Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HwXb_pBYY3Qph8iBoKZ4_3L81Gk.roa
File: HwXb_pBYY3Qph8iBoKZ4_3L81Gk.roa (raw, json)
Hash identifier: QjZ5Q4FlwXo9GwnixTG9kZxcoBhOaies7+rLlbfgi0o=
Subject key identifier: 1F:05:DB:FE:90:58:63:74:29:87:C8:81:A0:A6:78:FF:72:FC:D4:69
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B19F6A818CA13E60EFF0795F3205B49E5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HwXb_pBYY3Qph8iBoKZ4_3L81Gk.roa
Signing time: Tue 10 Oct 2023 14:21:17 +0000
ROA not before: Tue 10 Oct 2023 14:21:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:f6:a8:18:ca:13:e6:0e:ff:07:95:f3:20:5b:49:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 14:21:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f05dbfe905863742987c881a0a678ff72fcd469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:d5:1d:34:c1:4e:2e:b6:15:7f:92:47:cd:
46:23:af:67:3b:5d:1f:a3:07:1c:1a:a6:55:76:d1:
3e:b9:8b:e2:3b:ca:c9:3f:f0:c0:97:42:77:d4:d8:
09:af:fd:1e:6c:26:11:cd:e4:5d:c9:6c:38:cf:7f:
75:e4:51:dd:54:59:15:43:9e:5d:e8:ca:66:75:8d:
df:2b:e9:0f:48:87:83:a1:38:b4:69:9d:f4:f2:47:
e3:f1:73:f2:1a:d4:1f:d1:6c:2d:73:56:80:a3:67:
c1:27:f4:d9:a3:2d:5c:a9:a5:8b:ca:98:6c:71:61:
19:70:cb:69:e1:9b:4b:b4:a7:08:b6:57:37:86:4c:
a7:80:f4:37:38:47:23:18:fe:dd:6d:ff:84:1c:e3:
a7:77:aa:82:18:ae:51:ae:b4:01:94:56:ab:e1:5e:
98:ab:3f:a9:ae:c0:c1:ea:58:c3:00:7a:5b:5a:99:
f5:2a:ba:5d:44:70:cf:9f:0a:6a:f0:6c:65:3a:a7:
bc:93:39:d8:a1:c6:4c:98:55:b3:56:2d:b8:0a:4e:
36:70:2c:12:87:0e:66:8f:02:86:af:5c:06:bd:2e:
0e:1c:48:03:b6:d1:3c:30:cc:98:8f:4a:33:c9:eb:
55:64:2f:be:ec:38:c0:e3:29:91:0b:73:94:12:70:
7b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:05:DB:FE:90:58:63:74:29:87:C8:81:A0:A6:78:FF:72:FC:D4:69
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HwXb_pBYY3Qph8iBoKZ4_3L81Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:3b:82:73:66:e4:5e:82:fe:8c:44:00:44:cb:87:a6:54:a7:
21:29:02:2f:1c:98:23:e7:31:79:35:d0:6d:01:63:62:41:32:
17:99:8e:a5:56:f8:2e:e6:04:e7:67:77:63:47:c2:29:d2:53:
27:4d:97:84:36:fd:51:7b:a6:9e:08:de:c9:5f:9e:4b:6c:71:
72:8f:9b:63:7d:56:26:4e:d8:54:af:60:0f:b8:a6:33:c9:f4:
6d:8f:7c:b2:eb:ef:f6:06:df:0e:70:b8:5e:26:e9:8c:49:0e:
dc:77:7f:f9:0e:59:e2:64:24:6e:f7:3c:14:23:31:2d:aa:16:
59:6a:7e:dc:c3:68:87:dd:e4:69:47:e1:63:92:50:a9:6c:69:
75:5b:09:dc:b0:bf:a7:0b:bb:bb:5c:1b:6a:86:53:69:31:9f:
ea:1f:71:58:45:29:40:38:9f:94:c3:ac:dc:23:70:42:f2:63:
18:8e:a7:eb:e8:94:0b:ce:d1:bb:fa:70:b2:12:47:b8:8e:eb:
b8:e1:51:6d:20:5e:a4:30:bd:0c:72:21:6d:95:d5:a2:d7:05:
86:16:6c:19:ec:d4:3b:26:80:da:ee:99:01:0f:b8:ab:cf:4e:
15:f0:0f:9e:9b:ce:5c:69:5b:db:bd:35:05:b7:e4:8c:37:ed:
93:67:e7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:55:46 2025 by rpki-client