Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_Ht0JqE1a4IMSL5Im3HfNssyMrU.roa
File: _Ht0JqE1a4IMSL5Im3HfNssyMrU.roa (raw, json)
Hash identifier: Dt3qKcQXbZ1rp8IZaSERlRrGfPOi6bOw4OjbGKd9F5M=
Subject key identifier: FC:7B:74:26:A1:35:6B:82:0C:48:BE:48:9B:71:DF:36:CB:32:32:B5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF6F6A6679858FCDB1D0EA9F63806C4CE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_Ht0JqE1a4IMSL5Im3HfNssyMrU.roa
Signing time: Wed 22 Nov 2023 12:17:21 +0000
ROA not before: Wed 22 Nov 2023 12:17:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:f6:a6:67:98:58:fc:db:1d:0e:a9:f6:38:06:c4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 12:17:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc7b7426a1356b820c48be489b71df36cb3232b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:de:4c:50:30:69:ac:cf:b7:2a:20:92:6a:02:
df:b8:5e:82:b4:00:59:08:06:ed:aa:4d:05:b7:17:
8a:4c:7d:1d:0c:31:1e:77:ea:54:c5:b1:8f:22:70:
e1:f4:ee:d3:34:81:93:fb:a4:04:63:64:2e:59:55:
75:c8:2f:57:24:ef:ea:13:b9:e0:1f:40:a0:b2:a2:
2d:9a:51:b1:03:66:9a:6c:40:f5:7a:cd:a7:9e:34:
8e:43:93:7e:21:17:6e:46:d2:fe:4f:b5:e8:9c:0a:
7e:a3:44:65:6f:59:42:87:99:55:f9:7d:a6:23:1b:
80:7a:98:f3:f3:f4:bb:a3:d5:72:51:d5:84:27:d5:
92:0f:9a:87:23:ae:5d:62:f2:e9:07:65:c5:69:55:
26:fa:73:ea:50:4d:bf:42:e3:c4:4b:cc:06:0b:a6:
a1:44:77:91:7b:3f:55:78:1e:03:67:94:d1:b6:d1:
60:5b:29:3f:e1:6d:ba:dc:54:4f:4a:00:1a:b7:59:
69:ca:4a:f5:90:9d:3c:76:9c:0a:c1:e2:eb:e1:f9:
94:94:d9:ae:1b:65:d8:0f:9c:0b:f1:72:64:e9:b7:
a4:56:40:33:31:fe:18:5b:d6:3f:2f:b9:63:ce:1e:
fa:52:6f:2b:a4:6c:ad:aa:1b:e0:09:80:1d:da:02:
59:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7B:74:26:A1:35:6B:82:0C:48:BE:48:9B:71:DF:36:CB:32:32:B5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_Ht0JqE1a4IMSL5Im3HfNssyMrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c2:d3:40:28:b6:3b:04:ae:ed:3c:e7:f8:f8:85:ce:74:63:f4:
ab:bc:a1:6a:45:da:eb:eb:e9:00:c8:57:a3:06:58:25:cb:b8:
0c:b5:5a:1b:c4:50:84:95:5d:22:3e:46:57:2f:20:bf:cb:d5:
d4:df:a9:7d:29:c4:32:3c:1e:4e:bd:69:94:fa:8b:fe:f1:3b:
a3:e1:c0:88:2f:d9:c3:0e:af:8f:ab:e1:7b:84:b3:29:b4:4d:
08:49:3c:cd:6e:23:c6:9d:6b:b4:4d:ff:1e:87:df:ae:c2:8e:
bf:03:af:1f:f0:ae:25:32:ca:4a:68:1c:15:8d:ec:f9:9d:13:
bd:78:16:2e:8b:3f:01:bf:b9:9d:63:cd:e0:17:9f:83:35:87:
ba:41:86:21:da:4b:da:ad:d7:eb:1f:81:43:b3:10:a6:14:31:
58:b3:fc:24:61:24:77:76:07:d7:46:4d:a9:eb:6c:52:e3:74:
b9:02:f4:a1:df:fc:85:0f:03:e1:53:71:87:55:4f:61:23:5d:
80:af:22:c9:15:ea:fe:9c:c4:42:3b:14:76:17:a1:cc:16:82:
ce:eb:f6:e6:1d:c9:36:e0:3f:f5:43:c3:0d:b9:45:ba:49:05:
7e:0a:83:64:e3:f3:12:3e:4f:2f:ee:ba:e9:0c:4e:dd:8b:87:
ef:90:46:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:07:33 2025 by rpki-client