Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HxmWHOAA6QEjvCuB8ePIf9CUCzE.roa
File: HxmWHOAA6QEjvCuB8ePIf9CUCzE.roa (raw, json)
Hash identifier: shX1zDVmgJ7YjmPY3/nZgK7RTHnbeOiwb3EFu64G1V4=
Subject key identifier: 1F:19:96:1C:E0:00:E9:01:23:BC:2B:81:F1:E3:C8:7F:D0:94:0B:31
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1D8B5D2F3D899D170D9D803D0B2D4256
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HxmWHOAA6QEjvCuB8ePIf9CUCzE.roa
Signing time: Thu 30 Nov 2023 00:05:21 +0000
ROA not before: Thu 30 Nov 2023 00:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:1d8a:91f1/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1d:8b:5d:2f:3d:89:9d:17:0d:9d:80:3d:0b:2d:42:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 00:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f19961ce000e90123bc2b81f1e3c87fd0940b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:4e:38:51:af:2d:6d:e3:cb:e3:d3:92:74:
a4:3d:56:37:3e:e4:22:fd:45:59:c3:80:24:29:67:
a5:2b:56:6f:22:16:45:2b:28:c0:e2:7c:02:a5:15:
79:c2:00:18:19:45:eb:b2:bb:ac:cc:44:ec:af:c4:
24:23:a1:d4:d4:ee:33:e1:5a:5c:9c:fa:53:2d:1c:
8f:f8:14:70:96:f5:da:11:bf:f3:8d:be:b3:73:ab:
89:db:6d:48:9c:68:ec:e7:31:f5:e7:5e:77:7b:5f:
08:87:6e:86:7a:ba:fc:54:34:2b:6a:c2:a5:ea:94:
1b:41:f3:cc:97:08:8e:2b:b3:02:71:6d:8a:c2:78:
83:1f:32:7a:68:07:66:ac:f7:db:87:84:69:59:c5:
2e:be:0c:6c:e8:46:03:48:3d:2d:14:29:cd:76:11:
68:be:4e:a3:36:7c:f5:ca:3c:63:11:4b:92:d7:d6:
0b:9b:5b:eb:da:18:33:45:33:eb:78:39:4e:10:19:
e8:7d:41:7c:e5:96:8d:b3:e8:3f:c9:bc:46:9b:ae:
a4:75:ca:fd:7a:c6:2f:8d:58:73:b8:cb:91:4c:85:
39:dd:09:0e:cb:5f:97:cd:49:b0:62:da:9b:4c:c3:
5e:5d:33:2c:1e:76:66:b6:86:66:4b:8e:9a:b9:6f:
77:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:19:96:1C:E0:00:E9:01:23:BC:2B:81:F1:E3:C8:7F:D0:94:0B:31
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HxmWHOAA6QEjvCuB8ePIf9CUCzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:97:48:9c:57:89:cb:31:99:f7:ff:65:4e:7c:99:a2:f4:d4:
48:64:a7:5d:dd:90:0a:22:1d:ae:30:9d:4f:25:f2:c3:41:71:
3f:66:34:04:18:3d:fc:54:c1:1c:f9:cf:f1:b5:77:98:21:d7:
1e:66:50:a3:33:50:9f:91:f1:b4:4f:03:ac:65:f7:28:37:02:
68:46:e9:80:0c:d6:df:ad:fb:5a:5d:4c:ef:75:17:51:b0:1d:
ee:3b:ce:d3:2d:bf:a7:89:d3:aa:49:2c:44:c8:ac:cf:b6:a1:
9c:73:9c:39:0c:c3:0f:0d:cb:8e:8d:42:9b:ee:17:d2:10:b5:
a3:fa:db:fa:43:06:36:d1:3e:8c:3d:eb:b1:fb:eb:85:46:82:
0e:66:c1:ab:19:e4:38:f0:38:42:8c:e9:7e:72:46:99:45:73:
8a:98:9c:0b:61:90:92:a4:62:5f:ad:49:dc:b6:45:71:2d:e9:
42:7e:6f:5a:2d:06:f4:97:f0:d1:1d:ac:4e:24:f5:64:52:4b:
92:ea:2d:03:03:92:1a:9c:b2:e5:58:24:35:f9:34:9a:0d:54:
66:b9:fe:21:21:ae:7f:40:38:5f:c5:d0:a8:45:92:38:44:a0:
16:df:13:cd:c4:c6:a6:10:91:3b:c1:da:41:e8:45:eb:b0:97:
18:a7:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:07:12 2025 by rpki-client