Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ozrVtC9p5ncUHbtm3cu4lNBIOrA.roa
File: ozrVtC9p5ncUHbtm3cu4lNBIOrA.roa (raw, json)
Hash identifier: nj7z4doa1xmP1J1d4xgJ7Kwlsa6HLxwqbmYKIuSsjNI=
Subject key identifier: A3:3A:D5:B4:2F:69:E6:77:14:1D:BB:66:DD:CB:B8:94:D0:48:3A:B0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDCF984889EDFFC25C5E1176447662074
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ozrVtC9p5ncUHbtm3cu4lNBIOrA.roa
Signing time: Fri 17 Nov 2023 11:10:21 +0000
ROA not before: Fri 17 Nov 2023 11:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:f9:84:88:9e:df:fc:25:c5:e1:17:64:47:66:20:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 11:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a33ad5b42f69e677141dbb66ddcbb894d0483ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a8:3d:78:5f:dc:95:df:53:ca:d4:cd:3e:d7:
8d:71:aa:3d:ff:0d:a0:d6:1c:77:7b:21:99:b6:2a:
b8:e5:5d:4e:ca:d3:0d:1e:88:cd:ae:56:8a:fe:dd:
97:85:e3:db:f6:85:d9:d0:18:16:70:73:fa:f1:86:
0b:49:50:66:32:69:2c:9f:41:d1:8d:53:52:68:d2:
58:7b:88:2d:77:03:bc:71:1a:e7:1a:fb:2e:56:b2:
f3:8d:10:71:4f:fc:f5:50:3c:ba:34:ee:47:2d:44:
15:36:a3:4b:91:c0:48:79:20:52:b4:34:aa:2d:b1:
81:bd:31:aa:c3:b0:ca:e4:bb:21:45:4b:a9:bf:4c:
5f:d8:66:e8:73:eb:dd:ee:db:64:44:bb:32:cb:cf:
b1:15:65:d6:1b:a4:3e:4a:3b:62:76:c8:e8:3a:0d:
62:8d:f6:15:93:5f:82:46:e6:7a:9f:a4:cc:cd:24:
11:ab:54:49:74:33:94:3b:7f:96:b1:ad:bd:4e:9a:
81:72:39:2e:3b:25:b0:d3:0a:6d:31:d8:01:57:ab:
32:84:74:92:2d:bd:ea:61:57:2b:ae:aa:1e:e0:02:
9a:a4:a1:1c:b0:83:06:1c:3a:39:fd:fa:43:80:5d:
3c:f9:2f:95:b2:03:9a:3e:5d:80:92:0f:f3:c7:3b:
85:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3A:D5:B4:2F:69:E6:77:14:1D:BB:66:DD:CB:B8:94:D0:48:3A:B0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ozrVtC9p5ncUHbtm3cu4lNBIOrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:5c:82:9d:d5:eb:d0:a5:0a:08:8d:f5:f5:d0:c2:17:0b:7e:
57:ad:0c:34:7d:f1:92:e9:5d:67:dd:b2:e9:da:5f:5f:7f:1c:
22:c8:7a:65:ff:53:4a:99:82:a3:74:22:2c:e0:7d:0c:8f:08:
a2:53:da:dc:10:3e:e4:59:59:a5:b2:3b:bc:9a:54:39:6e:37:
2f:f0:09:78:f0:4b:4d:04:48:4e:99:d6:40:92:45:59:5e:c2:
64:e4:b6:25:91:4d:3d:ed:59:db:b7:a0:d3:02:45:ec:af:70:
3b:bf:d2:5b:9a:6d:4e:ba:05:ff:66:e8:46:38:1e:97:6b:49:
14:61:de:a7:0d:57:9b:38:fb:00:d3:2a:c5:b6:5d:6d:90:dc:
b0:ee:22:0e:ac:98:d0:c6:9f:59:9d:0b:bc:c2:c2:e7:af:25:
1d:ba:7b:3f:b7:eb:11:05:26:0d:c6:ef:39:c6:3a:8b:fa:5f:
3e:79:a9:4a:8e:3f:53:3b:1e:9d:00:16:d1:8a:2f:00:a0:92:
dd:dc:73:a6:15:7e:32:d0:cf:a9:1d:84:e9:e5:4e:6a:a9:90:
7a:88:f4:19:6c:b4:0f:fd:9f:20:42:80:a0:19:0d:b4:98:ff:
b4:f4:9a:d3:1a:c5:da:86:e0:6d:73:9c:98:07:2b:2f:8b:6e:
e8:e3:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:56:12 2025 by rpki-client