Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rdtxEC-6rc7Aq-XCF4T3PujmFyM.roa
File: rdtxEC-6rc7Aq-XCF4T3PujmFyM.roa (raw, json)
Hash identifier: OXZA8FdVI0SLVQMVGdisT7NW6gfKWyqSNXT1sh0fuPE=
Subject key identifier: AD:DB:71:10:2F:BA:AD:CE:C0:AB:E5:C2:17:84:F7:3E:E8:E6:17:23
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEB29CD9A0CE978946C05445FAFF3724D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rdtxEC-6rc7Aq-XCF4T3PujmFyM.roa
Signing time: Sun 01 Oct 2023 12:14:59 +0000
ROA not before: Sun 01 Oct 2023 12:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:eb:29:cd:9a:0c:e9:78:94:6c:05:44:5f:af:f3:72:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 12:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=addb71102fbaadcec0abe5c21784f73ee8e61723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:9f:9a:0a:28:1b:bb:13:5a:00:5e:c0:59:
7f:e1:5e:05:8c:fe:64:e5:31:03:14:9c:43:17:fb:
e9:24:ff:92:92:ea:14:6b:58:ba:f3:2b:f5:d1:c4:
be:5b:e9:87:d2:6f:ab:6b:d3:2e:91:9b:b2:dd:f5:
43:d2:38:29:59:c7:c4:a9:b9:11:2b:54:9e:8b:3e:
ed:7b:b6:1b:db:f1:36:ac:c6:f5:fc:df:64:61:9a:
b4:83:02:fe:fa:92:dd:f8:a1:f9:00:a2:19:3d:60:
74:83:e5:8e:26:cd:46:41:75:44:7c:cf:db:b8:b0:
96:d0:95:46:21:fb:1f:ee:24:f0:e8:dc:ed:d7:a8:
f6:13:ed:e2:11:ae:5a:41:92:57:05:92:86:00:d9:
f9:b7:9c:83:80:98:f2:ac:87:2a:77:c2:68:1a:16:
6a:85:0a:a8:ec:97:e8:db:94:bd:96:82:17:0b:86:
fa:93:5f:6d:5b:b9:7b:8c:55:3b:f5:50:d1:e4:b1:
04:71:00:06:08:0e:5b:06:b9:6f:78:62:7b:16:4d:
9b:ad:fc:6c:93:f6:78:d2:75:49:4c:a9:c4:6d:df:
35:d2:be:98:2c:83:5f:9e:80:48:51:3f:b0:48:46:
4b:da:26:4d:bb:2d:ba:09:21:58:d8:a0:b4:bc:79:
c0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DB:71:10:2F:BA:AD:CE:C0:AB:E5:C2:17:84:F7:3E:E8:E6:17:23
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rdtxEC-6rc7Aq-XCF4T3PujmFyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:fd:2b:28:e7:e6:b6:35:12:c3:ba:44:b4:bc:cd:53:58:d2:
9d:d6:70:ba:2b:1d:7a:6b:d7:ba:b9:56:7c:37:0c:76:35:f0:
b3:0b:00:9c:31:7b:42:33:92:37:d1:55:b5:ab:47:fc:47:31:
62:70:bc:f5:e5:84:de:7d:3d:f0:2e:d5:81:f9:6b:ff:5f:0f:
46:70:7f:b4:c4:ee:99:28:c5:bf:85:26:10:f6:5f:46:7d:45:
86:6a:4c:83:36:95:33:9c:d2:9d:f1:06:54:99:95:5f:9c:f5:
dc:08:ae:93:06:83:cb:b1:e7:99:e5:73:7e:88:fb:ae:6b:46:
33:16:c8:e8:ef:dc:3f:72:3a:88:ef:37:10:f5:ef:7c:be:6e:
d7:54:b3:bd:a3:9a:06:d7:9b:7c:3d:89:4d:ab:c9:19:e3:5b:
28:74:f7:01:e3:cf:b7:81:a6:e7:43:8c:ed:8a:60:75:71:5f:
86:3b:8f:85:a5:55:9e:39:2a:1f:8e:e2:8e:6b:1a:3f:0a:f4:
d9:72:15:c3:ae:fc:58:31:0a:94:d8:77:24:fb:ef:0d:2f:dd:
f2:99:61:b0:c9:4b:4c:8b:92:e5:6e:d0:34:1f:aa:fe:b2:58:
cf:79:da:7e:d6:01:c0:8e:6e:17:d7:6a:b9:a7:65:b1:61:bd:
48:82:46:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:28:28 2025 by rpki-client