Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hVneL6bqJ5jbSDl-GIAEox4ufPE.roa
File: hVneL6bqJ5jbSDl-GIAEox4ufPE.roa (raw, json)
Hash identifier: FR12AWH94bDQpxUrYI11eetjQ/QXae9/9M4KTM2k16M=
Subject key identifier: 85:59:DE:2F:A6:EA:27:98:DB:48:39:7E:18:80:04:A3:1E:2E:7C:F1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4768F6511342C518F492606849678343
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hVneL6bqJ5jbSDl-GIAEox4ufPE.roa
Signing time: Fri 08 Dec 2023 03:11:50 +0000
ROA not before: Fri 08 Dec 2023 03:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:47:68:f6:51:13:42:c5:18:f4:92:60:68:49:67:83:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 03:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8559de2fa6ea2798db48397e188004a31e2e7cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:fd:bf:d8:67:99:f4:be:69:5c:00:6f:6d:
6c:ab:9d:41:0d:72:18:5e:20:c3:0e:a9:8f:c3:47:
59:ce:22:15:6b:1f:9c:06:ec:c9:00:e5:33:5c:5b:
cb:c8:5b:38:6f:51:f4:c4:23:f0:f1:3d:f5:09:58:
01:82:ba:05:e9:90:3b:50:7f:0c:e4:aa:ed:1d:8a:
2d:92:55:e8:f0:9d:41:5b:49:3a:bb:e5:c2:73:17:
bb:6c:20:4a:56:2b:b1:de:44:0f:4e:8a:b0:85:39:
74:25:84:ea:78:20:58:eb:3d:2a:b0:3a:b1:0d:16:
e9:35:14:03:0c:e4:d1:d8:68:1a:78:29:6c:4a:f7:
b7:fd:ae:9d:07:c1:a3:27:7f:5c:03:f0:31:e3:23:
44:ae:f2:79:8a:55:03:e0:40:33:da:d6:9f:8e:c7:
2d:88:2b:5e:6d:c3:f8:98:8c:99:74:f5:40:04:24:
dd:0e:79:3a:67:bb:71:a5:73:c7:d6:91:ea:5f:09:
40:49:48:96:0c:7a:f8:f6:d5:32:e4:0c:2d:c0:35:
d9:f4:a7:80:df:11:37:64:0e:28:67:5d:71:b6:19:
8b:e4:a1:da:c4:2f:89:54:60:b8:83:c2:ce:74:d0:
1b:d3:62:b9:05:fe:d8:dc:4e:66:9b:bd:7c:75:03:
bc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:59:DE:2F:A6:EA:27:98:DB:48:39:7E:18:80:04:A3:1E:2E:7C:F1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hVneL6bqJ5jbSDl-GIAEox4ufPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:79:78:39:81:90:d6:c9:8c:73:b5:aa:82:5d:03:52:cb:c7:
46:cf:7f:bf:c6:be:45:f6:61:09:ed:91:69:06:5d:13:dc:3d:
09:07:62:27:46:19:a2:0e:2b:f8:e7:f4:5b:4d:8d:ce:bd:1b:
78:70:7e:a9:9f:3b:5a:81:72:48:d6:5e:14:fa:1b:16:f2:10:
cb:dc:13:b9:26:ba:a1:19:7d:5f:be:5e:3d:81:72:22:7f:b5:
51:f6:fc:65:ae:ad:59:24:e5:e4:39:cb:d3:01:26:54:45:5a:
a1:8c:38:67:fe:9c:4b:fa:57:cd:20:6c:d0:1d:85:d0:db:ef:
9d:9d:19:9c:57:1e:4a:bc:59:53:6a:74:f7:35:9f:2e:eb:1a:
dd:e8:8e:c4:b9:52:5c:6f:92:e4:f2:90:5c:8e:e2:f6:95:99:
fd:53:18:6d:6c:cb:a7:55:53:58:58:db:0e:2e:dd:5b:3e:1f:
81:48:f8:82:96:eb:c8:86:ee:6f:8f:e7:0b:73:f8:db:91:8c:
5c:c3:a9:d1:cd:bd:c1:53:7e:94:a2:25:70:9a:32:21:d4:e7:
15:7c:94:87:b9:0f:ea:c3:26:0f:4c:b3:28:2a:e1:93:e8:fa:
18:4f:63:58:6c:66:a4:d1:4f:42:c8:73:3c:2e:4c:37:28:d8:
46:bd:ea:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:57:18 2025 by rpki-client