Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/H0_7_s2rCGYO5_UVMLqsUXoJZK0.roa
File: H0_7_s2rCGYO5_UVMLqsUXoJZK0.roa (raw, json)
Hash identifier: vf/2bYCtfFleIibQY6XKHgdL+A2gGjViMFDjx/vZ+w0=
Subject key identifier: 1F:4F:FB:FE:CD:AB:08:66:0E:E7:F5:15:30:BA:AC:51:7A:09:64:AD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BEA83F24DA54139AD107E55769BDE98D4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/H0_7_s2rCGYO5_UVMLqsUXoJZK0.roa
Signing time: Mon 20 Nov 2023 02:16:37 +0000
ROA not before: Mon 20 Nov 2023 02:16:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ea:83:f2:4d:a5:41:39:ad:10:7e:55:76:9b:de:98:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 20 02:16:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f4ffbfecdab08660ee7f51530baac517a0964ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:2c:34:4b:54:c0:4a:bd:31:ae:b6:7c:a3:
c2:f9:04:e0:9d:44:33:c7:99:71:f8:b7:7e:0f:76:
76:63:31:88:a5:b7:db:36:ca:95:96:df:9e:6e:9c:
ba:f2:a2:c5:fc:9c:a1:f2:40:22:97:25:26:00:3d:
a9:b4:47:dd:60:c0:78:7b:f5:2e:a3:2a:ac:d5:0f:
ce:74:ba:64:21:38:42:3d:b2:5a:d2:7b:c9:16:76:
45:a9:38:6e:4e:e3:d8:a4:88:91:9c:cc:3b:e6:55:
b3:8d:5f:47:12:6a:1a:9f:ab:93:2b:06:a9:24:4d:
87:ae:e0:18:c3:e5:a2:89:e1:06:81:1d:1f:37:3c:
14:96:69:00:77:50:9c:c7:6e:8f:cb:e5:73:a3:b6:
fb:26:8e:37:43:f0:0b:e8:7b:64:70:5c:4f:8d:0a:
27:2d:2b:e2:3f:e2:81:09:cb:99:9c:85:50:d8:19:
c4:3d:de:0a:25:40:69:dc:e3:ed:ac:2a:9c:06:09:
95:e7:42:ab:bd:13:d4:fe:48:87:42:8f:83:26:47:
45:2c:e4:e7:dc:4c:15:60:5b:ff:55:a2:a9:e4:34:
af:f8:b6:89:62:e1:01:25:4f:ea:06:c2:2b:9b:96:
08:db:76:af:d4:bd:21:7f:bf:3a:9f:3e:ae:47:16:
35:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4F:FB:FE:CD:AB:08:66:0E:E7:F5:15:30:BA:AC:51:7A:09:64:AD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/H0_7_s2rCGYO5_UVMLqsUXoJZK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:f4:4d:17:b3:90:d9:12:b4:3b:89:bf:1f:b8:39:d7:9f:3f:
d5:8c:6a:a6:54:d4:2d:e6:d6:03:69:a6:0e:4e:6e:d7:b1:8a:
83:23:18:7b:d3:18:8b:1d:f7:5e:f6:7e:3f:05:60:fc:24:8d:
12:f2:33:4f:81:be:26:c4:d5:e4:1b:1c:a9:f9:c7:b1:a7:36:
ad:46:51:02:2b:13:5f:3a:e9:62:a6:78:58:00:38:2c:95:b8:
3a:f2:b0:1e:51:74:a4:12:39:e4:15:a9:d1:07:25:22:da:2c:
d2:73:1a:56:b3:b9:ea:d5:2e:48:26:c2:a3:c6:7e:96:c2:23:
4b:46:33:c1:d6:da:13:a8:30:19:eb:c3:f6:fc:f0:09:9c:5f:
94:64:bf:1c:27:78:d0:a4:cc:64:75:87:b9:a9:f4:dc:19:55:
31:8d:b4:5f:77:d1:07:9b:04:d3:d4:56:6a:c4:ff:37:eb:be:
38:f4:85:04:6a:bd:9b:c2:4c:82:71:b5:c5:6e:29:fa:ec:f7:
d9:08:33:4d:38:35:e6:3f:b9:10:04:10:21:f7:f3:6a:36:ad:
5a:b8:c1:3d:5a:a4:6c:bf:0c:6b:80:97:2d:2f:b7:c2:b0:7a:
3b:c4:31:8d:15:37:f3:66:99:ea:c9:53:f4:c2:ca:71:ea:ed:
84:65:10:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:39 2025 by rpki-client