Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HFQY8ypkI1g0Pd2FExBznaFLBSI.roa
File: HFQY8ypkI1g0Pd2FExBznaFLBSI.roa (raw, json)
Hash identifier: uW/p2VzbHVJzvzOFjVCxrYKzPTBWZ/EPt1ErzVuV0LQ=
Subject key identifier: 1C:54:18:F3:2A:64:23:58:34:3D:DD:85:13:10:73:9D:A1:4B:05:22
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC0A71699B5416229DC6B8E7726DDECFF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HFQY8ypkI1g0Pd2FExBznaFLBSI.roa
Signing time: Sat 11 Nov 2023 23:10:57 +0000
ROA not before: Sat 11 Nov 2023 23:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c0:a7:16:99:b5:41:62:29:dc:6b:8e:77:26:dd:ec:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 11 23:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c5418f32a642358343ddd851310739da14b0522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fc:05:fc:33:e2:ce:29:ef:88:e1:94:8d:8f:
13:5c:c4:2e:24:08:9a:bd:af:47:8c:53:47:15:62:
99:aa:a8:91:18:62:43:2b:2b:80:ca:e4:25:fd:96:
2e:b6:da:96:9d:bc:ee:e6:93:4c:10:d0:83:d1:96:
24:c7:13:07:5f:c3:88:bd:7e:42:60:85:81:68:ab:
7c:d7:81:c6:2b:18:82:e0:e6:a8:e2:38:68:24:e8:
fc:73:c3:af:0e:58:04:a0:eb:c2:0b:6b:5f:a5:b9:
03:bf:93:3d:dc:5a:64:4b:eb:06:d8:89:88:a0:7c:
3b:8f:6c:5f:7c:26:a3:ca:23:e0:a8:65:dc:d1:8f:
a0:cd:57:96:72:4d:79:be:5c:30:fd:dc:c7:10:4d:
56:f4:9e:fd:ce:1a:ff:00:40:9e:fa:6b:e0:ac:04:
b9:e5:3a:f6:09:ed:65:d8:a5:2d:7f:cc:9b:c2:2c:
77:9e:30:58:cb:7a:42:8c:40:88:c1:bc:bd:9b:68:
34:03:fa:8a:ce:09:8b:18:b6:d8:da:15:84:a6:af:
f5:7e:86:cc:05:d3:dc:72:4b:aa:66:55:9e:2b:3e:
72:d0:30:c7:17:a4:b1:77:05:65:e9:42:e1:dc:36:
87:b7:55:f5:9f:e6:17:d8:d3:03:18:0a:f2:29:3f:
8a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:54:18:F3:2A:64:23:58:34:3D:DD:85:13:10:73:9D:A1:4B:05:22
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HFQY8ypkI1g0Pd2FExBznaFLBSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d1:2c:c0:1e:59:f3:5a:11:c0:77:fe:30:76:ec:65:30:f2:f8:
0e:56:1e:33:2b:57:d1:71:36:2d:c1:cc:a5:67:af:7c:44:2e:
29:4e:3a:8c:5a:5e:3d:ad:33:3b:98:50:62:f4:14:96:c0:77:
0d:34:ba:92:5a:42:5c:ee:c6:21:98:23:46:49:47:97:06:f1:
bc:de:79:f1:bf:f9:fa:c2:dc:14:c4:4f:19:8e:72:f3:32:1b:
db:fc:77:5e:75:c8:4e:70:17:b2:5e:0a:10:b5:c4:dc:27:57:
6e:b6:18:d5:f5:50:1a:ba:ea:12:91:fb:d7:9c:42:f8:35:2c:
32:04:79:be:2b:0d:77:db:07:52:42:03:1f:9a:6e:b0:09:f0:
7b:63:8b:e1:b9:d5:65:08:28:b4:b9:c4:8d:e2:ec:fe:a6:60:
bc:05:29:1d:72:42:04:92:9a:71:79:92:7d:16:c8:7f:4a:06:
66:d5:22:94:90:5b:6c:ba:cf:c9:96:1e:3c:03:e7:c4:21:a2:
a7:fd:3b:13:12:aa:16:e0:d9:b4:33:4c:55:73:1b:e2:65:5e:
1f:98:e2:e7:fc:08:c0:42:af:86:9c:a7:e4:44:7f:05:1b:05:
6a:e5:56:96:7f:73:29:3e:cb:98:bb:86:b1:82:e9:3e:27:d8:
49:f3:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:43:22 2025 by rpki-client