Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0HU_VxZvFgHAsF--9k4hoiFZ7r4.roa
File: 0HU_VxZvFgHAsF--9k4hoiFZ7r4.roa (raw, json)
Hash identifier: i2+lQMoHqafvA5QH60EdwIB6ElUYNZj5pOFnJMhlxfU=
Subject key identifier: D0:75:3F:57:16:6F:16:01:C0:B0:5F:BE:F6:4E:21:A2:21:59:EE:BE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6874A1B2447EA974D917B34673E240AB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0HU_VxZvFgHAsF--9k4hoiFZ7r4.roa
Signing time: Wed 25 Oct 2023 20:09:15 +0000
ROA not before: Wed 25 Oct 2023 20:09:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:74:a1:b2:44:7e:a9:74:d9:17:b3:46:73:e2:40:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 25 20:09:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0753f57166f1601c0b05fbef64e21a22159eebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6b:9e:92:e5:87:18:d5:21:81:c1:e2:4f:cd:
37:15:ff:cb:fc:cc:54:c8:52:d6:c1:b2:e8:af:f7:
e5:0c:4f:06:56:77:6e:20:10:27:76:a8:70:08:32:
cd:da:f1:53:24:cf:ae:02:38:28:4a:09:4e:ff:20:
f2:44:a8:b3:78:94:ac:d1:c3:ce:b0:8f:fd:07:a7:
8b:13:2b:4c:3f:9b:de:52:b3:60:31:44:ea:6e:f1:
64:50:2d:ce:15:58:7f:96:b7:f0:1c:12:b6:50:7a:
86:92:60:9f:e5:4e:71:62:d6:22:72:1d:70:47:40:
28:24:5a:a7:2c:b4:be:2b:32:01:16:ff:79:67:33:
82:4e:d1:ad:90:49:49:2d:32:3d:3d:88:62:0c:ac:
aa:12:21:97:bf:4c:ad:75:de:31:08:a4:ba:52:14:
64:98:2b:70:3c:04:60:75:e1:06:df:3f:38:28:0e:
9b:9b:71:4e:94:1a:40:62:cd:9b:26:8f:8e:a5:70:
c0:53:3e:79:76:c1:e7:28:38:55:9e:9e:e1:ea:d5:
9a:82:b7:d5:0f:58:86:34:c7:d4:c6:f8:07:18:f5:
ec:fe:2f:83:8a:cd:d8:61:54:50:76:e9:be:d7:29:
2a:23:f7:dd:4a:d8:19:f9:b7:24:62:5d:42:83:fd:
3f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:75:3F:57:16:6F:16:01:C0:B0:5F:BE:F6:4E:21:A2:21:59:EE:BE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0HU_VxZvFgHAsF--9k4hoiFZ7r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:41:05:6f:c2:90:d2:35:50:96:3d:3a:a7:49:04:50:50:ee:
6d:c9:9c:8d:64:cc:2c:03:b1:53:5a:ca:02:1c:82:57:1e:9b:
ad:ff:4d:ed:9d:cb:28:93:0b:f1:8f:f4:4c:a3:d6:69:1f:c2:
57:62:39:d0:dc:8b:e2:15:54:e3:2c:8b:6d:04:55:75:2b:7a:
22:45:0e:e9:6a:3a:48:dd:a9:d5:30:b9:c0:d2:7e:cc:8d:c8:
e5:72:ff:0c:d4:9a:76:ba:3b:ff:4c:df:b8:54:a9:82:b3:af:
82:a9:9b:98:bd:f3:35:75:5a:38:7f:2e:94:72:bb:e4:85:44:
35:d3:2e:c8:27:31:52:42:b2:29:08:9a:fd:f3:4c:85:e3:80:
51:ce:78:4a:bc:b5:fc:cc:fa:7a:f9:d9:fa:f4:28:61:b1:33:
eb:e3:69:e7:b2:b2:27:1d:79:f5:a7:0c:01:e9:f8:9c:bb:64:
6f:54:28:3a:bf:47:69:47:e7:97:b7:4f:d9:1b:49:2c:49:b5:
c1:d4:3b:bb:06:34:4b:30:19:87:3b:70:fd:1a:3c:08:4c:73:
0a:69:b6:79:e9:52:da:df:7c:17:9c:3a:7e:e3:b4:a5:1c:18:
29:77:42:20:a8:ed:bd:76:e8:fa:c9:c8:af:c5:92:db:93:71:
05:3c:a3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:54:58 2025 by rpki-client