Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HgLBTHDTDoPf88SrmHH75IfOx9Y.roa
File: HgLBTHDTDoPf88SrmHH75IfOx9Y.roa (raw, json)
Hash identifier: /dydfbhNoKeOY+eIFZX1UZExm4Jfj+LFV26VbeHukwQ=
Subject key identifier: 1E:02:C1:4C:70:D3:0E:83:DF:F3:C4:AB:98:71:FB:E4:87:CE:C7:D6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B284E8334FA0876D9B64EAC9E6EAD73A4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HgLBTHDTDoPf88SrmHH75IfOx9Y.roa
Signing time: Fri 13 Oct 2023 09:11:55 +0000
ROA not before: Fri 13 Oct 2023 09:11:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:4e:83:34:fa:08:76:d9:b6:4e:ac:9e:6e:ad:73:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 09:11:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e02c14c70d30e83dff3c4ab9871fbe487cec7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:86:1f:a3:7c:89:0f:18:b4:50:cc:fd:ef:73:
02:cf:4b:25:14:c9:6f:e7:4c:2c:55:d7:3e:95:1b:
dc:6d:9a:82:75:75:be:b4:b1:d2:77:54:06:0d:7b:
26:df:4a:68:31:1d:76:4f:25:ff:ca:89:58:ae:8c:
be:38:aa:57:6b:4c:8c:46:ac:bd:a0:4e:7b:11:99:
b0:1e:8a:77:19:4e:db:83:b8:16:c2:7a:d9:e2:50:
59:67:dc:62:d6:5e:42:9e:e6:69:67:79:a3:cc:34:
95:d9:aa:34:4e:1f:8f:e0:c6:be:86:1a:5c:57:93:
97:d3:6c:13:07:4f:52:3a:01:9b:d4:fe:5e:10:47:
16:7e:01:5c:79:92:0a:ab:19:1a:f6:6a:0e:50:7f:
70:41:ab:e1:ca:f8:17:4d:99:29:f7:7c:ef:05:bd:
7e:f8:b2:7a:77:6c:cb:a5:38:f2:36:8b:ac:26:8b:
78:a5:5b:13:9f:ca:f4:f0:ba:2f:62:77:04:67:3e:
8f:07:12:06:55:42:33:45:ec:50:19:1c:a3:a0:d0:
8a:9a:dc:1c:80:93:ca:e5:a8:d6:a0:1c:fc:75:ee:
48:66:8d:3f:82:3e:21:52:09:b1:72:47:fc:19:eb:
da:d6:62:34:73:09:85:c2:17:3f:b5:11:f1:6b:ea:
fa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:02:C1:4C:70:D3:0E:83:DF:F3:C4:AB:98:71:FB:E4:87:CE:C7:D6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HgLBTHDTDoPf88SrmHH75IfOx9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:75:c5:a2:86:97:fa:98:b6:1e:5b:1b:db:28:27:bb:37:b6:
38:87:e5:11:f5:19:90:74:84:38:87:74:07:a2:48:b5:9f:43:
d9:81:69:29:6a:3b:7c:35:e0:fe:e6:9e:4c:ff:53:ac:a2:da:
03:f5:8c:09:b8:ec:33:39:da:9c:cd:c9:13:c2:65:db:42:5c:
4c:86:49:cc:99:01:b2:ce:8e:19:25:ed:81:6e:d4:0f:53:b5:
5b:49:0a:d8:2c:c6:c8:a3:6d:0c:81:23:37:3d:88:aa:dc:c0:
9f:b7:ea:46:bd:e3:35:47:83:d0:a9:95:01:f1:ef:1b:b7:c0:
9f:84:62:2c:d1:5b:59:9b:d7:f6:ca:06:55:a1:eb:f0:ab:6d:
4c:da:49:81:99:a1:d6:85:9a:74:cc:a5:c3:29:64:bc:92:3f:
70:b3:82:90:83:45:28:e5:fb:c2:bb:0a:ac:0e:d6:84:7f:e4:
6b:35:41:b4:ee:9a:74:be:9f:b3:e1:2f:a3:b8:01:03:0f:f9:
6a:92:ca:cd:98:29:ce:5b:e7:ea:4b:5c:64:2c:3f:d3:41:56:
49:aa:b6:67:d9:61:94:e5:e2:49:fb:f3:8e:44:c1:ea:f9:7a:
e3:a3:33:e6:67:c4:24:09:7e:30:b8:a0:4b:d8:15:8a:75:a8:
27:bd:d2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:11:05 2025 by rpki-client