Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bHwgQMVU_bEum-zB7ZzaxgIipoQ.roa
File: bHwgQMVU_bEum-zB7ZzaxgIipoQ.roa (raw, json)
Hash identifier: s0B48Lz1G1W2sOl4f8vmVuyFpFsO6qTSPM2BAx1fT9Y=
Subject key identifier: 6C:7C:20:40:C5:54:FD:B1:2E:9B:EC:C1:ED:9C:DA:C6:02:22:A6:84
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C058D59168DD47F26ECAD15B3CEBC334E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bHwgQMVU_bEum-zB7ZzaxgIipoQ.roa
Signing time: Sat 25 Nov 2023 08:16:38 +0000
ROA not before: Sat 25 Nov 2023 08:16:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:05:8d:59:16:8d:d4:7f:26:ec:ad:15:b3:ce:bc:33:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 08:16:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c7c2040c554fdb12e9becc1ed9cdac60222a684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:40:5f:8a:05:08:3a:fc:93:f7:ac:9c:b4:
98:da:a5:92:13:db:e2:d8:a0:65:10:c5:51:c7:28:
83:11:a8:27:70:c6:8d:b8:39:56:a9:9d:21:06:48:
7a:23:6f:64:05:bc:fb:ac:d9:d6:af:09:52:c2:42:
32:a3:4b:47:02:7a:b0:1d:77:e7:07:25:4d:74:c2:
e1:24:e3:4a:93:2e:49:a5:8b:9f:d2:58:e8:cf:28:
98:37:32:23:e6:6c:59:83:ce:25:3e:99:f7:ca:49:
9f:1d:0a:e8:ec:fb:f7:d9:3d:26:0e:5f:f3:85:2e:
79:2e:f4:68:a0:b2:c3:01:a2:bf:0d:48:bc:0e:e3:
3c:ba:ee:9d:63:70:90:44:75:c4:36:39:16:ce:ff:
70:eb:6e:d8:8e:6d:e5:3e:02:3b:8c:0c:f2:bc:32:
53:a1:c6:48:ce:37:2f:10:5a:a1:91:1c:46:b8:c4:
8d:f9:b3:18:92:0e:e7:c1:cf:c7:4c:a6:f6:b1:a1:
af:9b:e6:f7:26:55:8f:81:47:2a:9b:dd:6b:11:8d:
8b:a3:57:4a:b8:f3:2c:53:72:65:6c:df:64:34:50:
0f:05:6c:3a:06:36:89:b4:09:cc:72:04:6a:97:d4:
06:21:27:c1:ba:a1:66:6b:b0:b8:9f:62:ac:ac:41:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7C:20:40:C5:54:FD:B1:2E:9B:EC:C1:ED:9C:DA:C6:02:22:A6:84
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bHwgQMVU_bEum-zB7ZzaxgIipoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:43:86:3a:6d:9c:b3:34:44:c7:dd:19:f8:2c:78:b0:01:a4:
c9:db:9e:e0:b4:d3:82:c0:8c:8e:bc:3f:89:1d:00:3f:57:b8:
29:74:d1:98:1b:f9:18:69:f1:6e:77:ce:d2:1e:db:e5:d7:53:
cf:27:52:7d:94:0e:7c:c3:8b:1e:b5:67:9c:53:3e:63:66:c2:
e3:4c:07:dc:8c:fc:c0:40:39:c5:fd:3f:65:6a:6b:0e:64:b3:
7b:4c:a9:a2:41:bc:df:7d:eb:7b:47:14:0e:f8:9b:00:a1:2c:
3c:27:12:61:b6:ae:03:a0:79:54:eb:bb:51:a2:ce:97:b4:35:
67:0a:45:28:ab:e4:6e:11:9e:e0:d2:73:a8:55:73:82:73:c9:
e2:e1:0c:4d:2a:d4:b0:58:67:87:a7:61:91:c5:3a:b4:53:fd:
35:6a:44:a5:5e:93:2b:76:1d:c4:57:8d:eb:d0:a4:74:69:77:
4f:3c:1f:e5:31:20:99:86:ae:7f:40:e1:67:70:69:e1:78:e5:
58:af:a5:87:95:10:46:9b:5c:2e:93:79:f4:90:07:1f:11:c3:
21:89:13:3f:71:46:d2:70:e0:d0:2b:4a:a8:75:f4:f9:3a:98:
b7:96:45:8b:83:4a:0a:54:75:4a:2b:1a:28:fa:dd:67:f6:5d:
8d:9d:82:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:27 2025 by rpki-client