:19:9c:87:
20:b2:32:4b:4d:ec:03:0a:9b:f0:80:a2:80:30:ee:8e:da:7f:
7c:43:52:e0:ab:b8:55:b5:cc:8e:ef:6b:ca:d2:50:56:c6:cc:
aa:df:51:b1:fa:09:8e:3d:34:35:fd:61:2e:cd:bc:1e:03:e0:
72:63:c7:4e:cf:12:4a:b1:d5:70:a8:de:83:80:98:e4:fc:ac:
f8:72:14:6b:cb:26:62:11:38:75:50:93:81:26:13:5f:c0:5d:
37:9f:4c:c4:a9:a8:13:ca:4b:ac:4c:e0:7c:f5:ad:f1:c4:04:
de:78:9c:59:49:87:69:e6:0a:0b:65:cd:a6:17:ae:d9:ff:4d:
d2:e6:35:d8:6d:10:6b:6f:31:6f:ad:8f:6a:23:d2:da:ae:10:
58:90:41:c6:79:b4:c9:64:34:53:c1:68:32:33:53:6e:cc:b5:
43:77:2e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:00:35 2025 by rpki-client