Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K0hQC5DpqEylfvgiHVb1XZw_eXI.roa
File: K0hQC5DpqEylfvgiHVb1XZw_eXI.roa (raw, json)
Hash identifier: ingjemBl5BL6rdf9WUEvjihBkknpHCZ/TPZyJ3hufjQ=
Subject key identifier: 2B:48:50:0B:90:E9:A8:4C:A5:7E:F8:22:1D:56:F5:5D:9C:3F:79:72
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD08807B50266A5A6274548B18965129A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K0hQC5DpqEylfvgiHVb1XZw_eXI.roa
Signing time: Wed 15 Nov 2023 01:10:57 +0000
ROA not before: Wed 15 Nov 2023 01:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d0:88:07:b5:02:66:a5:a6:27:45:48:b1:89:65:12:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 01:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b48500b90e9a84ca57ef8221d56f55d9c3f7972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:fa:58:34:0d:78:ac:cb:88:fd:19:10:4b:
d1:bd:27:1a:18:95:cb:b0:fe:c1:ae:dc:ba:6d:70:
1c:ec:4a:1a:2a:ed:d1:32:26:e7:11:d5:72:3e:32:
3f:78:72:73:c6:e1:3e:24:4d:8d:4c:5f:db:7a:23:
bc:88:ad:f7:8c:c7:7e:25:6e:4f:db:2f:4d:6a:9a:
9e:4a:93:a0:e8:ce:3d:88:40:7c:31:5f:00:7c:c2:
73:48:18:77:92:76:4d:34:84:34:00:78:a2:0e:b5:
21:a1:b0:fd:18:a1:59:35:d1:7f:6d:34:38:3f:49:
96:99:ed:49:9c:85:26:b5:fe:17:c7:36:c3:dc:2a:
0d:fa:51:d3:7e:d2:a9:60:85:7b:20:2c:db:13:e4:
a4:ec:05:47:c3:5f:2c:6a:a3:54:32:40:e4:a3:c9:
81:93:4e:34:87:20:e7:20:15:09:37:07:f2:0f:36:
08:5c:fd:90:84:12:74:f3:30:6b:13:b2:f1:6b:1f:
f6:46:dd:be:c2:68:b8:35:4f:c5:6c:d7:02:d5:d9:
a3:5c:8c:3d:dd:31:41:65:86:9d:16:df:8f:85:06:
e5:d6:e9:c4:ce:66:ee:02:97:91:41:b4:96:db:05:
37:b4:3b:a6:92:ef:79:c2:23:f5:b9:28:72:79:76:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:48:50:0B:90:E9:A8:4C:A5:7E:F8:22:1D:56:F5:5D:9C:3F:79:72
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K0hQC5DpqEylfvgiHVb1XZw_eXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:f5:a1:db:f5:6a:a7:9f:08:85:58:ea:e1:d7:eb:5c:cd:7a:
95:22:34:27:86:27:d1:eb:c3:ff:70:38:c9:64:c4:ec:65:3f:
9a:59:47:c7:92:35:83:d2:da:9b:da:1e:82:9f:47:85:0c:35:
c0:d4:c1:6e:ce:0e:85:50:5a:8a:4f:c1:90:5e:2f:53:7f:79:
b4:97:e5:2c:96:58:f7:d1:45:55:b8:bb:8b:5c:64:7f:32:46:
23:4d:61:66:06:8e:8c:09:06:e1:97:d2:59:1d:3b:54:05:28:
9f:99:30:c7:31:1d:94:34:83:99:14:d6:58:a5:b1:41:0b:7b:
09:c5:bc:e5:7e:79:29:67:5b:0c:33:1a:6f:12:37:08:bb:fe:
a4:91:17:44:b8:e4:ab:cc:0f:c6:1c:24:82:c5:84:45:bc:56:
63:ee:13:5d:b5:28:a8:ae:53:43:cd:90:a0:4f:e6:0d:e0:8d:
ac:b1:45:b0:c9:4d:ce:90:b6:f0:aa:99:b7:f6:1a:42:be:55:
ea:0b:fd:2e:99:58:1e:b3:1f:14:3f:7c:bc:b1:70:67:bf:9a:
18:2c:7a:c7:3f:e6:44:e7:14:47:24:5f:39:b8:d1:5d:09:a4:
c5:14:c0:e8:20:ea:0f:d2:97:89:ce:0f:09:c9:8f:4f:ad:84:
44:b9:f0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:47:10 2025 by rpki-client