Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HP9cThBcnndXWl3I40BxhSH42vE.roa
File: HP9cThBcnndXWl3I40BxhSH42vE.roa (raw, json)
Hash identifier: 2nTZMNziVB7u0+8GxuQrDY+PswHvB+kRnJYINb5nJS0=
Subject key identifier: 1C:FF:5C:4E:10:5C:9E:77:57:5A:5D:C8:E3:40:71:85:21:F8:DA:F1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2A367BE90CCFC6FF99129BFA9ACBCB55
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HP9cThBcnndXWl3I40BxhSH42vE.roa
Signing time: Fri 13 Oct 2023 18:04:55 +0000
ROA not before: Fri 13 Oct 2023 18:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:2a35:d4d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2a:36:7b:e9:0c:cf:c6:ff:99:12:9b:fa:9a:cb:cb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 18:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cff5c4e105c9e77575a5dc8e340718521f8daf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:61:15:9d:c2:93:72:e3:55:62:4c:6d:50:
83:6f:73:ec:d4:88:08:2a:13:53:1f:91:25:ec:3f:
b1:15:e3:58:47:e4:c3:eb:2d:50:29:6a:75:be:e0:
a3:d2:06:82:6e:df:de:be:fa:37:f5:ae:fd:59:22:
c4:cc:42:56:7f:62:68:c2:33:b9:07:eb:a3:c1:f8:
50:3f:64:ea:fd:5a:cf:4b:6d:40:6a:3a:74:fe:73:
df:4d:f1:a7:46:6f:e7:61:a5:ee:4a:f1:82:ca:66:
63:b9:50:3c:4a:ef:0d:a7:c5:38:18:97:32:30:ae:
92:7e:a3:93:68:62:3f:64:66:a1:46:df:d3:e9:b4:
86:2a:f7:9b:18:b0:41:c3:90:5a:0c:82:e3:df:1b:
f0:e3:7c:87:43:48:5f:e4:35:96:4f:b2:b3:09:b0:
66:fd:8f:f3:ba:d5:03:4c:6c:6f:c6:db:54:a9:17:
de:e2:54:25:fe:cd:d0:2a:04:50:97:a9:8b:e7:c6:
8b:1f:f6:f2:7e:71:a4:04:0c:e9:11:e6:57:d8:b0:
cf:d6:8b:bd:ce:1d:85:d2:c9:bf:00:78:34:ac:ef:
45:3e:1b:42:15:dd:7e:5e:30:5f:8a:29:04:92:82:
e0:64:60:ec:10:c3:ec:64:a7:f7:2d:c3:6e:e2:08:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FF:5C:4E:10:5C:9E:77:57:5A:5D:C8:E3:40:71:85:21:F8:DA:F1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HP9cThBcnndXWl3I40BxhSH42vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:38:0d:74:21:bc:fe:d5:45:21:49:7d:76:d8:6f:45:08:39:
bc:ff:9d:09:80:06:b1:e0:22:ff:a3:40:06:85:98:2b:ce:04:
6b:36:0c:9f:49:a3:22:f2:c7:6d:fa:62:ea:d3:e8:7d:1c:fa:
79:79:5a:3a:d1:35:d1:47:67:0c:a1:9c:b6:67:b6:96:fe:37:
32:bf:67:a6:79:31:59:74:90:f0:98:22:71:8d:4c:6f:23:62:
a7:94:1e:4a:4d:c4:2c:7f:0c:3c:16:99:c0:eb:8a:f4:d2:21:
62:6e:03:fd:39:e6:14:00:9b:03:81:b3:38:b9:c9:cd:67:0e:
bc:00:de:c2:12:13:af:81:f0:d9:31:dc:ce:0c:9b:46:d5:95:
6d:0f:07:d4:81:fe:98:9d:0c:2e:db:2e:06:e4:6c:fd:29:90:
b1:9d:72:3d:90:be:63:7d:96:75:04:5b:93:31:5b:e7:77:88:
af:51:c7:90:3d:fe:f4:54:c3:87:21:95:5e:1b:1f:0b:e3:47:
f6:84:23:7a:c9:ea:54:26:90:e9:b3:f0:17:d3:2c:8f:37:9d:
c1:fa:30:49:b2:24:65:ae:cd:7c:9d:d5:53:13:53:17:41:fe:
88:18:23:dc:09:2e:73:0d:84:29:36:6e:d1:8c:b9:16:92:df:
27:b6:17:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:52:10 2025 by rpki-client