Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oiN5WqCrlKwz5LRbuYVL1y7q1mY.roa
File: oiN5WqCrlKwz5LRbuYVL1y7q1mY.roa (raw, json)
Hash identifier: S52wci+qRx6T2ox7bhdzDDRdH08SYy4GrGx8QoYQ11M=
Subject key identifier: A2:23:79:5A:A0:AB:94:AC:33:E4:B4:5B:B9:85:4B:D7:2E:EA:D6:66
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B273DAEC6918536CC7B66EE659378312B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oiN5WqCrlKwz5LRbuYVL1y7q1mY.roa
Signing time: Fri 13 Oct 2023 04:13:55 +0000
ROA not before: Fri 13 Oct 2023 04:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:27:3d:ae:c6:91:85:36:cc:7b:66:ee:65:93:78:31:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 04:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a223795aa0ab94ac33e4b45bb9854bd72eead666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a3:a7:d1:5e:ef:a6:d7:98:82:33:1b:3f:7f:
be:55:9e:e0:db:3c:64:f3:d6:fd:c3:a8:cc:a9:95:
05:0a:99:fb:3f:fe:3b:f4:c9:5f:18:3c:0b:f8:f3:
cd:1a:cf:61:c6:e0:3a:39:f6:10:b5:87:ad:cc:17:
a1:5d:36:e1:f2:c6:d3:00:f8:9d:bf:cd:4b:b6:19:
4b:c1:a9:6c:99:5d:38:8b:fe:14:87:41:54:10:5b:
81:05:b9:db:0b:8d:8e:1a:7d:94:15:7e:6b:7a:35:
de:6e:e2:c2:8c:48:52:5a:31:37:2d:73:e9:b2:d5:
54:14:b8:40:4a:a3:55:6b:1a:1c:06:26:80:91:8b:
3d:f7:8b:25:52:d4:fe:1c:4e:3f:78:6b:cb:1f:10:
28:5c:b2:1f:10:f9:0d:a6:c8:86:6e:4d:3c:8d:89:
5c:a1:4f:21:44:49:29:cf:a8:cc:69:d2:c2:d0:a9:
38:48:d6:91:8d:ac:80:d6:cc:bf:75:73:b8:78:6b:
a2:c0:1f:f7:85:93:67:5b:dc:5d:4a:c1:6f:65:73:
a9:92:80:5a:64:e9:63:98:d0:e5:1b:33:2c:a5:56:
4c:17:ae:60:34:e8:59:e5:1f:d4:39:1f:3d:fc:52:
92:fe:82:12:22:9d:68:23:7d:77:d7:8f:d0:ef:8e:
19:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:23:79:5A:A0:AB:94:AC:33:E4:B4:5B:B9:85:4B:D7:2E:EA:D6:66
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oiN5WqCrlKwz5LRbuYVL1y7q1mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ba:bd:e7:b4:02:34:1f:05:b5:f1:7c:91:85:d7:44:f8:0a:c1:
94:86:04:1d:aa:33:0b:06:4c:e9:2e:98:df:95:32:21:6c:d2:
ba:7c:b5:72:f5:2c:cb:98:99:2c:13:93:ed:3a:90:2e:66:6a:
2e:30:c5:04:eb:17:b9:82:f1:d4:00:94:12:e3:0e:76:e9:c7:
c0:f0:30:a1:c7:6d:0d:c2:41:7b:a7:85:8a:d8:4a:35:58:5b:
8b:45:30:3d:7a:84:1e:41:69:e1:9d:9e:db:94:aa:64:c9:1e:
fa:85:f2:db:15:dd:48:39:a2:33:b0:ae:2e:93:67:0c:f7:55:
cb:01:bb:ca:12:12:76:7d:4a:f3:10:1b:d8:c3:cf:7e:35:f5:
17:8a:cd:24:99:77:d3:31:f3:01:a8:58:93:e8:59:d5:2f:d5:
e1:68:1c:5d:84:4c:91:00:76:09:c7:88:e1:81:9d:79:ae:ba:
f3:db:1c:75:fc:b9:98:dc:8f:ab:60:44:c1:fa:90:de:09:4a:
ab:7c:4c:7e:ac:5d:36:f7:1b:b6:80:1e:f5:d4:89:18:59:30:
ac:b9:24:74:6a:e1:03:a3:d1:34:49:58:fb:b4:1d:2a:f9:d2:
40:aa:ad:d1:52:06:e0:d3:01:04:da:8a:df:cc:f5:b5:28:61:
52:11:75:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:21:05 2025 by rpki-client