Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5rrfAu2_t0laP7t26ldzeIVHqEs.roa
File: 5rrfAu2_t0laP7t26ldzeIVHqEs.roa (raw, json)
Hash identifier: he4Q/+VgqFMXKy7lGxb83T7YcnxxJ5b1t9Pu+lsBJCs=
Subject key identifier: E6:BA:DF:02:ED:BF:B7:49:5A:3F:BB:76:EA:57:73:78:85:47:A8:4B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C78BD1300A6BABC3626999629E951D944
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5rrfAu2_t0laP7t26ldzeIVHqEs.roa
Signing time: Sun 17 Dec 2023 17:05:06 +0000
ROA not before: Sun 17 Dec 2023 17:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:78bc:4cbd/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:78:bd:13:00:a6:ba:bc:36:26:99:96:29:e9:51:d9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 17 17:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6badf02edbfb7495a3fbb76ea5773788547a84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:c7:52:06:e3:46:09:39:b1:dd:87:f0:95:
d9:f5:73:af:a1:f9:3c:0b:02:44:94:90:f5:f6:be:
d2:fc:07:53:c4:c6:60:93:56:d5:7c:87:ae:03:01:
5e:15:89:22:a2:59:3f:40:27:21:3a:59:30:96:52:
6b:25:b4:fa:96:f2:b8:aa:dd:bf:63:c8:43:ac:31:
48:e0:0a:0a:78:7a:22:a5:b6:77:32:c4:ab:47:07:
8d:6e:b7:f8:4c:c0:60:06:88:a8:5d:ad:47:cf:f1:
8f:b4:42:43:95:58:fa:9a:40:1e:be:f2:1a:f9:1f:
b4:c5:40:18:fc:e3:54:d2:05:69:5c:5a:02:d1:87:
c4:5a:ae:5a:52:77:4d:0e:51:2b:e5:9e:01:76:39:
a8:80:db:60:fa:3f:b6:a6:35:68:41:a9:7e:f0:2f:
0e:45:3e:0d:5d:22:64:19:bd:45:be:98:eb:8e:92:
8d:f1:a9:4d:0c:ff:7c:e6:91:0b:d7:53:95:e4:f3:
f7:0c:08:30:13:f3:84:5c:8f:53:b4:88:39:59:26:
04:27:e8:15:56:ff:95:23:d7:25:3d:c7:c4:d9:2b:
a0:01:6b:b0:4a:44:85:41:56:13:66:f8:50:fd:74:
b6:6c:a7:1e:f0:56:af:f7:d7:14:ea:21:92:88:e9:
fb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BA:DF:02:ED:BF:B7:49:5A:3F:BB:76:EA:57:73:78:85:47:A8:4B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5rrfAu2_t0laP7t26ldzeIVHqEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:8b:54:4b:8b:0a:ec:54:bf:70:f9:92:82:fe:c2:5e:60:cf:
1a:29:3a:1f:a7:3a:9a:1b:82:cf:5d:38:4f:20:c8:a5:69:8f:
a5:c3:4d:82:f3:66:ab:05:11:2e:0b:a3:5c:22:95:3f:79:57:
38:19:f8:9d:b6:06:22:12:ce:fb:85:5e:f2:1a:3f:74:d0:20:
70:78:2b:8e:31:91:88:5d:8e:7f:44:3f:43:6e:18:72:60:bd:
b0:24:48:4e:c2:63:ce:30:9e:e0:d3:36:df:31:66:75:5c:15:
4e:b0:36:71:b4:d8:7e:d2:05:a7:e3:37:4d:11:7c:f9:1b:51:
09:9d:9e:ec:37:9a:4f:41:77:6e:a5:6b:c5:55:95:c7:18:56:
3f:cd:15:0d:da:41:da:97:09:95:cd:72:cc:da:76:0d:d5:62:
b0:e6:2e:da:1b:8e:1f:1e:32:4a:de:73:54:c4:42:e6:59:e7:
1f:5e:a6:72:80:35:f0:a3:35:59:da:7a:d6:19:64:de:09:bb:
af:27:a5:19:0d:8e:81:5f:0c:2d:7c:27:aa:39:89:12:d5:30:
ff:1c:31:99:21:e9:ed:0d:84:c6:0b:f8:7e:d1:c8:a5:10:ee:
10:66:c8:78:f4:05:e9:38:9a:a5:92:53:14:b3:b5:bc:c2:2f:
52:e4:ec:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:38:42 2025 by rpki-client