Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HYtCeVFqJlvVG-kk2PJsdW-It_c.roa
File: HYtCeVFqJlvVG-kk2PJsdW-It_c.roa (raw, json)
Hash identifier: +Ip0y1CLAvbtXEmihQJvHQIniX689WrzPt6GL2/+S3M=
Subject key identifier: 1D:8B:42:79:51:6A:26:5B:D5:1B:E9:24:D8:F2:6C:75:6F:88:B7:F7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C20CC7DFECA05FBFA8F873B6907A046A7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HYtCeVFqJlvVG-kk2PJsdW-It_c.roa
Signing time: Thu 30 Nov 2023 15:15:21 +0000
ROA not before: Thu 30 Nov 2023 15:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:cc:7d:fe:ca:05:fb:fa:8f:87:3b:69:07:a0:46:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 15:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d8b4279516a265bd51be924d8f26c756f88b7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8e:cd:95:e3:0a:69:43:e8:9d:75:28:d5:3d:
7a:57:60:50:43:23:b7:b9:26:1b:45:0c:1c:0f:29:
38:6c:3b:ee:87:20:6d:34:94:82:ea:0f:15:a9:2c:
91:12:26:b4:da:4c:6b:db:61:fe:6d:05:9c:9c:9d:
1b:78:95:44:b5:f7:28:30:24:64:20:8d:cf:92:77:
cf:34:dc:08:ab:ae:3e:d7:0b:37:13:fd:c3:d9:7e:
68:11:f8:b2:0c:96:c7:bf:06:2a:53:d5:2f:4f:13:
49:45:da:39:f1:bf:12:62:81:61:e0:91:ee:5b:0e:
14:24:08:da:e9:be:00:16:5d:55:51:93:26:e7:4e:
bc:5f:8f:6c:56:62:cb:53:e6:f1:7a:bb:87:d1:43:
b6:df:c2:aa:47:9d:b0:ae:6a:29:f2:ae:bf:4d:c2:
aa:41:6b:aa:e5:49:2d:36:d1:57:36:71:2c:aa:36:
8b:d5:b4:9f:42:6c:9b:25:5c:76:22:b1:2e:c4:c5:
ea:65:db:c8:e0:30:3e:ed:cb:53:0a:36:5b:11:bb:
42:7d:08:ad:31:6b:88:f8:cd:de:47:d1:28:ee:0f:
4f:2d:a6:15:0a:a6:be:75:fb:fd:3b:26:6c:3f:57:
e3:27:d7:4c:c6:f3:f5:12:de:cb:65:c5:69:76:fd:
70:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8B:42:79:51:6A:26:5B:D5:1B:E9:24:D8:F2:6C:75:6F:88:B7:F7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HYtCeVFqJlvVG-kk2PJsdW-It_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c8:1d:51:eb:06:fd:7b:87:74:21:cd:70:b1:7b:b3:86:74:c8:
26:f5:d4:5b:88:d8:fa:88:ae:d9:c3:23:9a:13:20:20:e0:a5:
9d:0d:24:84:8b:77:0a:0c:8d:ba:20:82:9f:33:40:2f:95:97:
ae:2f:1c:67:d7:6b:a3:aa:3e:67:42:d2:51:7c:c7:a0:f8:d8:
9f:21:45:45:9a:33:24:d8:1c:7e:b7:ee:ef:ec:09:c0:2e:ed:
08:d2:6c:22:9d:f6:b0:d9:a7:c8:a1:44:3b:c5:41:b0:5e:13:
17:f7:4e:f7:e5:61:b3:98:27:84:bc:b3:b7:f6:24:31:f3:30:
ef:46:d5:af:39:2f:dc:cc:44:a1:dd:bb:4d:38:75:9d:ad:d4:
62:be:d1:b2:65:2f:91:cb:04:d1:a8:43:f0:16:3f:96:db:76:
72:80:57:79:e4:b8:5d:10:0c:2e:01:f7:b1:7a:80:21:61:99:
5b:0c:97:bf:6f:6d:45:7d:02:cb:b7:fb:50:91:ec:58:1e:c4:
08:2c:9b:90:ba:da:d1:b1:ce:49:4a:2c:6e:f9:ac:0a:e0:00:
62:c6:90:e3:c9:84:ee:a1:49:37:98:d5:2c:66:f5:c0:7e:c3:
00:cc:6c:62:53:a7:68:7b:3c:6c:db:0b:30:74:9f:2a:48:f3:
14:42:84:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:21:06 2025 by rpki-client