Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/okF7FPY15fZVUCac8EVLPN9WFko.roa
File: okF7FPY15fZVUCac8EVLPN9WFko.roa (raw, json)
Hash identifier: 6/fxKSXmZ7V+3WVjZGAXAHCR0MboHieq+s3p6rFD5LY=
Subject key identifier: A2:41:7B:14:F6:35:E5:F6:55:50:26:9C:F0:45:4B:3C:DF:56:16:4A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B39EABAD970A3FC2547FC3743109516F4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/okF7FPY15fZVUCac8EVLPN9WFko.roa
Signing time: Mon 16 Oct 2023 19:16:06 +0000
ROA not before: Mon 16 Oct 2023 19:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:39:ea:ba:d9:70:a3:fc:25:47:fc:37:43:10:95:16:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 16 19:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2417b14f635e5f65550269cf0454b3cdf56164a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:43:24:7a:01:fb:35:3d:cd:0e:ac:c0:2e:
f3:e4:05:92:e1:97:c8:58:98:c0:06:d6:9c:d1:58:
64:3f:83:83:29:36:25:eb:a7:b5:95:cb:e8:7b:8f:
1c:02:c5:b5:b5:66:58:c9:a2:08:89:67:e0:a8:9c:
24:b5:a3:83:ef:97:a4:02:47:ba:e5:c2:58:3b:cd:
90:d5:cc:b3:3d:d5:bf:5a:3b:06:6c:c6:0f:3d:d8:
37:fe:39:a0:c3:91:d9:b9:18:a8:3b:82:2f:1d:04:
a3:24:a6:2d:77:dd:ab:c5:ac:69:fb:84:8c:0d:b6:
3a:c5:91:4b:38:38:63:c9:5e:64:a8:ac:da:32:c1:
90:65:01:48:5f:44:ee:0c:c5:b0:e1:d2:63:ce:7e:
1f:8a:d9:4e:79:4a:34:12:9b:b7:07:3f:d6:43:e9:
ce:d2:39:05:7f:4b:74:e0:72:bf:27:fe:bb:cc:67:
21:a2:eb:07:5c:b7:a4:88:97:af:b3:62:f7:39:ef:
58:4e:68:57:f7:92:aa:56:fb:9e:4b:e9:65:b5:42:
77:18:80:3d:ee:f9:73:2f:9c:ac:0e:4f:f5:9f:e7:
da:45:5d:c3:3a:be:4c:b6:8c:70:e2:85:d4:63:89:
19:94:b1:75:29:19:a9:07:2f:9b:33:61:20:91:47:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:41:7B:14:F6:35:E5:F6:55:50:26:9C:F0:45:4B:3C:DF:56:16:4A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/okF7FPY15fZVUCac8EVLPN9WFko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:f5:2c:5c:ea:64:7a:77:94:ff:f8:30:c7:33:1d:cd:69:ce:
f0:bd:c5:fd:39:3a:06:5d:d5:e8:08:cd:2d:4a:2c:e8:44:b9:
4e:28:28:b0:56:f3:58:ed:eb:2d:39:10:32:f1:c3:62:0a:3a:
ba:8f:36:18:9d:01:85:1f:e5:40:67:72:c1:04:37:fa:71:61:
bd:d0:b0:dd:9d:da:19:e1:a1:5b:db:76:45:63:52:4c:43:dc:
34:1f:03:e9:39:41:d7:50:5e:c8:75:f5:ed:91:de:63:dd:8a:
07:59:fb:ae:e5:e7:82:0b:14:ee:60:d9:4d:74:5a:fd:63:81:
50:96:8c:8f:c0:20:95:71:78:67:ce:07:52:e9:fe:e3:84:50:
78:cc:bc:ec:1e:c8:e6:55:0d:ce:38:c6:73:44:7b:b7:fc:c7:
95:47:bd:d5:9b:0d:91:cd:8b:f8:e2:65:4c:3d:88:02:53:89:
8b:5d:c1:48:ad:c2:17:a9:fc:d8:5e:d9:2a:0e:0b:64:4b:30:
e4:92:a4:2d:b4:49:62:a1:3a:be:a0:ea:9d:a9:91:17:ab:8f:
3a:14:1f:84:31:eb:0d:80:45:bf:00:0d:db:58:45:7f:0c:55:
52:0c:94:3e:e6:63:ba:4e:0e:31:23:3a:a1:85:a2:c2:21:39:
38:72:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:11:13 2025 by rpki-client