Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xQYr7m5QF4MZDDgXaFPR8eGv1yg.roa
File: xQYr7m5QF4MZDDgXaFPR8eGv1yg.roa (raw, json)
Hash identifier: MhUjXNmHkqehHKRb4ApUsNDcd/LdA2BEfUH/UgvgFic=
Subject key identifier: C5:06:2B:EE:6E:50:17:83:19:0C:38:17:68:53:D1:F1:E1:AF:D7:28
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2FD9C5B8263F0F61C10947538AD347EB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xQYr7m5QF4MZDDgXaFPR8eGv1yg.roa
Signing time: Sat 14 Oct 2023 20:21:22 +0000
ROA not before: Sat 14 Oct 2023 20:21:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2f:d9:c5:b8:26:3f:0f:61:c1:09:47:53:8a:d3:47:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 20:21:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5062bee6e501783190c38176853d1f1e1afd728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:e2:c4:90:31:88:22:b6:90:b6:ec:c8:fe:
10:52:a4:ad:6d:72:6e:86:40:73:bf:e9:4c:51:cf:
b9:2e:58:70:b8:a2:82:97:9c:54:9e:b0:6e:00:05:
ce:6d:4f:a8:7a:e1:c4:c4:5e:43:0f:fb:1f:db:c9:
3a:69:b7:63:1c:b4:fd:31:04:13:32:f5:d8:60:4e:
a8:30:c4:b4:95:1e:54:77:81:f9:2c:a8:6d:32:37:
0b:23:b7:ad:11:52:86:98:56:2d:0e:f3:ca:e5:3c:
b6:78:27:79:bd:b6:89:3b:79:81:87:2b:27:67:f9:
f7:89:a0:2a:63:ae:dd:69:26:23:b2:c2:73:ed:d8:
d9:b0:fb:17:cc:09:9a:64:6c:18:d5:c6:46:e1:72:
ff:89:c3:d2:3b:0c:f0:29:94:7c:94:ec:08:b6:29:
14:ac:f8:9d:04:15:b9:ae:ff:2b:aa:02:3c:fa:4d:
12:d4:97:4d:f6:e5:18:11:ee:95:15:d5:2d:b1:1f:
cd:21:00:4c:b6:68:1d:52:4c:76:0b:0d:61:dc:7b:
32:4b:6b:24:0b:5d:51:8b:0e:18:86:73:d1:e6:f0:
63:b1:a4:f9:ef:a5:e8:93:f0:2d:f0:4e:46:4c:26:
22:cc:ec:c8:4b:02:e8:00:b2:ff:1b:df:4a:16:e3:
b1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:06:2B:EE:6E:50:17:83:19:0C:38:17:68:53:D1:F1:E1:AF:D7:28
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xQYr7m5QF4MZDDgXaFPR8eGv1yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bf:31:1e:da:47:46:39:a4:75:66:f9:f1:d5:53:cd:61:b5:a5:
18:ac:dd:51:59:7e:a8:dd:a0:b1:f5:49:82:15:c8:f8:8f:ba:
b1:78:25:5a:04:ff:b6:b0:a7:eb:79:84:e1:a2:23:2f:3b:9b:
ea:21:62:b0:d6:83:db:83:5f:c9:5f:75:a3:a4:3d:25:cf:49:
69:c1:04:2e:0e:95:8b:ec:d0:d6:81:dc:58:47:22:bc:39:a4:
e4:23:63:bc:f5:5a:0d:18:51:43:4d:ff:81:ed:58:e2:f4:16:
b3:6f:8d:d0:7e:3e:3d:79:1f:b8:ac:6e:63:ec:15:28:00:b7:
7f:c1:31:a6:7d:d8:48:92:7b:66:1c:4e:aa:39:ca:8e:3b:5e:
ee:68:13:23:e3:b1:22:1b:4d:a3:ed:fc:93:5f:c4:8b:ba:54:
6d:ef:ad:f1:d0:21:a2:1f:f2:0e:d3:91:4e:3d:05:2e:23:f7:
09:a1:a7:12:ac:7c:5b:da:d4:a3:ec:b2:4b:4c:b4:42:76:09:
6b:b4:65:43:4c:17:97:c1:88:88:32:54:27:7d:b8:ee:11:b2:
c4:d3:ab:d3:fc:f2:5a:ed:42:62:6d:ba:b7:15:8c:1d:22:72:
a2:af:f6:40:51:7d:c9:3b:a7:b7:3f:6d:b8:92:e8:9b:c8:09:
ad:a4:25:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:48:49 2025 by rpki-client