Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XoyC_UhA5ai5Vyqd9pUwg8B4KHw.roa
File: XoyC_UhA5ai5Vyqd9pUwg8B4KHw.roa (raw, json)
Hash identifier: vYvEl8hRLjEOQ1ylnF+cbgm+yrd1thzZAE+kUGRjkpI=
Subject key identifier: 5E:8C:82:FD:48:40:E5:A8:B9:57:2A:9D:F6:95:30:83:C0:78:28:7C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2B21610B34E8126721C4886A3B676198
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XoyC_UhA5ai5Vyqd9pUwg8B4KHw.roa
Signing time: Fri 13 Oct 2023 22:21:29 +0000
ROA not before: Fri 13 Oct 2023 22:21:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2b:21:61:0b:34:e8:12:67:21:c4:88:6a:3b:67:61:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 22:21:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e8c82fd4840e5a8b9572a9df6953083c078287c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:60:6d:5c:ae:40:76:cb:b0:74:63:35:4f:0f:
2d:f4:78:05:b9:d2:e8:2d:17:7e:80:e9:5f:5b:36:
9c:39:7a:13:8d:f5:30:d6:7a:96:e0:20:10:7a:7d:
4c:0b:89:1e:23:46:92:a8:ce:85:9a:7e:cd:85:b8:
05:39:6d:be:b0:19:e8:fa:c5:e8:45:4b:6f:c4:9f:
a1:99:54:d0:a7:83:75:7a:04:52:f4:c9:70:a3:fe:
d1:86:53:c7:4c:38:bd:9a:81:22:85:1e:73:f6:87:
a4:e8:cd:9f:c3:25:67:67:4c:3b:cb:30:ec:a6:bf:
b1:2d:87:34:cd:bb:ba:ba:d0:da:b0:16:60:09:e4:
eb:c7:3c:12:52:3d:62:54:87:a0:ae:e9:7c:a6:cc:
e4:38:68:64:28:58:17:eb:cd:08:b4:2e:00:08:98:
0a:fe:90:19:0b:63:7d:c4:a2:0b:ed:80:16:7d:c3:
6b:a6:62:09:f7:62:7b:ba:d7:bc:65:90:c2:d5:67:
60:85:20:ca:42:c0:73:99:65:ab:cf:83:80:df:04:
76:b8:a7:f1:ef:65:10:46:30:a4:92:b6:53:db:a2:
b8:bd:8c:3f:f4:cc:a1:43:03:87:7e:82:81:5e:9b:
fc:c0:75:79:65:64:c6:60:88:09:2d:f3:bd:6f:0a:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8C:82:FD:48:40:E5:A8:B9:57:2A:9D:F6:95:30:83:C0:78:28:7C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XoyC_UhA5ai5Vyqd9pUwg8B4KHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:1c:67:b0:3f:bb:4f:63:ad:10:4d:b5:7b:45:f3:b3:eb:d3:
e6:55:96:b7:29:9f:54:93:77:1d:49:37:92:48:d3:9f:44:6e:
a0:bd:e5:f3:c3:13:b4:e1:6a:7d:99:4d:f8:38:ad:23:34:60:
ad:3a:52:0f:71:d6:23:8a:52:f5:86:7f:77:8b:52:dc:1f:20:
60:48:a8:9e:a2:fc:a7:76:a6:58:04:9a:e3:3a:0e:e7:32:ab:
8c:eb:4c:13:84:58:f5:6b:c7:39:27:b5:b8:b2:22:59:85:d3:
6d:69:41:80:e8:da:d8:e6:c1:f9:ba:80:e0:1e:8d:fb:33:b1:
34:1a:4d:a3:2b:b7:7e:3e:41:ad:dc:b5:62:cc:7f:96:d4:24:
52:84:e5:04:b6:1a:d9:8c:3e:46:e8:c9:d6:84:b9:5f:e5:46:
ae:e2:ad:4f:00:fa:7e:09:ac:0d:62:55:df:55:9d:7b:40:04:
2d:28:97:ea:e0:56:e9:68:78:c5:c8:1f:f3:e0:3a:8e:47:09:
83:e6:c4:92:bf:a6:56:18:3a:82:23:6f:89:32:de:74:ec:d4:
ce:82:88:f1:e6:87:d5:a4:54:97:4a:e5:47:91:ba:2a:eb:89:
2c:1d:f1:6c:91:95:70:02:c1:0d:a2:56:95:f5:2a:fa:97:92:
4a:47:33:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:29:34 2025 by rpki-client