Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c5-dj_lmZ-hapfL-vw1BuH9VcuY.roa
File: c5-dj_lmZ-hapfL-vw1BuH9VcuY.roa (raw, json)
Hash identifier: sZjZuOg4KBR1L7643RsswaZMHFYhbCZx87xDf8rz06Y=
Subject key identifier: 73:9F:9D:8F:F9:66:67:E8:5A:A5:F2:FE:BF:0D:41:B8:7F:55:72:E6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACFB31257AE3E4A6E4631F43580B44E66
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c5-dj_lmZ-hapfL-vw1BuH9VcuY.roa
Signing time: Tue 26 Sep 2023 04:15:33 +0000
ROA not before: Tue 26 Sep 2023 04:15:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cf:b3:12:57:ae:3e:4a:6e:46:31:f4:35:80:b4:4e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 04:15:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=739f9d8ff96667e85aa5f2febf0d41b87f5572e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:e4:59:de:e4:1e:4b:f3:e9:e4:34:14:00:
1b:b2:b2:33:8c:f4:4c:cd:b4:5a:48:33:c3:fd:21:
9c:2d:03:dd:66:76:75:cb:f7:d4:38:2d:1c:c7:29:
a0:2d:8a:22:e8:70:d6:fa:1a:d1:5d:f2:f0:28:82:
d9:3a:5a:a2:32:13:3b:fd:08:25:a0:da:3d:eb:96:
b1:4e:c6:a1:14:e7:d0:76:3c:64:74:c0:d0:2e:05:
65:10:6b:8e:e5:c0:66:8c:af:e5:8a:10:88:6b:12:
9e:34:ff:a3:06:04:be:ce:71:4a:f4:0a:ab:73:6c:
1b:b1:a4:9c:63:25:43:63:23:39:09:71:03:76:11:
13:06:67:42:65:7c:58:94:96:a9:49:3e:f7:c8:dd:
68:92:ac:29:43:92:62:ed:02:db:e6:f2:ce:4a:82:
0d:14:40:a1:ee:a6:0c:4b:71:fa:d4:b5:3a:a5:ae:
86:1e:2e:c1:c7:bc:3d:39:25:3e:ff:8f:47:e2:d6:
9b:86:89:bb:58:7a:6c:aa:92:dc:9f:4b:c6:12:b4:
90:04:ea:98:84:71:d8:4d:b6:50:28:76:48:92:ca:
1e:60:af:f3:20:8b:88:c3:bd:ce:4a:e9:56:da:bf:
b8:84:95:cb:6b:50:ec:df:24:b7:10:18:e9:8e:3a:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9F:9D:8F:F9:66:67:E8:5A:A5:F2:FE:BF:0D:41:B8:7F:55:72:E6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c5-dj_lmZ-hapfL-vw1BuH9VcuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:19:92:3e:57:8a:61:b9:0c:84:14:79:b2:03:78:4d:35:ae:
88:b8:03:20:e6:9d:12:00:e6:bd:18:d8:86:4c:cf:2f:53:59:
57:af:dc:57:cc:f2:54:26:65:bf:fd:b6:2d:a7:e0:f5:9f:97:
84:7e:58:36:ca:bc:e6:3c:0e:9a:51:ec:06:86:f4:f1:9f:8e:
70:fd:cc:45:24:bc:f1:66:f0:e4:de:3f:c6:6e:a8:5c:00:05:
4d:d0:c0:dd:2b:2e:b5:8c:4b:d3:fd:93:cb:50:4b:6d:e9:38:
f4:26:0d:ab:73:ce:fb:3e:4b:45:f2:51:80:72:e5:4f:e1:07:
4e:81:f6:2c:21:5d:fa:4e:ee:c8:61:07:e9:29:fa:22:8f:f3:
86:a9:fc:d8:4d:24:d7:26:8f:3f:75:83:94:34:8e:7d:94:e4:
d5:18:8b:5a:b7:e6:9b:92:c2:f4:d0:23:6a:eb:d2:e7:03:49:
7e:2a:50:12:8e:10:69:af:3a:51:4b:e8:0d:5e:a2:ed:64:02:
25:86:0d:ab:13:4c:ab:bf:cf:c5:be:1a:d5:68:09:1c:0f:7e:
c9:aa:24:31:75:10:7c:93:cd:b8:81:91:f9:80:d5:ca:ad:80:
58:17:8b:31:52:67:a3:98:bc:e4:01:ae:9b:99:54:94:cc:f9:
3a:ea:6d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:36 2025 by rpki-client