Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5YXSp4_q8Pygj2yOjCdwKHw7PWE.roa
File: 5YXSp4_q8Pygj2yOjCdwKHw7PWE.roa (raw, json)
Hash identifier: fqsVMc2LaL06VONB/V7uN+fDEA+CT71gfepjV/7xF9A=
Subject key identifier: E5:85:D2:A7:8F:EA:F0:FC:A0:8F:6C:8E:8C:27:70:28:7C:3B:3D:61
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5C0563DBBA203E1BCA10CCEE7B4C1EF6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5YXSp4_q8Pygj2yOjCdwKHw7PWE.roa
Signing time: Tue 12 Dec 2023 03:15:06 +0000
ROA not before: Tue 12 Dec 2023 03:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5c:05:63:db:ba:20:3e:1b:ca:10:cc:ee:7b:4c:1e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 03:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e585d2a78feaf0fca08f6c8e8c2770287c3b3d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:64:b6:cc:fd:ef:a8:27:cb:e3:65:ff:a2:28:
9a:36:b6:5a:29:78:3d:dd:ac:7a:e6:0f:29:b6:31:
c1:2d:1a:fe:34:df:65:eb:ae:44:eb:32:b6:c9:91:
bd:45:51:20:36:25:fa:b4:1b:92:6b:83:89:59:a6:
cc:98:5e:88:15:47:ad:bb:7a:9f:19:41:a9:e1:a9:
e8:21:3f:bb:d1:dd:92:70:7c:66:ee:86:63:0d:a6:
49:01:e6:b0:d7:de:68:f5:75:b4:2e:24:14:c3:fb:
a2:7d:41:63:06:80:cd:f7:fa:ca:5f:b5:9b:20:f0:
ce:1c:5e:d1:46:66:0a:c9:9a:f7:43:5d:c6:c5:0a:
4d:87:cd:0c:d5:9f:4d:62:39:eb:17:c4:2f:d0:02:
1a:97:5a:aa:46:ac:a5:81:d4:58:f3:87:52:d9:6f:
8b:80:32:f9:b0:17:31:73:a8:bc:9e:f7:76:0a:63:
20:fe:43:9d:1a:54:03:18:ca:e6:dc:69:55:c0:89:
30:58:f1:50:b8:2a:96:d4:dc:6a:92:ea:43:f3:b3:
7a:9e:2a:27:03:04:eb:ba:1e:dc:e7:fc:d0:c8:1e:
e9:b3:be:63:ea:7d:ab:21:fe:af:86:48:88:89:72:
a4:08:47:d1:92:41:c4:2d:93:69:ce:62:94:ac:2b:
f9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:85:D2:A7:8F:EA:F0:FC:A0:8F:6C:8E:8C:27:70:28:7C:3B:3D:61
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5YXSp4_q8Pygj2yOjCdwKHw7PWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:79:02:ab:55:fb:c0:60:7a:64:f2:ca:eb:05:f3:11:4b:b2:
f8:5d:67:11:b9:b0:ce:37:b8:c5:a0:a1:1f:2f:1c:13:dd:d2:
be:0d:06:ac:fc:59:3e:26:47:41:48:54:6d:b3:96:87:38:c8:
fc:d1:05:69:02:33:99:8c:6c:19:06:37:90:84:df:41:1b:3a:
ce:a3:a9:9c:cf:ef:d9:f5:20:af:26:50:04:50:7c:0b:af:4c:
ec:e9:f9:c7:8e:40:7d:4a:a1:9e:bd:88:32:ae:db:0e:38:a6:
cc:ce:07:e0:b4:0a:49:4c:a1:2f:15:14:8a:e9:68:d3:25:8e:
e7:13:2e:7e:25:0d:75:6d:41:db:62:c6:18:1f:6a:d1:11:b2:
58:05:37:85:a0:f8:8d:78:ec:a0:7d:83:c2:56:1d:7a:e2:a4:
48:19:5f:b7:24:e9:9f:0e:bd:4e:3e:eb:0f:16:30:bb:56:dd:
ee:f0:c9:6a:4b:1b:07:e8:45:0a:02:8a:1f:e9:fb:5b:dc:ae:
e5:7e:fd:44:10:f7:3f:49:61:78:74:f2:12:ad:ba:a6:8e:7b:
cf:5f:a9:e4:f7:4b:28:78:73:d5:f0:ac:ad:7a:53:e8:27:cb:
85:51:a2:57:62:6d:45:02:96:88:57:90:3f:df:68:1a:dc:0b:
23:15:5e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:09:35 2025 by rpki-client