Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5dcplinlJuwYs_aYBJxuxIN9tQo.roa
File: 5dcplinlJuwYs_aYBJxuxIN9tQo.roa (raw, json)
Hash identifier: eGtk2iRVS18N4fZkVReEi53369rK0+W7H5y2702hQoc=
Subject key identifier: E5:D7:29:96:29:E5:26:EC:18:B3:F6:98:04:9C:6E:C4:83:7D:B5:0A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE96E4B91C41E91231E55D1F7560FB29B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5dcplinlJuwYs_aYBJxuxIN9tQo.roa
Signing time: Sun 19 Nov 2023 21:13:21 +0000
ROA not before: Sun 19 Nov 2023 21:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e9:6e:4b:91:c4:1e:91:23:1e:55:d1:f7:56:0f:b2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 21:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5d7299629e526ec18b3f698049c6ec4837db50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:43:3b:52:84:a5:15:e5:63:29:30:a1:bb:98:
74:7b:ec:be:db:46:d7:7b:b6:c0:13:e1:c6:25:ef:
c0:2a:0c:7c:ce:b9:a3:fe:de:ff:e3:64:84:b3:9f:
78:81:d9:d1:88:44:df:37:35:5c:63:f5:fc:fa:b3:
5a:83:b3:61:72:12:37:6e:ef:b3:5c:6d:72:59:8e:
ff:32:e4:28:16:f3:5b:da:79:08:c9:81:6b:29:e7:
a6:87:34:b3:45:86:1b:6f:8d:f8:c9:2a:d3:42:0b:
b2:b5:6d:ff:9b:f7:7e:25:de:c8:20:05:70:9f:dd:
b1:7a:d6:c4:20:a6:7f:ec:3b:2b:bc:6f:d2:5d:9b:
dc:0a:0a:88:3f:a4:da:04:34:ca:17:80:68:7d:4f:
1f:20:6c:29:08:dc:38:6c:42:85:ac:27:5a:e0:4e:
19:3b:5a:a8:45:99:f6:53:18:6a:2f:4d:b3:79:9d:
e2:8e:71:11:65:8a:71:f2:c1:c6:df:e1:40:af:2e:
c0:6c:11:57:ec:40:5c:c8:1b:26:ae:86:9b:79:c8:
fd:02:b9:6a:19:cf:7a:86:64:18:87:a9:da:a6:2b:
1e:5a:d5:28:80:12:9e:d0:00:f2:b2:62:f3:1c:ff:
20:70:27:a2:b2:89:a0:0e:f7:40:84:72:29:49:90:
40:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D7:29:96:29:E5:26:EC:18:B3:F6:98:04:9C:6E:C4:83:7D:B5:0A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5dcplinlJuwYs_aYBJxuxIN9tQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:cf:51:65:1a:87:50:93:57:d3:ac:6e:fe:16:e3:3f:9c:92:
12:e0:c4:15:9a:56:1c:25:42:58:6c:df:cb:2b:f4:e7:da:73:
2b:dc:b4:86:99:5d:c3:49:b9:94:44:16:68:fa:8b:a5:f6:dd:
a4:3b:8c:32:c5:39:bf:ee:9f:ba:4e:30:d2:77:e3:dc:cc:1b:
9f:7e:45:2b:a6:88:8c:d3:8f:1b:ea:b2:74:55:f7:28:ad:31:
62:77:d8:97:bb:e9:17:6d:d0:09:ba:16:8e:bc:48:7c:ef:89:
de:86:2a:98:44:a3:2d:4a:00:f0:ce:99:b2:96:a3:f5:98:e2:
a5:0f:6b:d8:51:89:15:68:49:79:d4:37:dc:38:17:f7:3a:1e:
5e:55:05:0a:0f:27:f2:35:b7:43:8e:56:f3:ca:3c:81:a2:8d:
4f:2e:fa:85:1e:2c:73:48:e3:01:95:c1:ed:cb:51:bd:0a:db:
4e:db:c1:ef:70:f6:cc:43:33:ca:53:e0:35:65:6e:db:f7:e7:
ea:76:98:30:00:00:53:95:b2:cb:41:c5:76:42:35:2f:03:b5:
89:d6:09:08:fa:a4:76:b3:34:c1:cd:28:ca:c2:9a:5c:e2:cf:
66:d4:1c:8c:8e:b0:61:51:e0:1f:8d:55:8b:cd:f5:58:8e:8c:
7d:11:e2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:57:20 2025 by rpki-client