Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5i23uuss7_-a6X3RgdItIFN9bKA.roa
File: 5i23uuss7_-a6X3RgdItIFN9bKA.roa (raw, json)
Hash identifier: 2YgTS8UGxcZ8cBmMOWugfg2jLGhK+IrOc1KNm5WV388=
Subject key identifier: E6:2D:B7:BA:EB:2C:EF:FF:9A:E9:7D:D1:81:D2:2D:20:53:7D:6C:A0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFE73C3ED66523928EE1E96313AE3A313
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5i23uuss7_-a6X3RgdItIFN9bKA.roa
Signing time: Thu 23 Nov 2023 23:11:21 +0000
ROA not before: Thu 23 Nov 2023 23:11:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fe:73:c3:ed:66:52:39:28:ee:1e:96:31:3a:e3:a3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 23:11:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e62db7baeb2cefff9ae97dd181d22d20537d6ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e3:8f:7f:3e:dd:ba:b3:d2:de:26:3c:d0:2c:
06:15:04:f7:14:7a:67:e1:b9:29:f2:80:85:0a:fa:
d9:80:46:4d:67:ca:22:4b:fc:ff:96:00:3d:bf:7c:
b4:f3:f2:8a:32:44:83:45:e3:ed:8b:bd:08:c0:15:
e3:6d:e5:0e:c1:a1:0f:a1:27:c7:65:ad:d0:00:5a:
ef:fe:66:43:10:03:b6:a3:7e:34:4c:fb:9a:8e:da:
e6:06:b5:19:84:77:3f:b8:d7:06:33:b7:88:2a:58:
90:33:39:a9:2b:1b:7d:70:c1:b9:a1:93:60:63:e4:
23:69:b7:d2:26:99:c1:a7:97:77:b7:96:7d:14:8b:
fa:68:72:ff:d0:1b:1b:8c:5d:bb:33:57:ec:83:ec:
2a:61:d1:dd:41:c5:8a:8f:71:ab:72:f3:92:91:1e:
a7:0b:30:01:34:46:f2:c1:df:a7:c9:19:40:1c:2e:
34:f2:2a:69:ab:ae:29:e4:8b:ff:3b:c8:ff:44:ed:
8c:d1:0b:17:60:43:61:e5:f6:84:8d:29:08:59:18:
97:3d:35:f6:27:40:d5:d4:86:70:df:7d:bc:13:36:
09:2e:e4:ce:39:d6:41:b5:4d:51:c9:9f:50:ef:28:
9e:80:fc:c2:f5:9a:be:10:65:4b:34:c7:e1:c1:03:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2D:B7:BA:EB:2C:EF:FF:9A:E9:7D:D1:81:D2:2D:20:53:7D:6C:A0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5i23uuss7_-a6X3RgdItIFN9bKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:42:8f:e7:cf:98:cd:f8:30:e2:2e:ec:4c:f5:02:cb:54:c1:
23:05:90:7b:99:c5:d5:57:a2:fe:38:a3:f3:8a:44:b1:ed:38:
10:8e:42:c4:9f:53:91:28:6d:61:4c:de:b4:0c:25:69:9a:5c:
d5:b4:27:b9:16:5d:51:d4:50:d0:ff:fe:dd:76:d4:24:e6:63:
57:d5:2a:67:1b:f6:e6:fe:cb:23:0d:d0:82:57:f5:d2:d1:7c:
9c:ea:4b:6b:21:3e:75:17:94:20:11:2a:a7:6d:9c:ee:7b:1c:
1b:69:1b:1a:01:25:62:e7:99:af:cb:89:24:62:25:19:cd:06:
04:02:42:5b:8d:2f:66:a4:ba:a9:4b:34:70:2d:e8:75:65:a0:
89:ae:d7:fb:9f:52:e4:a3:d0:3c:13:b0:af:72:70:b1:aa:e4:
94:cf:86:05:37:ea:b2:21:b8:d5:85:fa:49:cf:5c:03:d5:1a:
b7:f5:cf:47:6b:93:a2:46:d5:2f:80:34:2e:2e:11:af:13:69:
1e:ca:9e:7b:aa:a0:81:73:bf:d6:20:4f:35:16:7d:bf:6a:e5:
38:fc:d1:32:b8:d1:22:f2:5a:ad:99:6b:5b:fc:5d:52:00:67:
86:ba:ab:15:35:61:42:83:43:c0:9b:71:bd:e5:c3:61:e5:e7:
c4:ff:9d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:51:46 2025 by rpki-client