Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cLZHIB-Xb78kToEjG7jE6NcXyOA.roa
File: cLZHIB-Xb78kToEjG7jE6NcXyOA.roa (raw, json)
Hash identifier: kR3eIVxFmYjQxK+xfa8Pi8SEDAd+eh/EpXpfs3c+xmY=
Subject key identifier: 70:B6:47:20:1F:97:6F:BF:24:4E:81:23:1B:B8:C4:E8:D7:17:C8:E0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BED4A25ECF466703C1E835A05439961A0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cLZHIB-Xb78kToEjG7jE6NcXyOA.roa
Signing time: Mon 20 Nov 2023 15:12:21 +0000
ROA not before: Mon 20 Nov 2023 15:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ed:4a:25:ec:f4:66:70:3c:1e:83:5a:05:43:99:61:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 20 15:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70b647201f976fbf244e81231bb8c4e8d717c8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b8:7e:b9:aa:48:04:7f:2e:6f:2d:52:c0:f3:
61:22:58:ac:94:66:83:3d:27:05:fd:a8:73:db:34:
45:b5:06:28:cb:b4:47:4d:04:c3:c3:63:c5:af:b1:
f3:bc:3e:25:67:90:5b:45:d3:03:b9:b5:1b:7e:23:
9d:e9:c9:e6:5f:54:c1:27:ba:16:65:5e:b7:1c:b1:
73:12:73:78:a5:b3:d6:11:e7:9d:f9:fd:97:04:5f:
35:a6:b4:47:6a:1e:9a:a4:1b:de:a7:ca:40:b5:0b:
e5:c1:23:0e:d2:0d:83:0b:ec:eb:38:a2:07:25:37:
b0:08:73:3e:86:7e:0c:52:b2:e2:17:d5:04:5d:33:
26:46:c4:07:94:27:b9:38:af:34:d3:4c:99:5d:a4:
6b:48:c6:d6:1e:3a:44:99:b8:c4:e5:60:c7:fb:0a:
13:2f:6f:17:b5:45:13:ef:86:c2:1d:a0:11:6d:b8:
b5:a2:9a:8b:54:d2:2c:74:8a:8e:83:f2:2b:01:60:
20:7e:f9:d6:13:f6:65:23:b6:06:1c:56:2a:6c:a4:
17:11:9d:9e:24:5c:a5:f0:91:2d:fb:d6:74:65:4a:
04:06:63:b6:4e:b5:43:e1:27:eb:a5:3e:8c:64:1b:
ee:8f:28:7f:76:56:8f:1a:34:ff:3d:b2:54:48:3c:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B6:47:20:1F:97:6F:BF:24:4E:81:23:1B:B8:C4:E8:D7:17:C8:E0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cLZHIB-Xb78kToEjG7jE6NcXyOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:c5:c4:26:2e:f8:05:58:f8:5c:69:69:b8:40:d8:be:5f:1b:
32:df:e0:06:c0:77:6a:b2:0a:74:7c:70:08:b0:91:46:8f:a4:
f1:e1:3d:ef:a2:73:ad:94:58:30:ab:22:d4:18:56:9e:f8:17:
06:cb:c2:d9:63:98:8c:00:dd:f5:88:e7:b3:db:ae:29:40:2b:
42:2a:62:62:3a:49:84:97:d2:c1:6d:cb:ea:b2:b6:7b:9b:19:
c5:6d:c1:b6:e7:41:23:31:f0:90:95:c5:43:c4:1b:3a:4d:8e:
15:87:ee:59:79:5c:73:66:49:f8:cb:ea:02:72:dd:32:68:55:
d0:4f:b1:e1:5e:46:ed:37:94:20:d8:45:ef:43:cd:11:4a:61:
c9:36:26:05:e2:fb:47:ce:3e:8b:33:7e:e3:01:e2:5f:f6:40:
56:af:4e:3e:94:9b:51:0e:54:f7:fb:40:16:c4:8b:1f:07:73:
bc:1d:19:de:a8:ae:fa:c4:aa:8a:ff:ca:78:77:da:5b:13:f9:
5d:94:4e:43:0c:d5:c4:d2:c2:75:2f:0f:78:b6:38:0f:b8:af:
0c:16:17:45:3a:75:c9:54:5e:be:50:27:c2:c5:de:70:2e:77:
43:8e:12:44:8d:9b:9c:45:43:e5:a9:29:35:7e:7c:09:d5:1e:
61:94:80:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:44 2025 by rpki-client