Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pb5OiXagws1sypdXZgEO8tiTtG0.roa
File: pb5OiXagws1sypdXZgEO8tiTtG0.roa (raw, json)
Hash identifier: C1QUijNHKdNMhdyEGerw9V/ICI/hrbqMWRAjg3N1E5A=
Subject key identifier: A5:BE:4E:89:76:A0:C2:CD:6C:CA:97:57:66:01:0E:F2:D8:93:B4:6D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B355EEEAC6C2CC189BBA2E70EE5F8D5F4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pb5OiXagws1sypdXZgEO8tiTtG0.roa
Signing time: Sun 15 Oct 2023 22:04:55 +0000
ROA not before: Sun 15 Oct 2023 22:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:355e:3ba5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:35:5e:ee:ac:6c:2c:c1:89:bb:a2:e7:0e:e5:f8:d5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 22:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5be4e8976a0c2cd6cca975766010ef2d893b46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:56:17:52:98:dd:e1:58:eb:be:42:37:13:
27:b6:83:f9:ed:76:67:da:ca:f8:51:11:36:34:8c:
36:83:6d:0b:7c:2a:c8:4c:5b:45:04:f6:5f:d5:8f:
ff:fb:2f:8a:30:41:59:26:7a:a3:d9:72:eb:b2:0e:
c7:00:10:2a:ff:f5:8b:8f:6c:44:6b:80:c1:32:ad:
9c:4e:2d:f1:5b:fd:0f:43:a9:9c:06:60:61:41:6c:
a5:2b:f9:a8:9d:9e:26:a1:98:22:aa:4c:11:23:97:
4b:ad:4d:7a:6b:8b:15:c6:d6:e0:1a:df:9a:9b:ed:
72:05:ea:fa:1d:47:b2:f9:36:67:9e:02:95:36:af:
4a:43:0d:2c:e2:3e:c7:38:2e:61:32:ee:0d:55:aa:
f1:af:4a:4a:e0:8c:c7:36:d9:7a:ae:83:b6:d0:67:
7f:d6:42:37:4b:79:83:fd:84:55:0c:40:7f:77:8b:
e9:9a:3b:dd:20:c2:24:a7:2b:ca:36:e3:6d:b3:0c:
44:3b:8e:36:22:66:bc:98:a4:f1:0d:ed:14:44:13:
f0:10:2e:35:dc:f8:bd:3f:d5:95:64:94:8d:cb:e2:
b4:30:be:72:4a:d9:cc:d1:90:50:32:04:2f:d0:e1:
8e:21:da:6a:5e:89:d9:9d:04:2d:82:72:28:b1:df:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BE:4E:89:76:A0:C2:CD:6C:CA:97:57:66:01:0E:F2:D8:93:B4:6D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pb5OiXagws1sypdXZgEO8tiTtG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:38:0e:db:38:b0:0e:0b:e5:dd:9b:09:60:d3:74:ea:7f:c1:
a3:09:a5:5d:cf:81:f7:20:f0:3a:6f:84:fa:c2:65:40:40:7b:
25:22:cb:85:41:3a:d9:0c:a7:cc:b6:31:a2:1a:8c:e4:d1:16:
a6:e6:53:c8:30:f5:a5:0b:42:12:6e:53:88:9a:3a:0e:db:67:
01:bf:36:4f:db:1c:04:53:46:18:7f:d0:e4:da:61:51:dc:c9:
ae:80:a1:7d:25:ba:06:e7:35:67:63:7a:20:19:57:21:f4:a6:
08:fb:2d:01:75:06:79:70:57:3a:f3:e3:27:84:8b:5d:f4:cb:
c3:4f:3b:98:37:9e:1f:6b:6a:f0:59:2e:0b:6e:56:a9:9c:94:
de:f9:9c:37:1f:bf:2b:4c:6f:6a:6f:0d:f1:74:1c:ac:6b:bb:
fa:ab:a2:51:23:be:88:e5:a0:08:0f:71:d8:34:d0:01:e0:cd:
8a:b5:ea:7e:c2:08:bb:c7:a8:04:5d:d2:c4:08:35:0b:28:91:
8b:76:93:13:68:42:f0:2e:58:0f:e3:be:38:7e:b0:f3:d4:8e:
c4:47:88:b8:73:81:c9:7d:2b:48:30:e9:bd:86:cb:23:3c:df:
01:f4:19:d2:09:38:91:b4:1d:33:ad:21:de:06:b6:04:69:0f:
89:22:c3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:13:03 2025 by rpki-client