Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XnYra5wwrjwRMv8vdMB9XhN3GQc.roa
File: XnYra5wwrjwRMv8vdMB9XhN3GQc.roa (raw, json)
Hash identifier: vC7O9Pysa5xshU2aM60ThJq3uBJWRxIYbF3P/zaciyY=
Subject key identifier: 5E:76:2B:6B:9C:30:AE:3C:11:32:FF:2F:74:C0:7D:5E:13:77:19:07
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA5CF6CDFA6268058E9AE106A17E9722E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XnYra5wwrjwRMv8vdMB9XhN3GQc.roa
Signing time: Mon 06 Nov 2023 18:05:16 +0000
ROA not before: Mon 06 Nov 2023 18:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:a5ce:d26a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a5:cf:6c:df:a6:26:80:58:e9:ae:10:6a:17:e9:72:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 6 18:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e762b6b9c30ae3c1132ff2f74c07d5e13771907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:c0:6f:71:23:07:78:6e:9b:48:f6:90:4d:
c0:21:56:08:4c:94:aa:a3:de:2b:26:f7:62:dd:0b:
9d:ea:df:1c:a1:33:ce:82:26:32:6c:3c:a8:b9:62:
1c:bb:40:e8:f1:bb:17:5c:f9:3f:a6:f0:c5:2e:f0:
8c:f3:9d:97:6f:e3:0d:55:37:8c:3b:41:4c:67:0b:
87:87:9c:ce:92:ef:c7:10:f8:5b:4a:15:b5:41:16:
bb:8b:0c:b1:2c:94:f2:9c:12:1b:1c:9e:32:ea:48:
de:5c:4c:c9:04:0f:23:e7:03:de:a8:31:01:66:7c:
b4:b8:91:a6:45:e3:2b:70:58:07:5d:e0:d2:41:f7:
a7:0d:0e:64:25:6b:a6:be:51:f1:68:7d:c4:23:96:
eb:c2:01:cd:6b:96:0e:e9:58:73:cb:f6:3c:07:42:
7d:83:b6:df:11:c0:59:8a:7c:c9:d1:11:5c:0c:fe:
9a:f0:4d:9d:41:a4:c4:7d:05:d1:6e:ab:dd:ac:0c:
33:ab:07:9d:01:76:12:e3:bb:46:ff:56:67:29:66:
05:48:c3:79:b2:dc:d8:30:8e:ca:b0:c7:e0:c0:13:
e7:b3:e6:87:4d:0e:9a:7b:19:69:b2:b0:f8:1d:e6:
9c:23:11:0e:c7:6e:64:04:8b:e0:49:05:4b:4c:f6:
34:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:76:2B:6B:9C:30:AE:3C:11:32:FF:2F:74:C0:7D:5E:13:77:19:07
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XnYra5wwrjwRMv8vdMB9XhN3GQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:db:41:bc:d0:19:52:7d:07:8c:cb:fc:19:db:d2:63:ad:57:
84:dd:39:de:51:1b:70:d6:0c:cf:bb:e6:ff:3e:85:7a:3c:1e:
30:bf:df:69:19:89:de:44:76:c9:4e:9d:22:d5:d4:2f:4c:de:
c4:85:e3:8c:5b:cf:49:5b:97:f8:fc:80:64:97:20:4b:f2:a7:
dc:9c:29:36:2c:64:9f:5b:18:8a:75:27:a3:ca:d1:5f:66:be:
3d:48:ad:02:45:f2:85:02:a0:e8:08:a3:1f:9c:82:3e:9f:8f:
af:79:b1:e7:bc:d5:89:81:22:ba:c7:96:dd:e7:0b:5d:1c:a7:
bc:2c:a9:79:18:19:da:a9:c5:aa:ad:3c:3a:93:1e:57:e0:1d:
f9:b9:08:00:b9:72:66:0f:37:24:18:bb:f7:86:0b:83:81:13:
88:e2:73:d2:9c:19:db:29:46:4e:62:0d:d3:da:76:9b:4c:b5:
17:49:46:6d:2f:e3:83:38:56:94:c6:8b:46:2a:9b:1b:27:96:
4e:3c:71:00:a8:ed:9e:3b:1a:28:75:fe:79:9d:bc:c1:38:72:
ff:00:1a:22:fb:14:c0:d9:52:ea:90:dc:de:ff:19:ea:4c:1a:
f5:35:a5:43:5a:8e:01:31:fb:82:53:2c:49:9e:34:7b:b7:94:
78:85:08:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:22:56 2025 by rpki-client