Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/X5sSrHSgw4NuJye-Y8-CvEnbvZU.roa
File: X5sSrHSgw4NuJye-Y8-CvEnbvZU.roa (raw, json)
Hash identifier: favzSvNIWzDxE65ui5Ko13CpZyp3qmg11xq7nEhyxRw=
Subject key identifier: 5F:9B:12:AC:74:A0:C3:83:6E:27:27:BE:63:CF:82:BC:49:DB:BD:95
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEC0930E23338EB9C7EF54DFCF8C4F9D1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/X5sSrHSgw4NuJye-Y8-CvEnbvZU.roa
Signing time: Sun 01 Oct 2023 16:18:59 +0000
ROA not before: Sun 01 Oct 2023 16:18:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ec:09:30:e2:33:38:eb:9c:7e:f5:4d:fc:f8:c4:f9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 16:18:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f9b12ac74a0c3836e2727be63cf82bc49dbbd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:41:75:7b:ec:af:3a:1c:e3:fd:09:d1:9e:
ef:05:ca:1a:3c:99:45:cf:a0:34:1e:6a:88:4e:05:
3b:cf:91:3f:b3:55:04:84:2b:dc:cc:b6:c6:4b:71:
1a:67:97:af:4d:8c:a3:68:67:7b:f5:2e:86:ce:ec:
23:3f:f9:54:3f:37:e4:df:45:e5:7e:f4:50:c6:0a:
a5:97:f9:8f:ec:af:41:24:a1:7f:00:9b:df:8b:5e:
58:f4:99:0e:19:f1:b3:67:7e:3b:d0:86:07:2d:bf:
77:93:19:05:68:18:14:09:5c:44:a2:08:f8:9e:8b:
1d:00:e0:1a:18:17:6e:bd:6b:47:15:be:4f:95:e8:
7a:6d:5f:35:ac:36:c7:0b:27:4f:c7:a7:a4:1d:54:
1d:b8:a2:28:d4:9c:79:9d:56:cf:36:7c:cc:0f:67:
c9:6b:07:2d:7a:df:de:c7:21:9e:ba:f7:83:28:d9:
8e:1c:56:81:f4:77:2d:3b:1c:05:41:59:80:24:1e:
24:f8:80:f7:bc:e6:82:d0:c3:f8:6d:c3:c8:3f:dd:
77:15:84:71:f9:9e:7d:c6:23:83:9a:b1:28:c1:cd:
64:fa:07:60:09:22:a8:d5:72:96:49:c7:fe:b2:27:
d4:a1:0a:05:55:0c:db:cd:6b:4f:a1:0d:2e:73:4a:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9B:12:AC:74:A0:C3:83:6E:27:27:BE:63:CF:82:BC:49:DB:BD:95
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/X5sSrHSgw4NuJye-Y8-CvEnbvZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:78:2e:ba:8a:61:b6:d2:b9:30:54:db:17:eb:85:bd:b3:4d:
9d:70:da:0a:2d:89:f2:f2:ac:7b:1b:62:d4:a5:70:49:eb:8c:
20:51:92:77:d9:e6:cd:06:b7:a7:6c:43:eb:a2:78:1b:16:15:
de:18:dc:0d:a2:19:01:3c:4e:92:a2:5b:dc:d4:26:45:7b:3b:
17:a0:30:d9:4c:fb:dd:51:6d:4f:b9:48:02:0a:d0:c6:41:8a:
a8:4c:77:02:44:3e:49:a7:6e:0b:29:26:cb:70:5c:53:9d:6d:
5c:ec:20:5c:94:df:51:f9:91:a1:db:bb:27:c0:11:ae:b0:be:
8c:5f:88:57:91:e0:78:62:89:73:91:82:fa:03:c4:55:31:20:
c8:52:18:9a:8f:1d:8b:bd:63:e5:9b:7f:fd:2d:cd:47:31:37:
e2:a9:66:b6:e9:b1:38:60:86:9a:55:95:da:98:2a:f6:b5:11:
d8:81:d1:ac:df:c0:fb:47:01:04:0c:0e:c5:e6:d3:c8:e2:78:
92:ca:34:5f:55:bb:7d:c3:5d:7f:33:37:94:24:89:1f:67:7c:
2b:f2:b4:fb:61:1b:f4:96:32:f9:47:4e:c3:b6:ba:6f:62:3b:
32:54:27:1b:84:d6:67:25:e6:3f:1e:9f:5f:c9:be:f3:1d:eb:
0b:7f:f7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:55:17 2025 by rpki-client