Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/X6tJ4tJnmDltSL2IM-TtTPIAyDw.roa
File: X6tJ4tJnmDltSL2IM-TtTPIAyDw.roa (raw, json)
Hash identifier: fTwDhzRXP2exsKEhiMWE6vyIfUqnIAXDvKHvQ4dnCEQ=
Subject key identifier: 5F:AB:49:E2:D2:67:98:39:6D:48:BD:88:33:E4:ED:4C:F2:00:C8:3C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5B299F222D84A4090CE050B116F99346
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/X6tJ4tJnmDltSL2IM-TtTPIAyDw.roa
Signing time: Mon 23 Oct 2023 06:12:16 +0000
ROA not before: Mon 23 Oct 2023 06:12:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:29:9f:22:2d:84:a4:09:0c:e0:50:b1:16:f9:93:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 06:12:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fab49e2d26798396d48bd8833e4ed4cf200c83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:74:12:97:00:e4:2e:89:dc:ab:ea:03:1d:65:
f4:aa:8f:01:50:85:46:60:7f:fb:f0:dd:0c:94:d2:
56:15:85:37:1f:c9:a6:55:7a:d3:eb:d0:df:12:eb:
7a:f2:98:5b:ab:15:6b:10:3f:99:f8:b4:12:66:8b:
ba:02:5f:06:91:c9:5b:8b:66:d2:58:3b:2e:d7:72:
ab:7b:56:86:23:b5:b1:24:46:a0:19:2d:9a:c2:32:
ad:ad:db:15:33:88:35:61:a0:35:98:b5:84:b7:1c:
4d:6b:e1:1f:60:99:06:f8:e8:2a:48:0e:92:46:7a:
f4:f9:2d:8b:5e:f2:74:60:df:f0:74:85:e2:c7:be:
12:a9:91:e4:36:3d:21:3c:5e:39:2e:ca:ef:dc:1a:
b3:11:61:89:0d:8f:2e:b9:91:ac:ea:a7:a4:ab:4b:
b2:a5:11:c6:27:c7:41:3a:fc:9e:30:43:8d:f5:e6:
47:a5:8d:43:ec:ea:57:59:76:11:bf:00:ec:8e:48:
5a:03:6f:b2:ff:53:1e:3b:a2:2a:9b:41:db:81:1a:
94:04:1b:e1:93:e1:c2:91:44:a5:51:55:e6:ab:ef:
d8:ce:09:9e:0d:ad:00:a0:4c:41:1e:33:ff:c0:68:
ff:95:2d:82:f9:18:5d:07:46:be:f2:f4:de:df:24:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AB:49:E2:D2:67:98:39:6D:48:BD:88:33:E4:ED:4C:F2:00:C8:3C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/X6tJ4tJnmDltSL2IM-TtTPIAyDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:47:e4:d9:a7:0d:d8:e6:4b:83:3c:0e:1a:e3:a9:e7:2c:98:
73:20:ec:b6:a4:a8:e7:c0:c2:22:29:89:04:bd:fb:bd:d7:58:
83:16:85:41:93:2f:4a:ac:82:30:28:d2:5e:e4:e7:90:6b:db:
68:2f:6e:a5:69:64:0f:7f:a8:0d:b2:7a:30:c8:66:7f:5b:42:
af:4f:d0:ea:ef:73:d8:aa:c8:2f:b5:9b:d2:e4:a5:d1:0e:5e:
5b:92:00:5f:2b:1f:b0:ee:bb:67:ab:8b:4a:2c:eb:90:3c:58:
66:eb:19:a9:70:10:eb:7c:dd:b8:be:b2:7d:27:67:8a:d0:11:
09:87:de:41:c3:69:fb:37:14:8b:bf:ea:0b:c4:e4:1e:ca:6f:
2e:ae:c9:4f:50:02:7a:f9:16:f8:da:09:c0:5e:a5:fd:bc:11:
d9:7f:7e:d5:75:f3:d6:bb:b9:b1:91:c0:54:23:f4:89:d0:f4:
01:a3:d5:c7:e3:40:03:45:b5:7f:7c:49:b4:13:05:35:8f:f1:
78:86:67:07:58:b4:ad:9d:97:fc:0f:a4:f9:9d:26:02:4a:69:
68:d0:57:9a:8b:e3:66:de:ba:fa:29:d4:6e:09:5f:dc:21:f8:
5e:4c:43:71:6d:8b:0e:d3:3d:9b:72:50:8e:5b:e4:d1:2f:86:
a7:f8:29:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:26 2025 by rpki-client