Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xEqTlqa7aaekWLtQj9YF-TbQt7Q.roa
File: xEqTlqa7aaekWLtQj9YF-TbQt7Q.roa (raw, json)
Hash identifier: WRRL9NJzCx2JkbmtTxO4q6uO7fmdDS3NCTle2eN80xY=
Subject key identifier: C4:4A:93:96:A6:BB:69:A7:A4:58:BB:50:8F:D6:05:F9:36:D0:B7:B4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD351388807415F9AA45CD40D370411F5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xEqTlqa7aaekWLtQj9YF-TbQt7Q.roa
Signing time: Wed 15 Nov 2023 14:09:57 +0000
ROA not before: Wed 15 Nov 2023 14:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:51:38:88:07:41:5f:9a:a4:5c:d4:0d:37:04:11:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 14:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c44a9396a6bb69a7a458bb508fd605f936d0b7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e5:4f:38:8d:b0:3c:cd:0b:d0:b5:19:03:f5:
f1:81:e3:0f:83:e9:dd:31:98:94:66:45:e6:77:51:
5e:d9:54:8b:08:0a:8b:20:60:48:53:95:d1:cb:06:
f2:d2:3d:a0:57:e6:dc:ba:71:ff:2e:f4:07:e0:89:
0b:c3:6e:b6:bf:08:7b:7b:c4:c6:44:1d:30:de:8d:
3c:39:2e:d6:d9:e4:0e:55:21:1a:4d:a6:c2:a8:7f:
cb:a6:0b:db:60:b4:57:0c:db:85:a1:08:72:1a:c7:
ff:24:e8:03:f1:81:83:2f:8b:13:74:d2:8e:d2:90:
65:ab:1e:f1:48:2b:14:11:3d:bd:09:43:dc:e9:a0:
ae:72:5e:fa:5c:35:4c:df:70:78:a4:7b:de:19:74:
16:00:c2:4e:d3:57:94:a7:70:48:eb:18:41:a4:73:
6e:55:0d:e0:0c:0f:2c:eb:1a:fb:cd:16:45:59:c4:
0d:48:c8:66:48:e5:14:41:b2:f4:8c:b0:c6:93:87:
2f:92:a3:0c:0a:db:1b:07:ff:0c:e2:0e:96:87:dc:
e8:78:d1:dc:9d:4e:9b:38:fb:67:9f:71:5a:58:ab:
96:9c:bd:67:18:80:f6:46:85:bc:16:03:45:17:06:
cf:70:88:83:02:ed:35:ce:df:ce:6d:80:ec:de:ad:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4A:93:96:A6:BB:69:A7:A4:58:BB:50:8F:D6:05:F9:36:D0:B7:B4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xEqTlqa7aaekWLtQj9YF-TbQt7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:40:b6:98:86:35:99:3d:cc:12:51:6f:b1:7e:57:4e:71:a7:
0f:d1:25:67:b4:ca:71:8c:f6:08:17:6c:b1:96:e3:73:a6:6b:
e8:d5:d6:60:1c:23:30:07:51:bb:7f:84:7d:b0:17:45:df:42:
68:ce:72:fe:16:f2:54:36:02:03:ee:b2:c4:f5:7e:91:71:0d:
fe:01:d4:6b:8a:65:d6:0c:10:3c:92:c2:7d:36:73:0b:fe:2b:
70:f6:33:ad:bd:3b:ae:b8:48:53:a1:8e:d0:c6:6a:bf:a6:92:
07:4e:d2:61:5c:1f:b9:90:2c:b4:0b:0c:91:c6:75:bf:4b:d5:
e8:5e:44:94:59:bb:87:15:68:93:f0:18:2d:b5:0d:81:05:fa:
57:65:64:81:74:36:1c:5e:fb:51:a3:a8:c0:01:6b:5f:35:2b:
56:e8:1c:59:c3:13:fd:87:00:d1:02:8b:55:e0:0e:5c:20:7d:
21:24:44:fb:33:4f:bc:f7:63:ea:34:86:5b:fc:0d:5f:91:bd:
81:cd:e6:18:a6:21:e4:74:9e:65:a6:3e:1c:87:d9:70:54:06:
70:3b:ec:eb:a5:22:1c:c9:2e:02:58:30:df:9c:59:9f:dc:11:
d4:0d:d1:66:ed:a0:5e:8c:34:1e:db:db:b2:86:ff:a2:27:d4:
f8:32:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:19:55 2025 by rpki-client