Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CoXC-d8k86oM1jMjWJ5hAWJ3Fws.roa
File: CoXC-d8k86oM1jMjWJ5hAWJ3Fws.roa (raw, json)
Hash identifier: /mb42TT7LOC37mcUydihJOEBn8abquqwVar5/IM48a0=
Subject key identifier: 0A:85:C2:F9:DF:24:F3:AA:0C:D6:33:23:58:9E:61:01:62:77:17:0B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF7FE52EAD1D4409E1E4E70B33CE77546
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CoXC-d8k86oM1jMjWJ5hAWJ3Fws.roa
Signing time: Wed 22 Nov 2023 17:05:21 +0000
ROA not before: Wed 22 Nov 2023 17:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18b:f7fe:1231/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f7:fe:52:ea:d1:d4:40:9e:1e:4e:70:b3:3c:e7:75:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 17:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a85c2f9df24f3aa0cd63323589e61016277170b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:46:3d:d7:29:a1:ee:c4:d5:2a:36:d4:89:14:
e4:23:03:a0:e8:f7:32:2c:fc:08:13:18:ba:47:65:
57:60:73:f0:7c:b3:bf:44:b6:2d:51:99:d4:05:16:
43:bf:2c:fe:7c:72:08:63:de:1a:d7:22:b6:91:f9:
51:bd:38:5d:58:93:18:78:dc:1e:72:10:c5:ca:c6:
30:9e:2c:6b:d7:8a:df:5e:4b:e1:fc:64:fc:9e:34:
dd:82:40:3e:f6:4f:99:b1:d6:e1:06:62:b8:ba:eb:
74:5f:9c:23:a2:a3:6a:6d:38:70:de:92:a0:2b:d8:
68:24:50:de:f2:9e:64:7a:f6:0d:0d:c1:98:c4:77:
9b:a4:81:7a:2c:86:08:08:6a:6e:00:13:3f:8c:f3:
bb:e5:04:41:7e:f1:a5:5f:1d:5f:76:f4:c2:84:6c:
e9:50:0b:07:40:1d:4d:27:25:62:4b:a7:9c:4f:0e:
1c:76:41:3c:05:60:1b:dc:1e:ca:26:03:1a:8b:02:
9e:21:ff:ff:fa:2b:56:4d:35:bf:8f:a2:4e:29:d7:
50:c5:99:7a:90:56:29:be:b7:91:0f:ae:24:7d:6c:
03:8f:be:5c:c7:3c:31:a3:bd:84:ab:a5:be:77:0d:
33:82:10:a8:3a:00:01:b9:f7:00:31:2b:ff:76:21:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:85:C2:F9:DF:24:F3:AA:0C:D6:33:23:58:9E:61:01:62:77:17:0B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CoXC-d8k86oM1jMjWJ5hAWJ3Fws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:e7:f6:cb:a6:34:30:2c:16:66:54:da:35:99:55:43:58:af:
1e:d2:3a:9d:08:25:18:63:47:72:47:b6:b4:89:c6:46:d8:b2:
90:f8:1b:05:9f:bd:3c:f2:4e:ce:74:f0:c1:1d:94:05:48:24:
93:8d:7b:c1:16:42:43:2e:0d:67:3b:57:3c:df:b8:fe:65:19:
a3:78:82:34:0d:03:24:68:a3:91:02:06:94:87:fd:a4:0b:e1:
a3:ef:4b:61:e4:c2:a2:25:68:6f:c8:42:ff:cd:ae:39:23:0a:
75:5b:be:58:d6:18:5f:96:b2:db:83:ed:01:e0:17:d5:a5:21:
69:48:d4:85:f4:43:0b:47:72:cb:e6:b3:e5:32:6c:99:d6:a2:
48:29:59:47:16:6e:5c:e9:6e:b4:26:27:70:01:d9:37:a7:f6:
80:d6:6e:b7:93:29:7e:5e:71:a7:26:c8:8b:24:e6:05:45:83:
a1:7e:c8:2a:74:69:fb:43:c9:2f:2a:f7:93:b9:48:f1:c3:dd:
75:80:7b:ff:d4:27:1d:45:37:1b:8b:72:55:75:0b:3c:12:84:
ea:4b:80:a6:be:f2:52:94:e3:13:12:77:2d:fa:ea:fb:93:31:
dd:d0:e2:75:75:cc:bb:b3:02:6d:02:94:f6:a5:18:81:ef:41:
77:74:cc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:20:52 2025 by rpki-client