Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5uQKpzVxwJ9_zwm5dnbl6jbBeKU.roa
File: 5uQKpzVxwJ9_zwm5dnbl6jbBeKU.roa (raw, json)
Hash identifier: rMQXink4XOa9y9/6/BpTHEIZlhTZUjpMf1fdnxu6+co=
Subject key identifier: E6:E4:0A:A7:35:71:C0:9F:7F:CF:09:B9:76:76:E5:EA:36:C1:78:A5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE85EE23D9BEFCE1077CC06B6DD0966B2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5uQKpzVxwJ9_zwm5dnbl6jbBeKU.roa
Signing time: Sun 19 Nov 2023 16:16:54 +0000
ROA not before: Sun 19 Nov 2023 16:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e8:5e:e2:3d:9b:ef:ce:10:77:cc:06:b6:dd:09:66:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 16:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6e40aa73571c09f7fcf09b97676e5ea36c178a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:84:5a:bc:57:26:cb:ed:53:04:cc:2c:23:
eb:5f:7c:aa:f6:93:bd:3a:99:61:55:c8:75:aa:f4:
82:c9:c3:1e:05:ee:fe:5d:9a:13:c2:38:f8:2d:b6:
e7:b4:58:90:c5:7f:0c:69:cc:8d:0e:cb:58:8c:25:
f8:34:ae:25:f3:11:5a:3c:d6:1e:49:4f:75:de:5f:
a7:72:be:a6:53:f4:6f:26:e2:b1:af:9d:d6:c2:1f:
ff:7a:dc:c2:8e:b0:2f:68:ba:d7:b4:38:3d:27:e6:
c0:cd:d7:a7:5d:67:31:c4:aa:92:50:a5:cd:7f:ad:
4d:9d:95:72:eb:6c:3c:c0:0c:3c:5c:7e:31:b8:95:
b5:f8:f4:4c:d0:35:83:c9:c8:b3:c7:33:3e:1c:77:
e1:87:f8:0e:16:3d:7a:a6:24:07:5f:59:4b:74:21:
af:c5:6d:01:ba:86:f7:fc:4f:9a:07:f0:a4:ac:64:
28:03:00:56:ad:d2:b6:70:f4:37:ee:91:e3:26:6b:
64:70:95:2b:19:06:ec:b9:29:00:67:00:aa:28:b6:
b9:9d:d7:d9:a3:59:2f:57:11:93:cb:7c:5b:d6:42:
94:24:cd:c7:77:e3:8a:99:f1:53:b7:7d:ac:ec:5c:
c3:d3:93:ef:78:cf:eb:c6:f4:5e:79:5c:ec:95:04:
84:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E4:0A:A7:35:71:C0:9F:7F:CF:09:B9:76:76:E5:EA:36:C1:78:A5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5uQKpzVxwJ9_zwm5dnbl6jbBeKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:26:0d:f0:d8:d5:1e:0b:87:ab:90:4f:02:5f:83:f7:3a:48:
7e:0b:f0:d6:a8:a6:91:1d:6d:cb:ad:93:0d:d0:10:de:28:96:
0e:e6:64:89:66:89:61:64:cd:02:64:f0:7d:72:1c:1f:c8:ce:
16:52:0f:ba:94:62:aa:6c:0b:18:9c:53:89:aa:e3:16:cd:70:
f2:92:55:69:f2:cc:3c:5e:83:4a:39:90:dd:3e:c8:b6:d1:bb:
0f:63:bd:5c:47:d7:9a:56:da:53:c4:af:00:ef:58:c4:c1:1c:
3e:05:ae:e3:91:df:89:da:0e:0e:f6:2a:d9:2b:fc:86:f8:b0:
43:ee:4c:9d:4e:b4:3d:a0:2d:08:8b:65:97:89:5f:52:56:98:
17:20:57:72:0f:5c:fc:73:76:84:98:6c:bc:f9:d9:b4:00:ca:
9b:47:33:42:aa:69:45:c7:34:a2:c1:a2:af:0f:63:ef:33:d7:
c4:95:66:7e:2d:66:9a:dd:56:5d:a3:88:1b:59:f7:18:ac:e3:
13:bf:75:7e:ea:ea:63:ee:b5:e6:ab:86:fd:b6:21:51:b5:49:
71:44:1d:33:be:20:d8:67:44:d8:da:5f:eb:65:d1:5c:aa:a0:
38:ea:13:4d:18:bd:84:b1:3e:2b:42:09:76:67:3e:62:56:4e:
0b:7c:0c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:21 2025 by rpki-client