Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oyw430TW8Zc4UtCrf4fHb4fv94E.roa
File: oyw430TW8Zc4UtCrf4fHb4fv94E.roa (raw, json)
Hash identifier: OuKGxyN66oLTcZwpj+ZTooo6mkO6R6GVg+uKg1ZXbqw=
Subject key identifier: A3:2C:38:DF:44:D6:F1:97:38:52:D0:AB:7F:87:C7:6F:87:EF:F7:81
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB73D0652B22915F0DEBB00FCCD7B78CE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oyw430TW8Zc4UtCrf4fHb4fv94E.roa
Signing time: Thu 21 Sep 2023 10:15:44 +0000
ROA not before: Thu 21 Sep 2023 10:15:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:3d:06:52:b2:29:15:f0:de:bb:00:fc:cd:7b:78:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 10:15:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a32c38df44d6f1973852d0ab7f87c76f87eff781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:79:41:cb:b6:cd:6a:ff:ca:6d:f5:39:21:
ef:d1:16:cc:b0:f2:68:61:61:2b:e0:60:d1:bb:88:
1c:a6:78:57:17:74:92:8b:62:62:e3:5b:26:4c:17:
f5:06:d7:d6:a1:d8:c4:f2:08:66:d5:7d:f6:22:cd:
ae:65:73:3c:71:d7:ae:01:c5:7c:21:c7:42:f3:0c:
55:d9:a5:d0:47:6a:29:43:84:ea:cd:55:c2:b2:2e:
66:e4:cd:7e:e9:e5:05:ca:e7:7c:1e:2f:e7:a6:69:
63:be:9b:b2:70:95:58:3a:72:5e:d9:5c:64:38:8f:
03:f1:eb:dc:12:8c:60:8c:e3:44:c6:ad:e9:7c:6d:
2d:a4:f1:16:2c:8f:0a:6d:38:1a:4b:e6:f4:bf:62:
a9:d4:56:9e:90:bd:e0:6c:b3:1d:bc:1a:3b:c1:76:
29:4f:46:eb:75:3d:6d:43:f9:87:04:58:50:04:cf:
df:50:2e:a9:79:e9:b0:01:a7:17:1f:2e:d8:a9:f4:
88:09:0e:45:c8:93:38:29:9d:65:38:9f:67:9f:15:
90:cc:f3:da:26:d4:b9:82:23:eb:29:97:b9:96:08:
ad:fc:cf:aa:8f:d3:78:58:6b:a7:06:aa:42:1b:60:
54:e2:21:23:34:1f:d3:13:9f:f4:45:d3:54:79:db:
79:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2C:38:DF:44:D6:F1:97:38:52:D0:AB:7F:87:C7:6F:87:EF:F7:81
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oyw430TW8Zc4UtCrf4fHb4fv94E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:c6:c4:ad:86:f7:c8:de:52:b6:60:0b:87:57:14:1a:b4:79:
f1:6e:2e:9d:a8:91:07:66:9d:78:f7:53:d2:34:ee:c6:e1:ee:
d9:85:fe:be:e4:ef:21:9a:6a:0b:56:c0:90:b0:9f:16:04:c2:
90:83:f2:90:cf:a7:b7:48:af:3d:51:82:06:0b:e0:95:88:8e:
74:5d:f5:1e:b2:2c:82:1a:a4:1d:1a:16:5e:a9:77:2c:15:27:
cc:51:f7:93:4f:bb:98:cd:30:a0:b8:87:8c:22:7a:0b:a1:77:
bd:4b:11:9c:4d:31:0b:82:90:21:34:3d:e5:cd:6e:90:71:ab:
1c:34:8f:c4:e4:c4:ae:12:96:b1:84:68:04:d6:50:23:39:c8:
c4:d5:bc:97:61:80:41:2d:b9:1c:7f:be:8f:86:8d:ca:75:84:
99:17:c6:ba:b1:0e:83:d3:2b:60:29:b2:fa:fe:eb:c1:de:84:
21:9c:05:bb:5e:8d:f7:fa:aa:41:38:5f:fa:69:36:1e:14:f8:
1b:f4:69:b7:31:1c:b6:38:b1:dc:f6:14:8e:0a:37:06:2b:26:
ff:5d:09:9b:88:0d:29:5a:37:89:f5:b6:39:3f:ae:d0:3a:d6:
d7:cc:e4:79:9d:01:73:83:e8:70:10:ae:9a:14:69:2b:0e:09:
4d:9e:3a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:54:27 2025 by rpki-client