Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/abXHLHonpQlGD8V_-AcPFVb5vG8.roa
File: abXHLHonpQlGD8V_-AcPFVb5vG8.roa (raw, json)
Hash identifier: LNxyqktTwFX/1ihhQvvZowV62/qnLO2V+S6RVtgpz8o=
Subject key identifier: 69:B5:C7:2C:7A:27:A5:09:46:0F:C5:7F:F8:07:0F:15:56:F9:BC:6F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C645A91A0633822776F535181FBE1E3C0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/abXHLHonpQlGD8V_-AcPFVb5vG8.roa
Signing time: Wed 13 Dec 2023 18:05:06 +0000
ROA not before: Wed 13 Dec 2023 18:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:6459:f2be/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:64:5a:91:a0:63:38:22:77:6f:53:51:81:fb:e1:e3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 18:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69b5c72c7a27a509460fc57ff8070f1556f9bc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:8b:72:1c:2e:02:4d:83:f8:fd:d7:f8:0b:
65:32:2d:16:23:e2:d2:0f:ff:fe:55:93:72:33:b9:
e6:43:8f:d7:80:1e:7d:20:6d:8e:1b:86:ed:a4:ae:
38:40:e5:fd:21:13:0e:5f:f9:e6:1c:d8:8d:0a:16:
dd:36:2d:b3:c5:ae:cc:43:63:e3:a6:62:78:1d:6e:
1e:b1:ff:44:58:12:63:7e:3d:a0:fa:2a:07:0c:af:
d0:ea:50:d5:d4:fc:b7:42:81:fb:2d:fb:66:0e:5c:
16:29:e7:9c:2c:34:ef:a4:92:f9:a1:81:33:fe:c6:
4e:22:e6:7a:e2:70:01:ef:27:56:ca:e6:ce:a3:17:
73:34:ed:09:25:76:3e:ea:c6:44:51:26:2c:c4:f2:
6c:1f:91:73:84:84:d4:07:1e:21:88:0e:54:cb:37:
b0:b8:cc:70:8c:6c:33:8f:e1:11:e5:68:0c:95:1d:
1b:82:df:cc:44:21:28:48:1a:21:6c:27:98:fd:6d:
f2:40:95:21:35:36:e8:69:e1:af:90:3d:22:33:ef:
b7:b2:9d:7b:96:11:8e:1c:f1:67:90:07:a4:d2:1b:
ea:66:f8:02:a2:f1:6b:af:43:f0:96:70:04:77:f8:
3c:ad:b8:35:7d:18:8e:60:69:a4:7e:0a:cb:70:56:
cb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B5:C7:2C:7A:27:A5:09:46:0F:C5:7F:F8:07:0F:15:56:F9:BC:6F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/abXHLHonpQlGD8V_-AcPFVb5vG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:df:41:a0:56:31:42:d3:82:4e:90:70:c8:4d:b7:e2:df:85:
68:0f:f2:b6:23:c0:8d:c9:1c:12:b0:88:ce:18:8e:e9:c3:fb:
af:bd:03:9c:8f:34:ee:b7:05:6d:3f:2c:bc:a7:ab:e7:77:39:
0a:da:7a:6f:4c:17:3f:37:fd:df:94:33:34:07:52:5a:c8:0d:
9a:13:ea:8a:84:d9:b2:4f:59:92:14:4f:31:0e:4e:eb:7b:da:
c9:95:fe:f1:aa:fb:88:ac:fb:9d:6a:bc:63:af:98:88:f4:7b:
01:b3:fe:27:a7:85:ed:0c:59:cb:13:62:21:9d:67:33:9a:20:
93:4a:8d:df:cc:79:82:bf:11:16:33:ca:76:4d:35:88:06:02:
50:a9:cb:4b:f9:16:73:cd:8a:23:e9:d7:2c:7b:16:15:93:8e:
b4:f3:da:fd:18:07:98:a5:7b:12:4b:f5:8f:eb:28:75:37:1a:
0c:f6:75:fe:a7:93:08:e1:a4:22:e9:61:0e:8c:08:dd:d4:1f:
3b:a3:46:46:a5:10:86:af:01:99:b6:eb:07:fd:9b:35:2d:69:
89:6b:9f:f6:39:a7:a6:96:83:eb:f4:0a:f1:ec:7f:f6:ca:92:
5a:4e:9b:94:75:1f:4d:3e:42:3b:9c:84:1a:6e:3e:1e:a1:df:
44:22:85:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:54:31 2025 by rpki-client