Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5sLbApCQXrSWfubdc5-eo1xcqOc.roa
File: 5sLbApCQXrSWfubdc5-eo1xcqOc.roa (raw, json)
Hash identifier: aaIhjuYpUPTUvmujV5Z9Xz1+XegBmycIgqzsnVUe2Xw=
Subject key identifier: E6:C2:DB:02:90:90:5E:B4:96:7E:E6:DD:73:9F:9E:A3:5C:5C:A8:E7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0FCED1D88DE6B1A9FA97D33E02F67E5E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5sLbApCQXrSWfubdc5-eo1xcqOc.roa
Signing time: Mon 27 Nov 2023 08:04:21 +0000
ROA not before: Mon 27 Nov 2023 08:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:fce:c46e/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0f:ce:d1:d8:8d:e6:b1:a9:fa:97:d3:3e:02:f6:7e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 08:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6c2db0290905eb4967ee6dd739f9ea35c5ca8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:95:87:b9:9c:94:07:13:37:f0:b2:f2:1e:
87:3a:f7:56:6b:8f:c9:a2:c6:6c:2a:e8:0e:6f:e3:
d7:b2:cd:46:01:bd:22:3c:cc:3f:59:a5:d8:e9:d3:
9b:8c:2c:b6:ec:e8:36:0a:1a:9a:04:50:ae:20:93:
fb:f5:1b:ff:f0:11:0a:e0:9b:bf:93:33:ff:bc:8c:
19:e5:6c:ba:cb:a0:72:2f:28:09:45:f7:1d:1f:8f:
e8:a9:2c:17:49:9a:51:cc:b9:f9:35:95:9d:0c:7b:
31:21:ba:52:69:e3:b6:d5:18:16:ff:93:8d:f9:9f:
17:30:22:2a:1e:38:38:80:7f:0d:b5:ee:d4:4b:71:
b2:5c:d8:ba:24:70:6b:b1:e9:2b:6f:5f:0d:ee:d7:
ee:08:c3:78:ea:a3:50:09:db:ef:97:b2:6f:de:1f:
29:69:65:b1:1f:67:e7:77:bf:eb:b0:20:7c:bd:7e:
36:83:d1:78:08:76:62:63:d2:dd:0a:ac:4e:64:c8:
a1:bf:e1:9d:60:f8:ca:4b:85:ed:57:a1:b9:12:d3:
8d:2e:42:fd:6d:3c:9c:02:2b:3a:0e:d5:64:d2:33:
14:51:4a:91:d6:98:22:47:1c:81:c3:d4:4b:19:f4:
85:ce:65:06:a1:8b:aa:c8:ef:95:b9:44:1d:d7:22:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C2:DB:02:90:90:5E:B4:96:7E:E6:DD:73:9F:9E:A3:5C:5C:A8:E7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5sLbApCQXrSWfubdc5-eo1xcqOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:fa:b7:a5:73:cd:e3:86:bf:c6:16:df:39:76:2f:19:0b:3d:
db:bd:f4:29:bd:67:d1:64:59:00:75:ca:05:79:1c:6b:b9:df:
46:f2:a2:47:b1:a5:5d:47:24:b8:c6:aa:f6:31:21:79:ca:bf:
4e:ee:9a:b5:fa:9a:73:73:0c:7f:b3:f1:4d:c7:04:1d:74:bd:
0d:9d:fc:15:bc:36:46:cf:8a:2e:38:87:55:32:1f:c2:b1:d7:
22:88:4c:4f:2f:ba:9f:7b:4f:31:18:f0:7b:fe:70:7c:62:14:
3e:e8:ab:84:b4:fb:0b:11:ce:0a:1a:44:3b:13:6a:89:f1:80:
be:19:99:7a:e7:20:75:1e:c1:0d:eb:3e:2c:01:d0:04:59:43:
09:5b:15:61:05:96:ad:b3:e4:84:5f:03:37:6d:15:12:fb:13:
bf:7d:de:31:1d:9d:31:86:90:2b:b0:53:07:8f:94:d5:30:dc:
44:94:93:f1:b1:b7:d7:8f:31:f5:d9:79:b2:5f:66:74:c4:db:
53:17:7a:98:54:d4:a3:17:b1:a2:a0:ec:a1:8b:2a:8d:22:0e:
0b:40:46:73:75:74:40:cb:81:e3:dc:89:3e:00:e8:35:c6:af:
e4:2e:88:58:e4:47:6f:97:33:be:0d:6c:f9:ce:b7:08:a1:8e:
79:18:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:47:18 2025 by rpki-client