Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/H6TfNIrqXku34H3whHz9Awp7mDs.roa
File: H6TfNIrqXku34H3whHz9Awp7mDs.roa (raw, json)
Hash identifier: cE8kCmdSc6ZTaR1Knewhuw8NbGrHLafriZPt43QkcT0=
Subject key identifier: 1F:A4:DF:34:8A:EA:5E:4B:B7:E0:7D:F0:84:7C:FD:03:0A:7B:98:3B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA7C2E96D7A275DEC964CF59207A00C86
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/H6TfNIrqXku34H3whHz9Awp7mDs.roa
Signing time: Tue 07 Nov 2023 03:10:50 +0000
ROA not before: Tue 07 Nov 2023 03:10:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:a7bd:f015/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a7:c2:e9:6d:7a:27:5d:ec:96:4c:f5:92:07:a0:0c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 7 03:10:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fa4df348aea5e4bb7e07df0847cfd030a7b983b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6c:33:02:af:ad:f1:7c:aa:1c:f2:5e:95:98:
7c:1d:5d:7a:3a:1a:82:64:06:a2:b9:bf:97:f5:e8:
82:41:e8:3c:ba:6f:1a:4c:7e:8a:e0:e0:d0:79:ed:
5b:44:3e:17:35:35:81:9d:ac:86:e0:40:91:a8:4e:
d1:65:5d:be:77:9e:a8:de:e1:1e:d7:f1:48:8f:a4:
17:4f:6c:af:c9:fd:26:6d:83:38:a4:1a:2e:19:bc:
f6:ee:f3:b7:c1:a4:04:57:48:86:73:9b:b1:6e:65:
aa:99:96:02:f4:a4:ef:67:bf:c8:ca:0f:ec:0e:b1:
8a:a8:47:fa:e6:54:82:5a:a0:37:6a:6b:9e:00:35:
53:72:34:d2:db:40:dd:20:55:57:94:47:51:e6:96:
f0:d7:c7:29:5b:0e:c6:97:4c:4f:48:04:98:bf:18:
ca:f9:3a:98:c6:1d:d8:b7:47:df:eb:10:b5:5f:6e:
47:1b:b9:92:fa:99:5a:3b:81:fe:d2:52:ac:5e:a0:
05:f4:c9:ac:d9:87:aa:01:18:f6:9d:9a:13:73:88:
2f:3a:6c:9c:45:a2:f2:85:e8:a8:0f:da:41:3d:b6:
a2:db:9d:bb:a9:2e:3b:a5:5f:a1:65:d4:52:4c:9f:
bd:27:d2:02:a7:16:1a:51:0b:b6:f5:10:39:c9:9f:
99:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A4:DF:34:8A:EA:5E:4B:B7:E0:7D:F0:84:7C:FD:03:0A:7B:98:3B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/H6TfNIrqXku34H3whHz9Awp7mDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:a0:0c:bf:c0:fd:b3:df:0f:ce:b9:32:51:77:2b:a5:4b:fc:
49:75:d0:ae:b1:47:50:66:28:bf:0d:81:26:fc:8a:00:08:d3:
a3:ca:41:ed:df:85:c5:2d:ec:54:8d:91:da:b2:ef:66:19:63:
00:20:ef:5b:54:d1:df:9b:d0:a6:38:70:8a:ed:1f:61:3a:03:
3d:9f:dd:80:9e:65:73:14:45:46:3a:49:fe:80:7c:d2:c6:e9:
19:62:71:e1:14:32:b0:a1:0b:8b:0c:b1:95:9a:e3:f7:ae:78:
29:ab:5e:36:d4:bd:e5:6b:17:e9:cd:50:cd:3a:a9:24:ed:ea:
34:3a:f9:b2:95:37:95:78:82:e0:80:2d:d3:3a:fb:fd:99:63:
82:ca:cd:6a:d0:11:b3:d5:6b:d8:4c:48:76:f6:40:9f:14:27:
79:7f:1c:ac:b4:61:29:bd:88:16:29:81:61:c6:e4:2c:35:29:
ea:06:0f:c8:e2:d3:02:a2:6e:21:94:79:b1:73:bd:29:52:a6:
84:8e:19:f1:eb:ff:38:37:32:72:71:85:f3:43:a3:ce:4a:41:
2e:69:3c:a0:c1:8c:7e:02:ae:fb:05:7e:0b:1a:f9:f6:60:98:
38:1f:e6:79:87:13:a3:99:fa:18:83:06:e3:e1:e8:80:ac:e0:
2a:45:b8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:08:18 2025 by rpki-client