Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hNhcZUlraqtkn-nbaO9cRJY5Hmw.roa
File: hNhcZUlraqtkn-nbaO9cRJY5Hmw.roa (raw, json)
Hash identifier: Qf7KqSGF/7c0/shg1lSU1NCM9xYwd/Qu2sMiMySboJ4=
Subject key identifier: 84:D8:5C:65:49:6B:6A:AB:64:9F:E9:DB:68:EF:5C:44:96:39:1E:6C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7C361318DCE0B3B74C21EC453F27C2CB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hNhcZUlraqtkn-nbaO9cRJY5Hmw.roa
Signing time: Mon 18 Dec 2023 09:16:07 +0000
ROA not before: Mon 18 Dec 2023 09:16:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:36:13:18:dc:e0:b3:b7:4c:21:ec:45:3f:27:c2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 18 09:16:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84d85c65496b6aab649fe9db68ef5c4496391e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:61:7b:1b:df:e3:9c:ac:69:a5:2d:c9:2a:
32:a9:c6:fc:42:59:dc:be:c7:3f:f9:38:cb:16:dc:
ff:cf:3e:1a:23:8a:7a:28:b5:2c:12:3a:e6:87:9b:
91:49:a3:6c:93:ac:46:4c:a2:3e:97:15:3a:9c:a0:
20:41:52:31:97:a2:5d:b9:4f:0e:5e:d2:b5:ea:c7:
12:1c:89:15:ac:c4:5a:a7:c8:a9:f3:4c:8e:2c:7b:
02:f6:b3:a1:d6:1b:3e:79:f6:7b:83:81:fe:e8:ed:
7f:63:95:27:8f:ae:31:fe:fb:f9:81:94:3c:72:48:
31:8a:37:86:63:54:a5:76:9a:59:bc:23:35:d7:2b:
26:d3:0e:8b:5d:d8:0d:4f:8c:da:30:d5:63:29:01:
38:37:33:6d:f1:ab:46:0b:af:0c:cb:2c:95:72:a0:
85:6a:cb:04:51:8f:1f:43:19:ce:62:fe:bd:f9:d3:
d6:56:90:22:80:29:fd:83:6a:e4:c0:d2:7f:71:e4:
77:90:4e:98:0c:9c:20:91:55:c2:5d:d7:e3:50:b2:
43:a4:52:d7:73:32:6e:73:ad:51:99:da:a6:15:c7:
ed:d5:f9:b4:93:09:75:2a:ae:46:97:f7:53:e8:13:
52:22:47:96:06:a4:1b:e4:78:e2:5d:e7:82:5f:82:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D8:5C:65:49:6B:6A:AB:64:9F:E9:DB:68:EF:5C:44:96:39:1E:6C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hNhcZUlraqtkn-nbaO9cRJY5Hmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:af:a9:01:cb:90:05:6f:9b:e7:6c:00:f1:b1:dc:96:ce:c7:
94:78:51:24:6e:13:95:40:74:43:85:dc:a4:ea:ce:60:cc:b3:
0f:65:39:24:5c:10:3a:14:1f:59:d9:54:47:1b:3b:f7:e9:f6:
fc:8d:87:15:08:c9:5f:8a:b8:15:0b:eb:5d:98:dc:d7:27:5f:
e7:eb:52:8e:5e:23:08:47:43:a6:55:c9:41:9d:c1:ba:80:6b:
d9:16:a6:38:ab:66:2f:1b:05:99:1a:26:93:b2:a1:1d:1f:88:
72:1e:dd:43:11:be:54:e4:d1:a3:9c:b8:fc:ee:51:f5:2f:1d:
9c:de:4e:b9:e4:d1:8b:e9:d1:fc:71:5b:2f:a1:dd:26:18:96:
57:a9:6f:10:c2:06:f1:2b:7c:65:82:5b:3f:cb:88:0f:c0:bc:
fa:f3:a0:e6:de:bb:1f:33:7d:7e:ce:a1:54:fa:69:b8:fc:e0:
f8:5b:e1:c8:5c:1f:fb:fd:2f:bc:f0:76:e1:5e:ce:94:5a:ab:
fc:f8:48:5a:0a:8f:01:42:47:a4:4f:60:d8:d5:4e:1b:fd:87:
d1:60:7b:cc:e0:f7:cf:1f:b6:07:21:54:b3:3a:89:a1:3d:ea:
f3:0a:07:fa:ac:06:9c:0b:8c:11:93:9d:fe:bc:0f:97:b1:70:
2f:9d:0e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:43:11 2025 by rpki-client