Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5lmeZb0PlqIdw4JWAumBb-SEOCs.roa
File: 5lmeZb0PlqIdw4JWAumBb-SEOCs.roa (raw, json)
Hash identifier: QT+dPOd6j9ciIXRwduInaelhd/dzuA91yxEbHJ/dJoQ=
Subject key identifier: E6:59:9E:65:BD:0F:96:A2:1D:C3:82:56:02:E9:81:6F:E4:84:38:2B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDF881D606C59A1F2105C887AEFC32F78
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5lmeZb0PlqIdw4JWAumBb-SEOCs.roa
Signing time: Fri 17 Nov 2023 23:05:21 +0000
ROA not before: Fri 17 Nov 2023 23:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:df87:50d6/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:df:88:1d:60:6c:59:a1:f2:10:5c:88:7a:ef:c3:2f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 23:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6599e65bd0f96a21dc3825602e9816fe484382b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:15:f9:cb:77:5c:20:f4:3a:87:c4:e5:b2:
9d:48:b2:76:c3:72:57:c0:d7:b7:7a:1f:0a:89:a4:
64:b3:0a:8a:71:a3:0c:00:0d:97:f3:66:e6:15:16:
bb:fc:3d:84:75:53:7f:21:88:19:80:b3:7b:98:b4:
48:aa:36:d0:30:63:81:c5:90:e2:06:7e:06:82:da:
39:16:d9:7e:21:48:e5:a2:6b:e0:da:80:40:1e:01:
a3:61:a7:0d:cd:08:cc:a7:a2:ad:d9:e3:78:cb:41:
98:91:79:07:31:6e:d4:1f:66:9c:c0:e3:6b:3f:9f:
e8:ff:33:b3:c6:40:8b:c8:ee:22:8c:8a:09:af:74:
2b:54:76:c4:4d:da:16:27:cd:ef:b1:48:f2:d3:53:
e3:87:89:5c:71:3f:5b:fa:b0:27:bc:93:cf:a3:6d:
2f:95:14:8d:22:d7:25:94:a1:ec:bc:25:38:4d:28:
59:f7:6c:fc:94:da:c2:98:da:0b:6f:9b:bf:8a:28:
bf:98:98:3e:16:cf:2b:45:cd:94:f5:50:3a:3c:71:
77:c1:b9:ea:20:12:dc:ed:37:df:30:8f:69:42:f3:
61:4a:59:4e:5d:55:f5:ef:91:c2:3d:8c:51:55:b7:
ac:a2:fe:f1:19:56:5a:2e:67:f6:67:8c:6d:06:7b:
1f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:59:9E:65:BD:0F:96:A2:1D:C3:82:56:02:E9:81:6F:E4:84:38:2B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5lmeZb0PlqIdw4JWAumBb-SEOCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c0:6c:d3:ff:13:64:63:7d:a4:43:87:4f:4c:af:be:20:4b:1b:
60:48:fd:66:c8:1a:cc:5f:3e:4f:90:7d:ad:34:1e:c8:48:e0:
d3:73:b7:f2:2a:45:d5:30:8f:d6:fd:9c:12:94:6d:ba:22:82:
1b:65:9b:13:94:c5:eb:cb:0e:ad:5c:2a:d6:45:f8:a7:8c:b9:
3b:8f:8c:44:4e:ef:c6:99:b4:f5:4b:a4:a2:18:1a:c7:ed:9a:
46:3c:14:08:27:cc:4d:5a:ad:69:1e:72:29:97:7e:e0:be:ef:
53:25:46:a4:b7:4e:b6:10:4e:17:5a:2c:a7:b2:d4:56:48:91:
da:0f:98:0b:1a:79:fe:99:44:86:94:00:96:6d:11:fd:5b:57:
06:30:78:62:90:80:6d:41:b0:d8:f1:34:45:0b:d9:f3:69:cc:
32:1d:30:3c:60:00:9f:c8:84:25:c9:3f:cb:8f:c9:2b:95:f6:
a3:6c:af:3c:9c:16:a0:cb:55:18:d1:d3:90:ac:07:c0:5f:aa:
01:d7:66:b1:96:6c:2d:09:f3:bf:26:8c:33:14:be:2c:79:8d:
14:9c:8a:78:fd:5f:1d:ba:21:35:c7:ed:43:5e:bd:6d:a6:14:
cd:79:a0:ec:eb:92:df:a8:d8:d8:c5:fa:4f:74:67:df:62:e7:
fe:7d:84:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:39:37 2025 by rpki-client