Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hCflVenWZV9AOgOKLxA7ZRpbZRE.roa
File: hCflVenWZV9AOgOKLxA7ZRpbZRE.roa (raw, json)
Hash identifier: T3MUdMscGdDi06/YZUudbP/vfsbJaiQHDpj0EZfBr30=
Subject key identifier: 84:27:E5:55:E9:D6:65:5F:40:3A:03:8A:2F:10:3B:65:1A:5B:65:11
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDEB0F74C594D97A4FF89649D2381D02F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hCflVenWZV9AOgOKLxA7ZRpbZRE.roa
Signing time: Fri 17 Nov 2023 19:10:21 +0000
ROA not before: Fri 17 Nov 2023 19:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:de:b0:f7:4c:59:4d:97:a4:ff:89:64:9d:23:81:d0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 19:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8427e555e9d6655f403a038a2f103b651a5b6511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:01:df:e4:7e:6a:71:9a:69:00:ad:82:dd:25:
0c:07:2d:cc:03:00:6c:ea:6f:47:d2:b9:a9:8c:a5:
6b:24:1e:13:a6:63:42:e5:b3:9d:11:2a:74:cf:b8:
d6:60:07:9a:1c:63:0d:0f:0e:32:ed:54:1f:3b:1b:
09:bb:12:de:70:7d:14:66:dc:e9:32:3d:55:d6:d8:
50:68:e2:70:1d:68:0a:93:86:b6:53:94:7f:ab:3b:
eb:ec:44:63:02:ae:e1:e8:03:40:42:a8:f3:2e:07:
f5:8d:41:b3:cc:dc:2b:73:95:76:fb:aa:c5:10:ca:
0d:9d:47:37:f9:05:26:e9:41:96:d0:38:89:44:56:
93:3c:aa:eb:50:be:38:69:18:9d:05:94:cd:b5:09:
72:66:65:9f:40:d0:20:df:b5:19:5f:41:39:ad:4c:
7c:e2:0f:81:a3:51:a5:eb:a8:be:c1:b2:b7:f8:54:
fb:0f:87:39:52:be:01:48:ef:17:99:31:fc:e1:f7:
99:9f:78:ec:f3:3e:dd:5c:a0:a0:6f:92:71:32:35:
18:a4:23:6f:b3:dc:b2:9d:2c:ea:72:b3:de:5b:6c:
dc:85:2e:97:33:8e:c7:59:13:02:ab:d5:53:e9:b0:
9b:bc:5c:75:1d:a2:9d:af:4a:0a:6c:83:73:5c:73:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:27:E5:55:E9:D6:65:5F:40:3A:03:8A:2F:10:3B:65:1A:5B:65:11
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hCflVenWZV9AOgOKLxA7ZRpbZRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:89:82:32:27:94:84:08:65:a4:8f:dd:5a:dd:cd:77:91:f9:
8e:86:02:45:13:be:cb:7f:7f:5e:83:be:b7:22:d8:c1:b9:29:
a4:f6:bb:ca:8f:70:5e:28:1a:0e:98:d8:37:4c:95:df:69:c9:
82:00:37:22:a1:ee:71:85:47:2b:7d:00:8d:a6:80:f9:2c:78:
e4:c5:7d:f1:31:68:af:33:6d:8d:1e:e9:8e:27:eb:48:58:b2:
e3:89:2b:48:62:67:d5:dc:0e:a2:68:1d:ba:db:62:d8:4e:15:
53:60:c6:d7:91:60:01:7b:ad:8f:dd:16:9f:1e:1a:3f:d1:85:
04:56:bd:3f:34:74:b5:9b:16:c9:97:b5:28:db:c4:d7:64:a6:
5d:38:d2:64:66:9c:72:09:f8:a4:9f:89:87:35:35:83:0f:5d:
f3:18:53:ce:08:7d:dd:fd:26:98:f0:40:2c:a3:7c:f0:22:53:
b7:47:74:c3:83:ac:c8:c2:41:f4:9f:a2:13:8e:11:01:eb:84:
03:f4:97:75:4e:30:1e:4d:ab:cf:98:c8:26:bf:d3:9e:44:cd:
e8:24:c5:b0:3f:8d:5a:5a:16:09:9b:39:10:d0:14:14:56:24:
f8:e9:2c:e7:a5:64:aa:61:40:8c:e6:08:ed:8c:6c:f0:4e:70:
55:b3:94:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:07 2025 by rpki-client