Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hKka8QHjTH44cKMc8Ixt40-SKN8.roa
File: hKka8QHjTH44cKMc8Ixt40-SKN8.roa (raw, json)
Hash identifier: xmOkvc2ShYP1MELsZnnn4PFB6tFrC24hIi0i1ZBnsaE=
Subject key identifier: 84:A9:1A:F1:01:E3:4C:7E:38:70:A3:1C:F0:8C:6D:E3:4F:92:28:DF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2F62ED1AC3AB7BA3A770A2FFF02895BC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hKka8QHjTH44cKMc8Ixt40-SKN8.roa
Signing time: Sun 03 Dec 2023 11:14:21 +0000
ROA not before: Sun 03 Dec 2023 11:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2f:62:ed:1a:c3:ab:7b:a3:a7:70:a2:ff:f0:28:95:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 11:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84a91af101e34c7e3870a31cf08c6de34f9228df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:1b:d6:2c:e1:06:a7:4d:d3:4b:a7:8e:cf:
46:f0:35:ae:d2:37:e7:71:d8:02:a3:ca:56:74:a8:
8b:b9:af:8a:ce:bd:3d:f6:41:c5:ad:e3:7d:e3:9f:
8b:f4:7a:23:82:8c:36:12:71:67:9d:59:4e:e8:9a:
14:a3:24:36:e9:8e:f9:1b:5e:d3:6a:32:09:6e:a0:
fb:ed:71:ad:24:5b:2e:9e:94:a7:1c:4c:b8:7c:22:
1f:52:63:cb:ed:c2:e5:aa:b5:14:d0:00:e9:d2:27:
1f:4a:20:cf:e9:00:76:fc:37:c3:9e:15:3f:8c:73:
f5:75:1e:ca:cd:32:c1:87:c4:92:da:23:c6:9b:f7:
97:05:02:40:7a:6b:9f:5a:03:32:77:6f:90:0f:a7:
75:8c:4d:49:b1:37:20:b7:fd:2b:15:2c:1e:f3:72:
bc:d8:a7:e9:5b:80:b6:49:d6:9c:b7:ac:af:11:82:
f1:6e:20:59:02:c2:f7:02:79:3b:6d:d2:96:a6:e4:
72:48:e4:3a:d4:0d:7c:b0:02:85:17:ee:c5:75:9a:
2d:c6:96:f4:d2:a7:df:a4:ca:a6:9a:e3:26:14:a0:
84:f2:f0:61:fb:ef:93:86:36:50:37:cb:a7:db:e2:
86:93:cc:cb:54:3b:7f:29:4c:86:59:2c:cc:de:08:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A9:1A:F1:01:E3:4C:7E:38:70:A3:1C:F0:8C:6D:E3:4F:92:28:DF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hKka8QHjTH44cKMc8Ixt40-SKN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:c6:ce:11:4c:7e:31:7e:24:8e:c4:58:02:b4:5b:7f:a7:a8:
56:f6:64:fd:26:23:1f:20:bd:5d:e7:33:96:2b:19:61:46:80:
aa:4b:54:ad:46:19:85:e4:ce:87:31:95:60:f5:35:3d:18:85:
fe:5e:c9:d9:70:e5:69:54:66:0b:4c:b1:21:41:60:2a:0d:9d:
7b:59:0f:58:ac:ac:48:e0:3a:a0:04:e5:54:3b:64:de:f5:92:
c9:35:b2:32:18:8d:35:49:87:26:50:cc:d1:b8:35:45:77:77:
34:66:ba:92:32:c7:b9:08:04:1b:6f:ae:fd:9b:14:60:98:3c:
ad:12:fe:52:7e:73:e9:f9:b9:b7:f0:a7:55:bf:f5:f9:5b:8a:
39:7a:f9:7d:76:be:14:5d:54:c2:d4:68:77:0c:e6:1d:3b:2b:
c4:71:0c:5e:a4:57:b8:9c:cf:f0:83:fa:1e:d2:5c:1e:47:f5:
dc:d9:0d:7c:af:75:0d:24:f0:46:07:0b:04:ec:46:c1:8e:f6:
c6:33:66:d8:da:37:d5:fe:1a:48:e3:68:5b:52:8e:30:7a:40:
de:42:19:f0:b2:64:10:22:95:81:11:36:f3:d3:23:2a:57:bc:
31:fe:c5:56:21:c9:4f:e4:38:50:42:47:98:e8:af:7b:42:1b:
ae:83:e4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:36 2025 by rpki-client