Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x8yGtFf_mVd7_0xc0PFtyn9VCls.roa
File: x8yGtFf_mVd7_0xc0PFtyn9VCls.roa (raw, json)
Hash identifier: uX8gF8+ggO28j/ESAB5VAWb8Nu+dJuNJRZiI7nU12vQ=
Subject key identifier: C7:CC:86:B4:57:FF:99:57:7B:FF:4C:5C:D0:F1:6D:CA:7F:55:0A:5B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCFAA7815AD20D9C1A4EF013196A96767
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x8yGtFf_mVd7_0xc0PFtyn9VCls.roa
Signing time: Tue 14 Nov 2023 21:08:57 +0000
ROA not before: Tue 14 Nov 2023 21:08:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cf:aa:78:15:ad:20:d9:c1:a4:ef:01:31:96:a9:67:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 21:08:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7cc86b457ff99577bff4c5cd0f16dca7f550a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:81:d9:8e:b5:eb:91:a6:58:53:b1:40:2b:
e6:7d:a5:e7:48:9c:c1:83:34:37:e9:a7:04:ee:96:
4e:88:29:61:d3:82:63:52:f7:1b:59:94:fb:6a:a2:
4b:8b:31:18:35:98:14:28:a2:7c:d1:91:96:c9:71:
aa:49:43:3f:49:54:d7:db:01:b5:12:8f:cd:11:96:
a9:84:cf:e2:83:a6:0b:68:42:a2:78:ef:5f:ee:63:
a6:2a:a9:b5:33:a3:ee:20:1e:93:74:e1:56:5f:87:
77:4a:13:4e:62:5c:83:07:a0:b3:6c:3a:c1:d6:43:
70:f5:33:ce:db:ed:84:28:6e:2a:e1:16:ab:65:01:
60:c9:31:12:d7:c5:95:b3:5e:ac:c7:eb:65:e8:78:
fa:29:29:43:4f:cc:51:54:82:68:a0:82:44:f6:09:
14:b0:4c:4c:38:5a:df:59:61:82:d2:5f:0b:6e:37:
77:47:40:0b:07:9e:03:96:2a:54:5f:d1:cc:a5:ff:
6e:4d:24:5b:0c:dc:90:32:0c:4f:7d:f3:3d:86:94:
e8:87:23:f1:af:da:b3:14:b4:0b:60:1c:72:21:12:
e9:bd:7c:ec:71:05:66:87:05:d0:67:93:ba:b6:45:
cb:08:98:42:78:50:cc:3b:0b:d5:96:bb:0b:af:d3:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CC:86:B4:57:FF:99:57:7B:FF:4C:5C:D0:F1:6D:CA:7F:55:0A:5B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x8yGtFf_mVd7_0xc0PFtyn9VCls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bc:4f:4c:e7:30:89:dd:25:3d:17:19:18:48:fa:66:d6:60:d5:
f8:46:48:dd:10:cb:2b:8e:bd:4b:0b:59:d1:c3:82:5c:54:0f:
1e:7b:22:66:70:e5:01:8d:b7:ed:ea:ba:a3:20:77:f0:e4:c4:
d3:14:ca:5c:e5:5c:13:cb:85:f9:6a:fb:b5:90:79:cd:a6:2b:
16:6d:b9:f5:49:a5:71:f5:b0:f7:7f:87:82:f4:76:e6:e9:cd:
86:9d:d6:74:7d:cc:4a:2e:d2:c4:98:51:e5:ed:e2:36:07:4d:
1d:08:d9:ee:9e:dc:bb:f5:2c:99:45:10:aa:de:a1:53:f0:b3:
ee:d3:6e:94:c4:e3:70:ea:8d:7f:49:46:2d:6b:56:5a:57:e5:
7a:cf:fa:00:30:95:d0:ae:b1:d5:09:d8:db:c2:01:33:49:13:
ea:89:f1:c2:c1:82:b7:3f:85:36:03:98:ff:9a:3d:5b:09:46:
7e:24:1d:35:d7:be:1c:60:c9:b7:8e:be:67:63:c3:66:57:b2:
5e:fb:f8:c0:fd:31:c6:a7:14:56:e8:13:23:3e:76:9d:b5:2d:
13:16:5c:13:6d:5f:5f:5a:0b:19:41:ce:bc:0e:8c:c4:a2:89:
b2:47:44:e7:ac:03:85:3b:af:0d:27:27:e7:e7:61:57:11:3d:
72:ca:4b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:27:07 2025 by rpki-client