Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1HkDN6l9XyKGg_Td10TTXpe2kMY.roa
File: 1HkDN6l9XyKGg_Td10TTXpe2kMY.roa (raw, json)
Hash identifier: q1VCrhaseTtfZDMJVTNSBnsBgWYNCbhVSykztISZcXE=
Subject key identifier: D4:79:03:37:A9:7D:5F:22:86:83:F4:DD:D7:44:D3:5E:97:B6:90:C6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE5FBB9E846BC6510912CE8C20EDAA0E9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1HkDN6l9XyKGg_Td10TTXpe2kMY.roa
Signing time: Sun 19 Nov 2023 05:09:21 +0000
ROA not before: Sun 19 Nov 2023 05:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e5:fb:b9:e8:46:bc:65:10:91:2c:e8:c2:0e:da:a0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 05:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4790337a97d5f228683f4ddd744d35e97b690c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f1:75:e4:52:00:62:68:70:5f:e1:ee:e9:aa:
31:d5:c2:db:7c:4e:a2:0e:19:14:46:23:d4:75:d2:
ac:2f:ad:70:3a:c8:cd:05:41:83:56:2e:75:5a:5b:
db:ec:bd:c5:c7:ca:c7:33:66:23:fe:91:42:a2:c1:
e7:3b:fa:18:7f:93:0e:0f:27:b3:56:1f:8d:be:1b:
9b:fb:ce:98:50:e6:37:40:bc:b5:60:f9:cf:75:9f:
22:e7:8a:f2:f3:7c:ca:6e:a8:a8:f9:f1:c8:e3:90:
d7:2b:88:42:13:d9:79:a3:df:f4:ba:af:8b:83:b3:
a5:25:21:40:58:1d:2b:d6:61:74:ce:a5:0b:9e:3c:
1e:3e:a8:06:1f:30:12:98:3e:8b:57:f0:fa:35:88:
02:f8:f0:c0:f8:bd:5a:b6:16:64:73:5e:12:35:b0:
69:f9:83:0c:23:bc:d5:87:78:ea:d8:73:d5:6e:a9:
47:dd:d7:73:07:c4:7a:b9:93:fc:60:21:e3:dc:65:
f0:7b:db:f8:fc:6c:bb:65:76:74:32:13:f7:11:b6:
7a:5a:f5:6c:47:31:86:79:73:ac:06:09:44:3d:f8:
86:ae:7a:67:c1:03:e7:18:f4:04:96:c0:29:87:30:
82:85:01:0b:34:a1:b6:f2:ba:a5:94:65:f4:82:7a:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:79:03:37:A9:7D:5F:22:86:83:F4:DD:D7:44:D3:5E:97:B6:90:C6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1HkDN6l9XyKGg_Td10TTXpe2kMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:6f:9d:e6:93:83:ff:97:be:25:c0:d1:0e:cd:fe:4d:15:af:
4c:48:7f:4e:83:42:be:83:31:4a:e0:4b:a7:86:e5:65:50:c8:
ce:90:09:ee:6d:f7:b0:22:b7:93:0b:62:08:84:7b:bb:51:cb:
36:c7:2d:64:6a:2d:45:2f:28:81:c1:4a:d4:3a:b5:94:7b:32:
86:02:5a:ec:72:1f:db:e6:a3:7d:98:14:5a:e2:ba:8b:41:3d:
81:af:db:79:cc:ef:54:8a:dd:84:21:61:b1:66:fa:c4:57:dd:
0e:5a:d9:37:3f:9f:f7:40:ea:82:d7:dd:9d:e2:8f:f7:9d:e6:
53:54:40:d7:b9:cd:4a:e4:41:77:1b:0d:c7:ed:66:2e:80:f1:
f8:74:4e:ec:d3:1f:6c:9f:c2:c5:54:17:59:e5:a9:2e:c6:3c:
f3:cb:fc:5f:58:b8:3b:2c:14:c8:2c:68:f5:ff:d7:bc:b6:2e:
2b:72:55:2b:57:64:e8:a7:71:62:7d:06:4b:e0:56:2b:01:12:
88:d4:b0:90:c3:bf:4b:de:99:2f:a2:87:02:13:39:70:d2:2f:
28:79:9c:19:8e:a5:97:4f:ed:9f:66:9c:d3:02:d0:84:71:8c:
c1:f8:cb:83:c7:23:4e:3f:a8:85:51:1d:6a:ea:4e:35:24:fc:
47:79:63:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:29 2025 by rpki-client