Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oe7jXNLMxjv3EnpYOXY96czGj2Q.roa
File: oe7jXNLMxjv3EnpYOXY96czGj2Q.roa (raw, json)
Hash identifier: J6vP8wP1gX1pJFcuAbftDm/6NpLKU7Q1hutnCYp14pk=
Subject key identifier: A1:EE:E3:5C:D2:CC:C6:3B:F7:12:7A:58:39:76:3D:E9:CC:C6:8F:64
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5A44C8132B26AFF580541A3F67A1A6A7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oe7jXNLMxjv3EnpYOXY96czGj2Q.roa
Signing time: Mon 11 Dec 2023 19:05:06 +0000
ROA not before: Mon 11 Dec 2023 19:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:5a44:2bbd/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5a:44:c8:13:2b:26:af:f5:80:54:1a:3f:67:a1:a6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 19:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1eee35cd2ccc63bf7127a5839763de9ccc68f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f5:d9:eb:2a:5f:3d:c9:b2:fe:01:14:a9:78:
43:ed:4a:8c:f6:56:3e:31:7d:3e:7d:fb:19:7f:6d:
bf:d7:4d:c0:75:ba:0f:49:45:33:b8:da:62:75:42:
db:23:32:e1:34:28:43:e9:35:0d:fd:02:46:37:a4:
fa:f5:12:f3:af:1d:e3:ac:39:e8:d4:81:5c:c3:68:
5c:03:b0:b3:5c:f9:f4:5d:15:c5:97:cc:77:6b:27:
96:ae:b0:20:3c:a0:2d:9d:2b:b9:4f:4c:ed:0b:be:
25:3f:22:48:5d:56:47:68:06:d3:ac:aa:58:c7:7a:
3d:99:f3:fa:ee:38:6c:11:39:e4:ec:b1:3a:d4:15:
98:1a:d1:bc:ae:85:79:78:1e:38:51:e1:f4:c6:19:
ff:44:d7:41:69:1f:3a:e9:dc:06:bf:cc:ee:e5:e9:
e4:b3:fe:ba:ea:19:01:c4:41:00:95:f7:c2:67:ef:
d4:d9:ae:bf:cb:12:e3:d5:07:8d:47:a6:2e:2a:7c:
a6:a3:f9:f7:eb:b6:8e:ff:96:dd:a8:19:9e:d8:71:
b9:5f:50:a8:c8:b7:20:49:6c:98:08:e1:77:c6:b2:
d5:20:2f:7e:36:05:ed:e2:8b:dd:b1:7c:cb:02:ce:
7a:b3:65:f6:d0:f2:17:91:e8:1a:97:9c:bb:24:90:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EE:E3:5C:D2:CC:C6:3B:F7:12:7A:58:39:76:3D:E9:CC:C6:8F:64
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oe7jXNLMxjv3EnpYOXY96czGj2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:29:87:1a:49:7c:fa:4c:42:91:af:ab:88:5c:2d:f7:b5:59:
3a:64:3e:02:bd:9c:ac:a4:8f:d2:72:cf:21:9f:83:92:f2:e0:
a2:95:08:e2:d5:35:60:5d:18:64:69:9b:80:50:8f:e9:8f:0b:
28:40:61:2b:53:2a:1b:d3:b4:2f:4c:b5:ac:6e:38:48:9b:2f:
14:87:98:70:bf:05:c9:0e:c1:a8:49:36:8b:60:81:9d:36:b8:
a1:16:e2:5a:9b:e2:3e:30:3a:1a:30:56:f0:04:d0:13:a8:69:
28:0d:4e:fe:64:5e:16:79:37:55:4a:5e:50:c6:27:86:89:4b:
97:f7:5c:c3:77:df:99:06:0e:e2:8b:f4:e9:56:46:ef:df:42:
3a:fb:52:0f:b0:05:92:63:8a:70:1f:c4:28:a7:6a:a8:47:23:
5f:97:85:09:a3:ed:67:51:ce:93:1a:fb:cb:26:e0:3e:b1:74:
11:98:40:89:86:9a:3d:94:6b:82:ed:7a:e7:bf:42:a3:ac:5e:
2b:bd:d3:86:4e:25:86:ae:9b:ce:52:3f:91:1e:13:95:6f:c4:
bf:fd:c8:1e:f7:b6:40:94:27:53:dd:3d:a1:86:8e:a0:fa:b0:
4d:66:cd:16:ad:62:cc:7f:49:12:d4:aa:3d:f5:4c:2a:fa:2c:
77:f6:6c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:54:10 2025 by rpki-client