Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xSdezmGJCSvHaFqWZZjVFGD7m14.roa
File: xSdezmGJCSvHaFqWZZjVFGD7m14.roa (raw, json)
Hash identifier: iR6f8xK/tqlYvfAFDC5yJbQWVw3hAQHFH/CoCxWYuqk=
Subject key identifier: C5:27:5E:CE:61:89:09:2B:C7:68:5A:96:65:98:D5:14:60:FB:9B:5E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6F21ECB97E5261394E4CD1DB15FF2DEC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xSdezmGJCSvHaFqWZZjVFGD7m14.roa
Signing time: Fri 27 Oct 2023 03:16:16 +0000
ROA not before: Fri 27 Oct 2023 03:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6f:21:ec:b9:7e:52:61:39:4e:4c:d1:db:15:ff:2d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 27 03:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5275ece6189092bc7685a966598d51460fb9b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:e0:9f:d9:59:74:42:90:1f:a8:35:b4:b3:
30:c9:3c:49:d6:e2:ec:f6:c2:d6:7b:78:84:5c:98:
d1:23:1c:b0:08:a8:f3:b1:21:af:de:35:a7:ef:a4:
16:fc:1d:50:fe:58:b8:08:18:fd:fb:19:fc:51:06:
c4:25:bd:6a:dc:73:40:b8:11:5a:b0:1b:c8:ad:b5:
88:17:08:87:f4:f2:39:74:03:6c:5d:9e:28:cf:8a:
b0:ba:62:40:d9:c7:6e:27:c7:02:07:69:59:52:1b:
ad:74:82:d2:4d:6d:c7:4d:5a:69:21:b4:56:3b:d3:
7f:ca:67:aa:29:43:d1:eb:c9:0d:65:4b:3f:e4:b2:
77:a2:80:7d:a3:8b:c4:7a:a4:84:d7:f7:28:e1:b2:
b2:61:fd:9f:59:0e:a3:cf:d0:c0:c1:86:9c:d9:89:
bb:57:cd:76:92:03:be:ff:82:6d:58:de:48:05:79:
43:06:00:45:bb:87:27:9b:3c:77:cc:e4:46:4a:84:
8a:4c:88:a3:a6:a8:30:2c:95:0a:3b:6f:b2:90:3b:
7c:98:b1:94:66:68:9e:10:c5:4e:22:c5:8e:81:83:
e6:f6:49:a0:f0:45:30:f1:02:4f:21:90:23:59:b6:
d3:65:e0:af:ff:9b:44:ef:ce:33:10:d2:ce:23:7d:
79:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:27:5E:CE:61:89:09:2B:C7:68:5A:96:65:98:D5:14:60:FB:9B:5E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xSdezmGJCSvHaFqWZZjVFGD7m14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:88:bc:07:87:3b:16:b3:64:b1:4e:28:49:88:e6:06:26:4e:
22:d4:2e:66:0c:8c:69:3d:fe:e5:06:4d:eb:34:a9:c4:03:9c:
80:c6:22:d9:17:0a:13:50:62:88:3a:df:29:8a:a0:50:b4:42:
11:7f:4b:a7:ee:a5:60:bb:27:9a:43:bc:fe:9b:a1:7b:5c:e3:
ef:39:6b:c1:32:7f:f7:7b:d6:77:f0:52:30:82:cb:f0:a6:1a:
71:56:20:06:4d:d7:7e:22:f5:90:c6:84:1d:4f:bd:cf:00:5a:
ac:9c:0e:36:9d:fa:24:1f:58:1d:dd:0a:cd:c9:9b:61:91:c1:
e4:c0:1f:05:a3:f1:75:b7:49:aa:15:27:16:35:3a:32:09:2a:
1b:81:3d:22:99:21:ee:94:2a:5b:ff:c1:e0:73:f0:5b:81:0c:
6d:e2:9f:1f:97:ce:33:d4:4f:28:b6:0b:4b:19:7c:92:7b:3b:
44:b3:8a:35:c2:df:1a:c1:23:f4:8c:8e:ef:5c:32:d9:3e:dc:
f5:e7:43:39:3e:4d:b3:a3:bf:de:c5:c8:f7:a8:c2:46:db:f8:
09:33:7c:99:35:cf:ab:a4:81:87:0a:d5:b1:8d:39:fa:43:e3:
07:52:52:ca:16:a9:50:32:98:47:a9:a1:49:9c:ba:9b:bc:54:
f5:9e:a7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:53:40 2025 by rpki-client