Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5RL73B-j08PtivmYLdfLqctHCts.roa
File: 5RL73B-j08PtivmYLdfLqctHCts.roa (raw, json)
Hash identifier: mELg7slOn6Ch7oiCrzt7WO6LkKZe2QshtmdcpDBXkww=
Subject key identifier: E5:12:FB:DC:1F:A3:D3:C3:ED:8A:F9:98:2D:D7:CB:A9:CB:47:0A:DB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2170B2D11D255A28087C5EF070374392
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5RL73B-j08PtivmYLdfLqctHCts.roa
Signing time: Thu 12 Oct 2023 01:11:55 +0000
ROA not before: Thu 12 Oct 2023 01:11:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:21:70:b2:d1:1d:25:5a:28:08:7c:5e:f0:70:37:43:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 12 01:11:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e512fbdc1fa3d3c3ed8af9982dd7cba9cb470adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:b4:ff:77:4d:52:0a:75:51:c0:41:0f:84:
a8:e5:ea:9e:c1:87:40:c2:4c:29:7a:6f:56:f4:d8:
ab:16:15:c7:d1:dd:9b:18:7f:3e:f9:fa:eb:37:78:
14:ca:e3:8a:79:1c:98:b0:ff:4c:97:94:65:2f:95:
9c:34:e7:42:e8:ea:0c:00:8b:dc:04:01:1c:7f:9d:
6d:d1:11:02:65:ba:d7:5e:cb:e5:93:a3:92:72:38:
15:cf:5b:1b:62:42:ae:c8:d7:b3:d8:7d:6a:dc:e4:
cd:2b:13:ec:b5:49:5a:fd:c0:21:8d:02:52:03:7a:
b3:a8:69:97:c5:20:37:74:9e:44:3b:02:37:a5:58:
c2:54:a4:ff:86:34:be:45:07:76:0a:8b:dc:10:13:
1f:e0:d5:cb:72:5f:66:c9:2f:7a:92:f0:ac:51:0a:
ed:9f:1f:28:fd:a2:82:95:81:3a:6c:90:b0:d3:a9:
bd:5b:83:01:b3:22:a8:67:ab:45:70:70:e6:3b:d1:
55:cd:12:3d:54:a6:b8:a9:94:20:1e:f1:56:38:32:
5e:d6:c6:e6:e7:13:58:1d:8f:8f:7a:ee:26:e7:c3:
27:44:0d:e3:43:a4:9d:55:03:58:27:c6:33:01:8d:
a1:69:99:ab:b1:09:0e:24:46:bb:9e:b1:84:b7:d8:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:12:FB:DC:1F:A3:D3:C3:ED:8A:F9:98:2D:D7:CB:A9:CB:47:0A:DB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5RL73B-j08PtivmYLdfLqctHCts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:86:3e:a6:5d:37:16:1c:63:1c:44:f0:df:31:48:9e:ef:a5:
50:f1:aa:99:33:2e:ba:c6:ba:6b:9b:65:82:a7:c8:8d:11:d3:
cb:15:06:58:f0:a1:de:d3:06:ef:96:aa:ba:c9:4a:b6:d9:fe:
80:2c:73:3c:79:31:b2:3f:b4:2f:5c:b6:05:82:a2:ab:34:ee:
72:51:b6:81:82:22:30:83:b3:42:88:69:6a:da:c9:94:08:51:
ef:08:4d:97:e2:e2:14:ef:f6:72:eb:24:20:72:69:12:7e:17:
54:09:c0:11:6e:37:d6:eb:f6:00:82:d9:8d:7f:9a:e8:ce:4c:
56:88:d8:22:f9:2a:1b:b1:12:28:92:74:76:bb:c6:a2:b7:48:
fd:77:12:86:8a:44:1c:f1:e2:1f:d2:08:04:16:4b:b6:65:d3:
01:3f:1e:6a:93:22:cd:e0:a1:c3:e5:e3:c1:91:8a:be:cd:e1:
ef:47:47:e8:34:8d:a6:2b:65:fb:df:81:24:03:c4:75:f4:73:
1d:8b:8c:48:96:2a:ea:f8:3d:59:a7:85:07:b7:63:db:d7:da:
29:56:d3:bb:2e:cb:ed:4f:62:2b:4d:0b:79:b6:da:f1:e5:dc:
07:d6:a0:56:50:48:9e:6d:20:5c:1f:a7:ca:d9:6d:c6:70:c5:
b4:79:6e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:49:50 2025 by rpki-client