Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xWC7Rmfw8O9YqWBq_dDOrTZWB60.roa
File: xWC7Rmfw8O9YqWBq_dDOrTZWB60.roa (raw, json)
Hash identifier: kqR6OsOIjWukyYn7uO5s1nEYYZDChn6f9PaCyR8/wvs=
Subject key identifier: C5:60:BB:46:67:F0:F0:EF:58:A9:60:6A:FD:D0:CE:AD:36:56:07:AD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3DFBAF54D0D06062090AC194C4E99334
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xWC7Rmfw8O9YqWBq_dDOrTZWB60.roa
Signing time: Tue 17 Oct 2023 14:13:06 +0000
ROA not before: Tue 17 Oct 2023 14:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:fb:af:54:d0:d0:60:62:09:0a:c1:94:c4:e9:93:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 14:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c560bb4667f0f0ef58a9606afdd0cead365607ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:89:7d:62:be:69:00:0d:84:48:ff:87:69:62:
da:b0:f9:64:2e:9e:60:a5:69:99:ba:86:ae:0d:7e:
8e:a9:b1:ab:7f:71:8c:e3:ca:da:dc:81:96:a6:74:
f9:08:f7:c4:ef:63:e4:c7:2a:c6:bc:d7:d7:f2:fd:
78:99:65:1c:9e:50:4d:c0:33:2e:36:29:12:10:2e:
5c:ff:0e:b8:75:09:b6:42:f1:b2:c3:05:0a:37:8b:
4b:11:f1:a5:36:05:95:fa:e4:5d:d8:4a:f2:d7:0a:
5d:40:b4:d5:34:18:a6:95:75:fc:3e:81:d2:df:e0:
82:0e:e3:94:d0:08:db:15:ee:5b:1a:00:b6:11:0f:
4e:ee:6f:96:ed:8e:cd:db:a5:9e:65:fb:fb:0b:0f:
1b:e7:f9:88:94:0f:f2:d8:44:5c:0f:6a:a4:6b:16:
af:d5:90:d9:f3:62:70:75:af:d9:c5:8e:23:bd:fd:
22:ae:df:a3:7f:01:d7:6a:fb:ef:03:1c:cc:23:1e:
f1:48:4a:7e:87:63:ac:be:fb:8c:0c:6d:4c:f0:cf:
e2:fe:9b:9e:ff:d0:b2:63:0e:b7:c6:d4:84:34:73:
65:9c:7f:20:29:00:f8:24:b1:1d:6c:59:ac:16:a9:
33:86:c6:28:e5:db:f9:36:92:33:a4:a5:a2:cc:6e:
1c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:60:BB:46:67:F0:F0:EF:58:A9:60:6A:FD:D0:CE:AD:36:56:07:AD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xWC7Rmfw8O9YqWBq_dDOrTZWB60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:20:bb:f8:95:aa:d1:50:c5:40:0d:9d:6e:b5:e2:a7:c9:45:
f9:47:f4:c7:3c:8a:d9:1f:06:d4:18:79:50:b7:a3:24:5a:79:
e8:77:4a:0c:34:a4:97:31:81:23:c2:64:a6:0c:cf:43:ad:f8:
ef:cc:d4:ba:a2:3a:81:66:fe:6b:9a:20:9c:35:1b:1f:6f:ae:
03:a0:96:79:cb:75:8a:4b:63:73:1e:1e:ac:ff:44:50:4f:4f:
ba:f5:d1:32:1b:ff:fc:cd:04:36:8c:ad:cb:3e:71:5d:75:71:
6b:34:e5:ee:1e:1b:49:c9:33:71:02:c5:d5:5a:17:5b:85:f3:
01:66:f5:31:97:93:e2:28:f0:2e:d6:10:6b:98:22:12:36:c4:
50:ae:5d:45:8f:31:e4:1d:dc:e2:8b:7a:bd:09:f7:a6:d6:81:
b1:6e:d5:5b:1f:87:73:5f:0c:a2:54:e9:67:10:31:bc:c9:45:
50:57:d1:78:ab:5f:a5:a6:9e:d8:16:8c:d0:21:84:a4:87:74:
80:82:89:94:0c:d4:41:3f:4f:95:b8:6c:9c:68:df:44:64:28:
7e:34:1b:9a:65:8d:08:b8:18:f8:1d:72:8b:ca:94:1d:e6:5a:
3b:9f:9f:79:08:76:65:07:6d:0d:ca:cc:63:50:41:59:00:b2:
04:40:05:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:23:24 2025 by rpki-client