Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5H4fQCHv-tiO6N4ntCqDStQJV5w.roa
File: 5H4fQCHv-tiO6N4ntCqDStQJV5w.roa (raw, json)
Hash identifier: PWHFPgPoOwQdDGGs3SmpM5tRAq4H3YSnBjqsIIFAFow=
Subject key identifier: E4:7E:1F:40:21:EF:FA:D8:8E:E8:DE:27:B4:2A:83:4A:D4:09:57:9C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB8BB9ADBEB4334CD1AA0AA94B60ECA1B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5H4fQCHv-tiO6N4ntCqDStQJV5w.roa
Signing time: Thu 21 Sep 2023 17:13:37 +0000
ROA not before: Thu 21 Sep 2023 17:13:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:bb:9a:db:eb:43:34:cd:1a:a0:aa:94:b6:0e:ca:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 17:13:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e47e1f4021effad88ee8de27b42a834ad409579c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:64:66:a5:bb:b5:43:e4:30:ff:a0:c7:5c:
25:f1:fc:0d:30:39:16:75:be:bd:35:06:4f:f4:59:
d0:c4:75:de:48:17:40:d5:54:1b:a5:b0:34:9c:bf:
39:4e:8e:20:98:60:eb:06:3d:90:52:19:dc:cd:2f:
c4:1c:96:c3:24:88:38:86:1f:61:32:90:b3:9d:25:
e0:21:f1:bf:03:1c:37:84:aa:c8:c5:94:63:83:31:
eb:36:f9:6d:9f:fd:7b:de:b6:85:47:85:28:e5:c3:
94:a8:f3:52:d4:52:0a:07:22:d7:4c:98:ee:fb:a2:
ae:15:a6:5e:b8:9a:fa:9a:ec:cb:ec:8e:9d:35:c4:
78:0b:28:2e:08:49:72:c8:85:bf:28:c3:50:03:6e:
c3:84:bb:dc:dc:a5:24:cf:84:50:11:25:d1:99:8b:
c6:02:84:70:ee:95:4c:a6:bb:06:88:a2:57:5b:3d:
59:c5:e9:c9:7f:d4:98:40:ed:fb:55:35:04:19:a9:
a1:f6:f0:7c:33:78:5b:16:8d:e5:d9:e7:44:68:d6:
3a:f2:15:99:db:30:df:eb:87:d1:99:14:bb:86:95:
ad:08:63:bd:f5:16:dd:a2:f4:04:f7:8b:85:a4:b5:
a7:49:d8:f2:60:8a:c4:cb:8c:2b:a8:59:83:89:28:
86:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7E:1F:40:21:EF:FA:D8:8E:E8:DE:27:B4:2A:83:4A:D4:09:57:9C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5H4fQCHv-tiO6N4ntCqDStQJV5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:ce:59:e4:80:cc:5a:36:94:68:de:89:6f:90:f1:ba:6e:9b:
63:55:a1:39:3d:d0:14:6b:72:48:ee:3e:57:38:3f:fa:a4:89:
d4:81:1f:7e:d9:ff:12:e6:c8:ad:05:6a:91:2e:6c:e2:20:a3:
45:d5:24:3d:62:27:7b:02:35:23:eb:30:c1:8f:21:54:a0:df:
76:ea:59:9d:05:5d:23:45:cc:eb:55:a0:da:67:fd:3d:74:6d:
64:b7:0a:72:a5:ac:03:a2:df:80:02:d8:23:cf:d1:63:5f:40:
2d:9c:ed:b9:d7:bf:78:80:44:67:14:57:8d:53:b1:de:b5:8b:
3e:90:8f:c5:84:b8:46:a7:72:0e:43:90:19:a3:d4:59:b1:88:
cf:aa:ae:42:ec:1f:9b:19:81:e6:c4:fc:99:fe:63:b0:90:31:
8b:5f:fb:e7:f0:fe:2f:a1:fd:68:ef:78:90:f6:c6:a4:1d:fe:
2b:49:db:a1:83:8c:61:42:64:b4:c0:0e:45:b3:6b:b9:53:d1:
17:6c:4a:48:6e:23:a8:02:24:55:3b:f6:6f:66:cd:3c:b3:31:
b8:18:2b:6e:8c:27:c8:fb:9d:87:95:16:9e:55:24:53:79:7c:
55:05:e3:5f:68:fc:a9:de:d1:33:6e:42:16:f4:24:a3:19:12:
ba:40:0d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:13:57 2025 by rpki-client