Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t8baa1NbN9lpCUGHBbqqBrlqW0w.roa
File: t8baa1NbN9lpCUGHBbqqBrlqW0w.roa (raw, json)
Hash identifier: aF/Lgf86bUD1tJQZBtQzPkfyBIdrrg27zCxWcAyZRds=
Subject key identifier: B7:C6:DA:6B:53:5B:37:D9:69:09:41:87:05:BA:AA:06:B9:6A:5B:4C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2923D4A025E67606EBA9EC4923124033
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t8baa1NbN9lpCUGHBbqqBrlqW0w.roa
Signing time: Fri 13 Oct 2023 13:04:55 +0000
ROA not before: Fri 13 Oct 2023 13:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:2923:2cd9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:29:23:d4:a0:25:e6:76:06:eb:a9:ec:49:23:12:40:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 13:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7c6da6b535b37d96909418705baaa06b96a5b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:c3:73:7c:de:cd:e7:1c:fa:c7:7d:59:ae:
f7:53:dc:df:9d:73:e9:77:6e:d1:06:9e:b2:56:32:
38:c9:24:89:c1:c6:eb:f7:d9:18:6b:cf:e2:62:8e:
35:6a:0f:81:0b:84:3a:6f:45:18:79:76:f4:80:19:
59:70:48:32:f6:a1:5b:77:7a:b1:d1:02:85:a6:0c:
fe:37:46:3e:87:c9:71:f8:77:1f:83:89:0f:d1:06:
58:02:67:30:95:62:be:ac:f2:dd:a7:be:83:03:e6:
96:9c:a2:20:94:2a:24:47:d9:1c:2a:d7:0a:db:64:
86:a9:09:6b:94:b5:b8:67:55:9d:31:70:fb:70:db:
e8:36:8b:59:b7:02:70:dd:cb:80:03:1c:a0:22:51:
a3:8e:c9:bb:09:f1:1d:da:8a:37:1d:3d:6f:91:dd:
ff:38:82:8f:cc:5d:92:50:6f:6d:6c:f5:b1:22:6b:
d3:68:b7:3b:71:d2:b2:85:af:65:62:62:99:8c:36:
41:30:08:1d:b2:7d:ac:ec:2f:aa:85:27:5d:d7:7a:
c8:62:a6:2f:79:10:38:a2:8b:a0:88:d3:02:af:54:
dc:8e:96:9d:fa:03:8b:72:83:ae:89:1f:93:ef:e2:
68:c9:b3:df:16:f4:c2:0a:86:6c:7b:17:1d:fd:f4:
7d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C6:DA:6B:53:5B:37:D9:69:09:41:87:05:BA:AA:06:B9:6A:5B:4C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t8baa1NbN9lpCUGHBbqqBrlqW0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:68:9e:9b:62:9b:d9:de:24:f6:1d:95:2f:23:37:ab:19:38:
3f:04:81:b9:3f:7b:8d:97:6b:da:0e:c5:0e:23:b9:6a:89:a5:
9e:70:a7:16:14:6e:04:1a:4b:c3:77:72:7a:3d:b4:38:5f:03:
03:d7:09:35:cb:3c:f2:6e:9d:95:c5:7f:aa:db:d6:ac:ae:5a:
39:39:06:1f:89:80:af:bf:c2:1d:e4:da:5c:fe:d8:8f:9e:f5:
7f:b5:86:67:cd:48:8a:97:a2:24:fb:1a:99:69:b8:85:47:81:
10:13:a4:3c:57:3c:1b:b3:98:ea:bf:12:ce:22:d0:a4:bd:44:
48:f4:b3:d0:52:fb:82:7c:0e:f3:5f:ee:47:c9:99:64:7c:2a:
23:59:1c:09:68:4a:2d:fb:c5:16:db:52:91:dd:2e:5e:3e:51:
16:ed:33:41:14:f9:08:dd:98:9d:c8:39:da:46:ce:f3:4d:98:
7c:fc:3d:4e:07:a7:75:84:61:43:3d:44:46:fa:54:97:d0:df:
22:06:ae:11:fb:80:65:5b:be:8c:de:3d:c0:87:fe:4a:78:7c:
47:19:b2:af:ab:9a:af:8c:95:ca:a9:77:5a:53:5d:bb:e5:a7:
2c:a8:f6:58:40:c7:66:97:67:22:9c:a7:ca:09:10:ef:40:17:
f5:52:39:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 06:07:36 2025 by rpki-client