Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/X4GpUj94ztpaVZ864W88M9cRFlc.roa
File: X4GpUj94ztpaVZ864W88M9cRFlc.roa (raw, json)
Hash identifier: Q1jaAVQq0N+NoD/FYIZZdcGw3TlpD+eNYQwrfVQfSMg=
Subject key identifier: 5F:81:A9:52:3F:78:CE:DA:5A:55:9F:3A:E1:6F:3C:33:D7:11:16:57
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C55CBFCDA45A28B4A7DF528796469F6C7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/X4GpUj94ztpaVZ864W88M9cRFlc.roa
Signing time: Sun 10 Dec 2023 22:14:40 +0000
ROA not before: Sun 10 Dec 2023 22:14:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:55:cb:fc:da:45:a2:8b:4a:7d:f5:28:79:64:69:f6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 22:14:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f81a9523f78ceda5a559f3ae16f3c33d7111657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:7c:a4:b2:27:2a:52:d9:62:76:b9:49:24:
51:56:e8:06:fe:4b:c1:46:32:29:25:cc:c9:13:05:
50:c8:87:9c:57:d2:8a:de:f3:af:74:24:dc:47:96:
79:d1:4f:f8:eb:b3:21:50:54:0f:c9:1d:e5:50:98:
da:dc:ec:e7:10:b1:24:f7:41:91:5b:5d:75:e7:33:
d2:b8:de:03:88:1a:2f:17:71:0a:56:cb:60:c2:ef:
2f:35:51:c1:f4:eb:ba:7f:be:a6:70:b5:52:4b:06:
cb:61:1e:b2:43:ea:c0:cb:7e:a9:cb:d6:9c:e3:d5:
45:ae:17:f5:cf:95:02:60:27:18:b1:3c:ba:8c:e1:
5b:8a:a2:6a:d1:84:89:8c:e7:f1:0b:49:58:7d:21:
51:a1:f3:a3:e1:a1:93:09:c0:95:e0:d4:4b:74:e3:
34:bf:a3:10:1c:bf:4d:2a:aa:94:8b:ab:9d:7d:b5:
d4:d3:8a:ba:ae:b9:5d:6c:58:a9:42:ac:b5:88:c9:
38:08:37:f2:ee:90:ea:74:c7:49:a2:41:1f:19:7a:
3e:7e:86:68:8f:58:f7:d4:af:66:63:d3:77:6c:fa:
42:2a:a2:d8:9e:40:f6:94:0a:91:d9:9a:fb:47:3b:
84:d4:9f:f8:8e:52:54:9f:0d:cd:b8:20:2c:d5:50:
4d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:81:A9:52:3F:78:CE:DA:5A:55:9F:3A:E1:6F:3C:33:D7:11:16:57
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/X4GpUj94ztpaVZ864W88M9cRFlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:15:05:42:e9:1d:b9:59:1b:7f:f5:1b:6c:e0:97:e3:5b:c9:
e3:87:3b:6d:d0:0c:39:bc:55:63:42:d8:52:0f:ad:10:eb:ef:
48:1d:93:62:11:48:b7:72:12:56:47:41:bf:51:af:17:57:23:
fc:61:c8:85:1a:c5:f6:80:a2:31:98:e9:78:03:94:57:3a:94:
69:79:2e:94:d8:92:e8:86:02:f7:3f:34:c7:e5:e3:d9:1a:be:
0f:2d:5d:46:4b:ca:5d:af:44:7b:ff:61:79:f8:b6:5d:0c:7f:
f9:fd:91:ac:a6:b7:c3:ee:51:1d:9a:53:d6:5a:4b:20:9a:bc:
82:f1:05:85:d1:28:45:a4:fe:6f:de:7d:dc:ef:e0:a1:6f:d8:
5c:1d:1a:3e:11:31:ad:0a:43:8a:84:39:6a:53:28:11:97:a3:
d4:9f:cd:be:5f:a5:ed:2d:14:b0:e7:fa:0b:71:59:3c:1d:24:
34:79:2c:77:e7:9f:62:4a:34:cc:a0:4d:f6:24:0f:dc:a9:93:
23:7f:69:ec:75:6a:5f:17:49:65:8e:33:ea:2f:28:af:2d:e5:
b9:58:3d:80:7f:c6:30:55:59:d4:3e:38:31:c5:1d:29:88:99:
2b:7f:88:38:23:2a:8a:4c:03:52:18:59:2e:81:9e:29:09:60:
73:86:43:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:52:04 2025 by rpki-client