Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5PQnoxUu3T19-5CjLbexCxhgzPI.roa
File: 5PQnoxUu3T19-5CjLbexCxhgzPI.roa (raw, json)
Hash identifier: HlllEvtgdRQP1hdaJ45bO4uPCXbyRl/RrGvp3vZBFvA=
Subject key identifier: E4:F4:27:A3:15:2E:DD:3D:7D:FB:90:A3:2D:B7:B1:0B:18:60:CC:F2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4CC7E7AA6C2286EDA7A6D185387A83E2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5PQnoxUu3T19-5CjLbexCxhgzPI.roa
Signing time: Fri 20 Oct 2023 11:10:51 +0000
ROA not before: Fri 20 Oct 2023 11:10:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:4cc1:dd4e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:c7:e7:aa:6c:22:86:ed:a7:a6:d1:85:38:7a:83:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 20 11:10:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4f427a3152edd3d7dfb90a32db7b10b1860ccf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:b4:34:3c:95:6c:42:16:63:32:33:f5:1b:
40:90:75:14:15:0d:76:cc:cc:eb:f7:85:a3:5a:d6:
09:c5:50:48:cd:7e:d8:25:35:50:45:bf:94:24:3e:
77:2d:d1:f8:aa:f9:50:73:ab:45:ab:73:f1:fa:21:
1e:b7:75:ac:86:3d:4a:53:e7:e8:0f:7d:e9:58:10:
84:b4:34:b8:27:15:94:92:97:e8:4d:1b:29:38:41:
ba:43:21:88:ce:0a:2f:4b:3a:92:f5:26:93:5f:dc:
de:45:17:cb:90:f4:ca:67:ac:8d:6e:b6:cc:2f:18:
e4:11:12:25:9f:cc:91:80:5b:0d:96:9b:d9:64:73:
63:91:99:5b:13:2f:86:e7:18:4e:a5:fe:eb:49:f3:
64:3e:1a:2a:69:ed:4a:34:45:55:3f:cf:71:4d:cf:
0f:4d:2a:3f:d6:71:1e:65:53:64:04:79:d5:7f:32:
24:64:ae:7e:7f:21:cf:f1:04:11:bb:13:67:c2:5e:
ad:fb:6f:69:db:68:73:44:9d:11:64:3d:69:a9:50:
e0:1d:db:6c:ee:f9:8c:44:a5:55:b0:d1:82:d7:c2:
29:dd:e2:d0:c6:91:7b:69:e9:27:ea:ae:e8:ba:bc:
ee:d1:a1:10:ab:6f:bd:91:e9:f9:82:c9:12:03:86:
b6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F4:27:A3:15:2E:DD:3D:7D:FB:90:A3:2D:B7:B1:0B:18:60:CC:F2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5PQnoxUu3T19-5CjLbexCxhgzPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:46:05:76:8c:71:54:ff:12:6a:19:57:bc:7b:0c:8e:22:69:
49:d2:16:d5:bc:c5:37:fd:4d:a3:74:0c:c2:23:f0:c3:15:0a:
e4:11:df:d9:0a:ef:48:18:cf:f3:50:40:44:ab:bf:93:72:6a:
2f:94:ca:58:78:32:be:3b:bc:fb:b4:bc:c8:87:95:2d:23:ad:
b1:d1:48:85:78:72:2e:9c:0d:ce:f5:16:a7:92:76:ba:b2:64:
fe:57:c1:ad:dd:0a:76:c8:20:01:5c:7e:b2:4a:8c:ea:2e:f8:
20:3f:e0:6f:26:09:a5:3c:8f:54:7e:ef:4e:bb:09:62:2b:6f:
db:89:96:41:95:1c:31:e6:89:9e:6f:39:62:a6:22:0b:c1:11:
be:51:16:a6:3c:72:ea:ff:9d:91:8e:50:ce:52:9d:d8:f4:ee:
1c:0c:86:86:3a:d7:80:ab:8e:b8:e1:ab:ba:e0:c1:49:e0:44:
f9:a8:71:59:e0:24:2f:ed:e3:a1:52:67:e1:ef:98:87:84:d1:
36:48:87:cf:ef:5d:52:82:1b:48:98:93:30:5f:1f:1f:34:dc:
f0:99:13:11:8f:cc:70:b5:04:8f:99:25:5b:13:b5:f0:37:13:
74:f4:f3:55:87:d8:af:40:c4:b3:91:2c:13:4a:b5:b7:f9:27:
72:e1:7b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:13:45 2025 by rpki-client