Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1HJlkc319fARFdPWpSxks2ld758.roa
File: 1HJlkc319fARFdPWpSxks2ld758.roa (raw, json)
Hash identifier: HJZwridIKutfB9I2+95UDY52Q57O3q3cHaBmwshQ41I=
Subject key identifier: D4:72:65:91:CD:F5:F5:F0:11:15:D3:D6:A5:2C:64:B3:69:5D:EF:9F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9AAB8DAE3405FC6C5C3E5507DDAC623F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1HJlkc319fARFdPWpSxks2ld758.roa
Signing time: Sat 04 Nov 2023 14:10:15 +0000
ROA not before: Sat 04 Nov 2023 14:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9a:ab:8d:ae:34:05:fc:6c:5c:3e:55:07:dd:ac:62:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 14:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4726591cdf5f5f01115d3d6a52c64b3695def9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:10:52:39:6a:28:4a:ae:d0:42:c7:b8:6c:
30:c3:c8:db:ee:2b:b9:fe:15:8a:c1:88:b8:71:e2:
8f:99:c5:88:a7:02:07:40:68:19:e9:7b:d3:06:c5:
82:e7:ff:c1:c7:c4:dc:cc:47:63:07:89:d4:3e:24:
24:9e:a8:b7:8e:5d:64:ec:8f:51:59:d1:a6:8e:4b:
95:6d:45:2a:a4:41:8e:1f:8a:1f:e6:b5:b7:16:9b:
bd:46:22:e4:a3:40:79:ac:20:0f:ca:19:e5:42:51:
78:06:20:ab:37:b3:ad:e7:d5:09:f9:dc:41:ed:0c:
2b:06:e2:96:e9:f2:7f:7c:2d:f4:7a:99:e6:19:19:
a0:c9:df:d6:7c:68:f8:5d:41:87:e0:20:f6:9d:6d:
8b:f1:a6:bb:6e:c9:03:68:83:bb:55:7f:05:e4:bb:
37:59:cb:30:6a:75:6a:8e:c8:ce:73:6d:ff:11:12:
7c:2d:f9:78:b0:af:59:ac:d9:72:80:a1:a3:96:df:
3a:9d:aa:ba:7b:0e:f9:6b:33:78:7b:33:3e:ba:26:
a1:31:b8:7d:a8:08:eb:89:4c:bf:d2:ba:36:6a:00:
cc:c4:04:a1:0c:93:52:de:a5:04:57:24:20:c5:69:
25:b1:d3:d9:b4:b3:50:7e:7f:64:8a:c0:5a:f1:53:
70:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:72:65:91:CD:F5:F5:F0:11:15:D3:D6:A5:2C:64:B3:69:5D:EF:9F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1HJlkc319fARFdPWpSxks2ld758.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:98:07:28:29:ec:0d:a2:70:c1:3c:74:1c:c1:63:d1:94:f3:
78:af:89:6d:b8:26:72:70:06:c5:fc:64:eb:6c:71:44:8c:89:
73:df:29:af:8a:91:1d:61:76:84:9c:5e:53:f4:b7:a6:b4:00:
46:87:69:8a:a3:6d:f3:be:4f:35:ed:2a:8f:7e:d1:4d:d4:a0:
10:c9:26:c5:20:52:95:f6:35:b7:03:b6:a9:d2:cd:ef:e6:52:
3c:db:ef:fc:b4:d9:ab:a0:b7:fe:ea:c5:4b:18:75:39:6c:50:
ff:2c:6b:3a:dc:98:48:86:9d:49:aa:0a:00:2a:75:8a:03:8b:
b3:ae:fa:d0:55:6a:c5:5f:d1:4c:16:c3:02:06:d6:1e:6c:d0:
00:07:40:c4:bf:af:e7:46:6d:82:d8:33:f2:5e:58:e1:59:0e:
78:a7:a2:72:c0:4f:92:76:03:84:5a:58:5d:db:d1:aa:92:9e:
84:9f:bc:75:0e:9d:13:b4:b9:92:0f:ab:7b:77:37:f2:73:04:
dc:92:e5:00:d2:68:f6:39:72:cd:e8:b7:e9:9f:bb:51:18:5b:
ca:4e:a7:72:c2:77:79:80:3c:14:b5:20:fb:98:72:59:3e:82:
ee:1a:2e:fd:17:d7:34:22:1f:12:e9:c2:60:e8:54:19:1f:11:
b5:ed:d8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:56:39 2025 by rpki-client