Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HdEAAAKM_9kRNaY0_Vo0vupKRHU.roa
File: HdEAAAKM_9kRNaY0_Vo0vupKRHU.roa (raw, json)
Hash identifier: v0wETpqbH6WL30ldi+O7qnEJcoBKvZOf6xQNDi1Lzqw=
Subject key identifier: 1D:D1:00:00:02:8C:FF:D9:11:35:A6:34:FD:5A:34:BE:EA:4A:44:75
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5CE2F26BC50B7CC57206BF2332B3F044
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HdEAAAKM_9kRNaY0_Vo0vupKRHU.roa
Signing time: Tue 12 Dec 2023 07:17:06 +0000
ROA not before: Tue 12 Dec 2023 07:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5c:e2:f2:6b:c5:0b:7c:c5:72:06:bf:23:32:b3:f0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 07:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dd10000028cffd91135a634fd5a34beea4a4475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:50:2d:02:f7:77:f8:75:25:ea:7c:2a:eb:e9:
35:2e:30:21:d3:22:3d:95:dd:da:0c:de:a6:f3:51:
b5:8d:cd:db:ce:eb:b9:d1:28:b3:a7:0b:32:fb:4b:
b6:0d:3f:ad:84:16:da:81:67:da:04:6f:b3:06:34:
7b:10:dd:19:b2:6f:ba:0f:c9:21:64:07:0a:a5:e5:
fb:75:22:57:39:bb:e0:f5:23:26:ea:d7:ce:e7:a6:
d9:ca:67:51:72:2c:82:60:d4:7c:6a:e4:70:bb:a1:
fb:4d:4d:81:94:18:33:5b:eb:aa:f7:79:f6:98:f5:
87:48:1c:41:fe:24:a9:28:a3:09:98:46:97:d1:f4:
4c:9d:14:cb:44:2f:b6:a1:fe:58:2f:11:0c:0b:30:
9d:b2:3c:74:23:8d:cd:36:0d:c2:48:6a:f3:81:79:
88:3f:6d:4d:f5:20:a2:f8:bf:1f:58:b7:c6:05:f5:
48:c4:bb:21:2c:a6:64:f0:1c:c2:42:41:6b:47:30:
04:2d:da:cf:d9:9f:f4:8d:62:68:08:24:0d:76:b9:
ca:d3:db:2c:bf:c2:2a:49:74:f4:d9:9b:ba:ab:37:
ae:f8:56:1f:2b:3b:eb:08:17:d8:a1:d6:89:d5:c3:
68:3a:1b:26:8d:74:1c:f0:d6:be:16:66:44:7e:dd:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D1:00:00:02:8C:FF:D9:11:35:A6:34:FD:5A:34:BE:EA:4A:44:75
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HdEAAAKM_9kRNaY0_Vo0vupKRHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:fa:df:61:86:94:6c:84:12:e2:c4:27:19:d8:d9:9f:97:31:
9f:18:92:f3:11:18:de:da:ea:1d:d4:63:a1:bc:19:8c:40:75:
fd:3e:b7:d5:12:84:19:d1:21:fe:7a:55:21:2a:06:de:fd:12:
f6:d9:30:e9:e5:3a:6b:65:04:ff:bf:7e:3f:58:ae:10:47:ab:
6a:92:59:2c:2c:30:ff:ef:76:68:20:97:c1:99:8a:5f:4c:4a:
69:a6:e9:61:98:e7:e9:72:8e:f4:55:72:96:9a:03:d9:c8:78:
b3:f6:49:e8:a6:ad:be:91:12:39:8d:1e:b8:cb:bd:dd:86:92:
26:9a:46:62:9b:2d:c0:8f:51:de:0c:5d:62:c6:c8:38:89:b3:
45:1c:fb:d1:77:30:9e:19:ed:4a:2f:e6:37:7e:f5:9e:37:d2:
c8:ef:ba:13:cd:23:0f:99:5d:50:ce:38:be:ca:88:a6:68:9a:
d3:10:39:7b:0e:42:ae:7a:1d:f7:97:4f:fc:df:cd:86:92:39:
67:85:07:b1:e0:7e:9b:8f:22:2a:61:ec:7a:2c:4c:78:72:b3:
57:45:0e:b0:21:da:4b:14:9d:c5:86:be:3c:46:bd:7c:23:aa:
3b:2d:7a:4f:31:b0:08:24:c5:5f:5d:99:c3:9c:81:3d:f0:c3:
81:d6:9f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:24:59 2025 by rpki-client