Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/olSd8y0BwSUvm2Mf14zPbqEIZvI.roa
File: olSd8y0BwSUvm2Mf14zPbqEIZvI.roa (raw, json)
Hash identifier: QCA9kHOwFEDaoEWexoNAygRou3gFian8diRAlbzjB8o=
Subject key identifier: A2:54:9D:F3:2D:01:C1:25:2F:9B:63:1F:D7:8C:CF:6E:A1:08:66:F2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA18B328BDED9C8E4C53D6D201FA4D950
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/olSd8y0BwSUvm2Mf14zPbqEIZvI.roa
Signing time: Sun 05 Nov 2023 22:12:16 +0000
ROA not before: Sun 05 Nov 2023 22:12:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a1:8b:32:8b:de:d9:c8:e4:c5:3d:6d:20:1f:a4:d9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 22:12:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2549df32d01c1252f9b631fd78ccf6ea10866f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:63:91:11:3e:65:70:5f:6c:9b:74:10:93:fa:
0a:bd:4b:ed:c3:a5:ae:a9:38:b7:e1:a2:c9:47:f5:
c8:b6:5d:6f:a7:65:5d:86:5c:78:d5:68:93:2a:a1:
6d:db:92:d0:f7:7f:da:35:bf:a1:a4:92:8d:4c:90:
d9:8c:9b:7b:c5:ee:fd:45:fa:07:33:0d:24:05:67:
36:e3:45:8c:ab:7e:e0:7e:c6:79:83:9c:6b:7d:f0:
24:ca:94:08:41:d4:5b:12:48:cc:02:95:71:0a:ed:
2b:95:cf:e8:05:7a:04:7e:12:92:af:63:5b:81:f8:
71:8f:df:7c:da:ea:76:c3:88:1c:df:33:4d:c8:da:
8e:1c:b3:89:d5:41:d2:52:1e:56:c6:94:81:c5:5a:
54:09:f3:1a:6f:7c:69:31:0f:a3:2b:1e:8e:36:9f:
89:06:e8:ec:42:1f:25:23:14:80:d1:d6:6a:f3:a9:
4c:5d:a9:74:71:45:d9:28:a9:e1:7a:97:ba:6f:a5:
fc:05:25:ae:77:6a:36:2b:16:15:f3:25:6e:27:29:
23:87:a6:09:60:65:32:9b:e4:17:eb:74:7d:a7:25:
bf:33:91:49:7d:bf:09:67:99:75:91:1e:73:e4:21:
84:05:8d:52:d2:8b:96:e2:01:03:6e:03:e3:a3:c8:
5e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:54:9D:F3:2D:01:C1:25:2F:9B:63:1F:D7:8C:CF:6E:A1:08:66:F2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/olSd8y0BwSUvm2Mf14zPbqEIZvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:6b:ed:59:3d:55:28:b9:f1:d7:66:56:7c:35:0b:8f:f4:2c:
6a:f8:53:e1:f5:63:a6:26:4d:4a:a7:6e:95:ca:58:3a:2c:65:
14:1a:39:b8:a9:cf:76:d3:af:b4:65:c1:b2:7c:1d:72:eb:52:
8a:7f:2b:37:7d:1d:3a:61:6a:53:85:c2:a9:98:b1:61:86:e5:
e7:f7:a3:65:30:dc:92:48:05:ef:da:1d:ac:e5:7e:57:1e:b4:
63:6e:0a:b0:a0:53:b6:f2:cd:6b:0d:9a:20:ff:52:61:4b:10:
49:d8:68:15:8e:98:b0:f4:81:d7:06:5f:6e:6f:c7:3e:ed:b0:
90:64:40:44:1b:1d:ee:0e:d8:f5:69:08:34:e0:86:83:74:e3:
36:99:ce:8c:b5:1f:77:5f:69:fa:be:6a:cd:8d:20:f3:db:22:
8b:0e:76:a9:2b:83:61:93:0b:aa:64:72:6a:69:ee:75:38:e2:
64:6e:c1:ca:00:0d:e5:a7:28:72:31:29:95:b1:41:b0:1e:0f:
b7:33:52:32:8b:ef:bf:eb:a0:35:a1:c9:5b:dc:44:ac:3b:74:
23:3b:d5:a9:b9:0d:53:2b:bc:5c:b0:5d:14:ee:64:99:87:e9:
6c:2d:fd:92:70:70:c5:7e:7b:6b:df:af:dc:46:80:b7:ec:10:
b7:d3:dc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:30:02 2025 by rpki-client