Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hVMqTus7LedB5_UD9gfb6-S8sew.roa
File: hVMqTus7LedB5_UD9gfb6-S8sew.roa (raw, json)
Hash identifier: K8G7w0sfrlKWeBfOFqkrSJzDiGik2pMrNEyBLQdfmS8=
Subject key identifier: 85:53:2A:4E:EB:3B:2D:E7:41:E7:F5:03:F6:07:DB:EB:E4:BC:B1:EC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABFD6C2575F6AC0F5EF2F7069B42E5CE9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hVMqTus7LedB5_UD9gfb6-S8sew.roa
Signing time: Sat 23 Sep 2023 02:20:37 +0000
ROA not before: Sat 23 Sep 2023 02:20:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bf:d6:c2:57:5f:6a:c0:f5:ef:2f:70:69:b4:2e:5c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 02:20:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85532a4eeb3b2de741e7f503f607dbebe4bcb1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:cc:e2:9d:c2:9a:d6:2a:fb:7c:38:ec:0c:
66:9d:dc:7f:cb:f4:35:65:60:bc:92:bb:e2:a5:72:
4e:99:bf:60:9d:54:0c:3c:46:ed:15:b8:7b:2a:e2:
9c:6e:d4:03:52:00:cb:3c:d1:24:fd:00:19:ad:c6:
00:d9:db:e2:9b:2d:1e:4c:c4:5f:48:5c:16:55:3f:
1e:fa:ae:8b:3a:46:93:ff:83:d7:99:8f:80:83:45:
f0:f1:cc:82:64:b6:8a:06:f2:ac:6d:36:11:3a:5f:
3f:0d:6d:16:ce:4b:b9:4e:5b:fc:5b:b5:3e:b4:75:
53:47:38:6a:8a:03:e0:3d:92:fd:01:7c:6c:e4:dc:
5d:fc:70:40:00:fe:24:16:0f:89:7e:a5:d0:0d:39:
45:85:5a:72:2c:71:05:b1:64:60:ee:24:a0:ec:b2:
d1:04:d5:cb:4b:48:b5:b2:bf:07:07:83:3f:75:1a:
d2:32:64:5b:b0:2f:a1:59:94:0d:f9:e6:2a:76:fb:
2e:ab:91:56:bd:14:be:f8:04:47:44:d7:d9:e7:5f:
19:63:7c:c1:7e:d3:f7:08:fd:2e:6e:ee:aa:db:05:
5d:31:5a:c6:b6:d6:7a:74:09:2b:06:f4:1b:80:c9:
79:49:c5:c9:1a:0e:e6:6b:68:8e:00:ff:b0:62:bc:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:53:2A:4E:EB:3B:2D:E7:41:E7:F5:03:F6:07:DB:EB:E4:BC:B1:EC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hVMqTus7LedB5_UD9gfb6-S8sew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:fe:f2:ef:06:e1:4b:58:1c:cf:71:20:39:25:6f:c9:d1:b1:
1d:91:35:ff:79:3f:8d:98:c5:01:af:14:df:15:a3:40:76:76:
68:b5:3b:a0:56:13:27:ea:ba:7f:6f:ba:e4:91:81:f1:74:f5:
00:5a:3b:99:ce:6e:fa:6d:d9:e2:91:86:cf:9d:50:d5:06:c8:
ee:7b:90:19:b1:02:15:f9:a1:0d:4c:ed:6f:ae:b0:07:85:5c:
8d:ff:21:30:79:10:2f:b3:6e:5d:36:34:ea:61:d1:66:28:47:
5b:37:88:87:aa:e0:6f:7b:93:b6:d0:cf:c2:9a:0e:59:99:8a:
06:c6:0b:b6:38:a1:e4:bd:04:bf:29:fa:88:3c:75:de:c5:5f:
b5:55:b5:ef:dd:33:9a:78:a6:4e:5c:0c:a2:d7:20:76:71:c5:
85:d7:1b:28:49:93:04:c6:e9:95:b6:a7:4b:7b:2e:61:f7:7c:
e8:32:b2:fb:ed:1c:37:46:94:98:2d:d5:f7:57:de:73:29:81:
2c:03:49:1e:a0:c4:69:6c:2c:3d:e1:3b:ae:35:af:7f:c1:93:
41:98:83:62:07:e8:09:af:64:4e:02:ba:1f:69:a9:42:dc:4b:
8d:d3:be:28:c0:0b:37:d4:96:3e:88:2c:7e:e0:89:de:ef:9b:
8a:7a:66:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:53:44 2025 by rpki-client