Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xcLIUm4QSGmj5czkYSIFbo1hHr0.roa
File: xcLIUm4QSGmj5czkYSIFbo1hHr0.roa (raw, json)
Hash identifier: qmxEmY6BPLgPIcOysz1mI/blkN2Gg4aaS+1Ke76TaOs=
Subject key identifier: C5:C2:C8:52:6E:10:48:69:A3:E5:CC:E4:61:22:05:6E:8D:61:1E:BD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3348B00E459852DC2B46494231EA5CAF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xcLIUm4QSGmj5czkYSIFbo1hHr0.roa
Signing time: Sun 15 Oct 2023 12:21:23 +0000
ROA not before: Sun 15 Oct 2023 12:21:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:33:48:b0:0e:45:98:52:dc:2b:46:49:42:31:ea:5c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 12:21:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5c2c8526e104869a3e5cce46122056e8d611ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:82:b0:17:c5:22:9a:be:10:5a:ff:b6:e3:
26:ca:8b:09:09:7f:7a:15:80:b0:15:50:e6:1f:71:
ee:e2:67:fd:42:de:5c:d4:4f:6c:f4:a9:41:08:e0:
c8:42:eb:d5:82:28:b8:d3:1c:84:81:d7:ae:59:6d:
ec:6e:2d:54:33:d0:43:71:a3:dc:a1:2f:9f:89:e4:
12:39:86:63:af:bc:48:b5:89:24:d0:5b:8a:d1:e5:
60:5e:d7:2f:be:99:60:43:56:72:c2:ca:16:e0:21:
39:dc:40:3c:66:73:31:d1:3d:eb:cf:de:7c:37:f5:
bc:7b:40:2f:39:86:81:d2:39:c2:b1:e7:1c:ee:9e:
55:cb:f7:b0:cd:a3:4e:48:82:c4:e0:c8:fd:79:5d:
64:d6:de:74:7a:ab:91:92:7e:a9:b8:90:e9:0c:99:
f2:93:68:39:c7:59:40:61:9a:67:bd:9d:85:fd:c5:
3a:7b:53:76:6f:45:49:34:61:5e:5f:f9:12:1a:65:
49:6c:a9:68:1f:64:35:aa:d0:d4:db:0f:fc:93:22:
be:2c:81:da:54:a5:e5:54:1b:59:d9:e9:f2:7f:6a:
e8:cd:b0:c3:fd:07:27:4e:eb:42:9a:56:6a:7c:f0:
b6:dd:b8:9c:e2:9c:c2:95:b8:93:23:c5:a0:39:59:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C2:C8:52:6E:10:48:69:A3:E5:CC:E4:61:22:05:6E:8D:61:1E:BD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xcLIUm4QSGmj5czkYSIFbo1hHr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:9d:ab:85:f9:cf:86:e3:4e:0e:1f:70:0e:67:11:21:c1:52:
a8:f4:ad:af:7b:d8:8d:02:11:7e:29:0d:29:af:79:95:b1:40:
e8:9b:91:fe:c3:90:d4:bc:24:2d:74:d4:a5:d3:ad:fe:d0:24:
2e:ba:45:55:22:d7:73:0a:af:a3:d8:10:6e:71:c3:6f:46:34:
29:f1:b8:25:a1:7e:b4:bd:41:d8:10:dc:dd:4d:61:7d:08:49:
24:e4:03:6e:db:9a:13:ca:21:d3:a0:5b:d5:ac:e8:8b:14:00:
fe:33:ec:50:39:b7:cb:fa:10:2e:4f:d9:05:55:4f:c0:cc:aa:
e3:7f:7a:9b:e7:b7:65:6a:00:8c:d0:02:56:fe:2a:e3:ec:29:
ed:4a:e4:13:02:17:44:01:41:14:f8:11:8f:6a:cd:cf:9c:f6:
a3:07:52:32:3b:20:fe:ed:33:10:f0:77:6b:6a:cf:58:d7:28:
68:3b:e9:e3:8d:f5:71:86:8f:1a:31:b8:6e:29:fa:99:de:3a:
24:be:f0:3e:2c:ef:6d:2f:07:87:46:cd:03:6a:fd:d3:ea:0a:
c5:fb:8f:80:b3:9f:37:6f:cf:df:00:fc:5c:ad:9b:9f:5b:46:
60:ae:f9:c5:0b:e3:24:8b:b9:b9:fa:ef:c8:aa:0a:e5:2f:89:
75:1a:86:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:25:50 2025 by rpki-client