Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XJt5Dmh6-vg3tLrMaWs2sc_zrHU.roa
File: XJt5Dmh6-vg3tLrMaWs2sc_zrHU.roa (raw, json)
Hash identifier: Q9WdWlo12CMAcTP28KlYiAjiIBffk0m+zgZzXPL1q7w=
Subject key identifier: 5C:9B:79:0E:68:7A:FA:F8:37:B4:BA:CC:69:6B:36:B1:CF:F3:AC:75
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE526CD4444730DEE8523ECD6D70E7B72
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XJt5Dmh6-vg3tLrMaWs2sc_zrHU.roa
Signing time: Sat 30 Sep 2023 08:13:59 +0000
ROA not before: Sat 30 Sep 2023 08:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e5:26:cd:44:44:73:0d:ee:85:23:ec:d6:d7:0e:7b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 08:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c9b790e687afaf837b4bacc696b36b1cff3ac75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:21:84:ae:65:a8:df:79:bd:9a:54:b9:6b:
3f:b3:06:c2:bb:4e:6c:21:8b:a8:b7:c6:51:4d:6b:
84:b5:23:de:b8:02:56:0b:05:31:de:39:fb:79:25:
14:fc:15:59:08:64:6e:1b:dc:d0:0e:e8:af:53:67:
f8:44:34:6c:9c:92:2a:96:93:85:3e:44:c1:57:36:
d4:a0:3b:df:33:38:e8:a9:83:6a:e5:a4:6f:8f:4a:
7c:64:81:17:4c:3b:20:77:dc:eb:1b:88:d6:fb:fc:
a7:67:86:d7:81:48:3a:0c:ef:54:ee:9c:df:ca:24:
51:80:ed:88:03:a1:cc:48:13:e0:9f:4e:35:6b:de:
4b:d2:32:a0:6f:d7:b5:b4:8f:ba:af:33:94:ac:3b:
25:00:a0:cf:66:fd:f0:20:3d:f0:a5:76:a0:34:2d:
fd:28:af:9d:9d:cb:28:df:54:ce:b8:54:56:8d:84:
cc:81:01:7b:37:30:7c:82:fc:b7:be:0d:41:f1:9a:
85:e2:e2:ee:67:cb:04:9e:ab:9f:29:de:51:da:c4:
db:7e:72:e6:8c:56:81:1f:1c:60:47:92:f3:e5:2b:
fb:0b:87:f9:04:62:57:79:e7:8f:43:c3:55:ac:79:
ac:9e:5a:bc:78:2c:8d:2d:54:c9:6f:3b:80:a0:f7:
0d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9B:79:0E:68:7A:FA:F8:37:B4:BA:CC:69:6B:36:B1:CF:F3:AC:75
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XJt5Dmh6-vg3tLrMaWs2sc_zrHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:26:ea:50:96:6a:e4:76:90:e4:7f:0a:45:8d:7e:e7:11:4b:
a2:39:1f:ca:42:9f:7e:af:a3:f7:dc:0b:a4:84:57:d6:d1:5b:
5e:81:22:44:7a:03:35:b7:e1:b1:85:89:c8:0e:07:9f:03:90:
34:af:f3:48:61:c7:b4:de:4a:6a:32:0c:35:25:a3:73:86:e1:
37:39:92:63:1b:42:72:6c:f9:18:d9:c2:2f:81:49:be:43:d7:
70:cc:96:a9:5f:b2:dd:49:f4:7e:04:f2:cc:7a:5c:8c:a0:19:
f1:07:82:20:4c:d4:02:38:3a:61:ec:b5:13:47:8e:0c:34:1e:
28:19:75:1e:eb:8f:59:ae:ab:3e:54:80:99:72:bc:54:80:e9:
4d:fc:cd:ca:87:b8:ce:1f:d0:3a:74:4b:38:4b:ed:a3:c0:06:
0b:c1:0a:1c:9f:43:da:04:2c:79:d2:60:20:bc:fc:4c:ea:44:
57:9d:be:39:42:b0:94:b4:43:cb:6b:9b:40:7b:07:16:7f:d6:
ec:8b:c5:f4:5c:d1:94:1a:ae:d1:94:a4:e2:72:51:17:07:9a:
71:a9:63:a5:12:e7:e3:c0:70:5c:49:de:a7:5d:5b:dc:5e:f0:
71:34:16:35:cf:52:cc:2c:e6:42:a0:04:6c:76:be:1c:18:e0:
48:dd:01:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:42:05 2025 by rpki-client