Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HULa9oqj1KcW0SbYbmxVQRDjDPA.roa
File: HULa9oqj1KcW0SbYbmxVQRDjDPA.roa (raw, json)
Hash identifier: r+x9lJjNm/KqCxgdT8k8sjvjNV/Ih+ergQJO8oxfhuA=
Subject key identifier: 1D:42:DA:F6:8A:A3:D4:A7:16:D1:26:D8:6E:6C:55:41:10:E3:0C:F0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B81960BA5D74BFA0ADEF130F0C65D63CE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HULa9oqj1KcW0SbYbmxVQRDjDPA.roa
Signing time: Mon 30 Oct 2023 17:16:16 +0000
ROA not before: Mon 30 Oct 2023 17:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:96:0b:a5:d7:4b:fa:0a:de:f1:30:f0:c6:5d:63:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 17:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d42daf68aa3d4a716d126d86e6c554110e30cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:eb:a9:ba:4b:53:f0:ad:98:bf:51:95:f4:
45:76:8e:cb:8a:0d:89:11:2c:f4:b8:26:ae:94:96:
e6:77:05:77:15:77:77:80:01:c9:0a:31:01:5c:b2:
7b:dd:1f:32:0a:c3:84:d3:50:ee:ef:bc:9c:b2:c1:
a7:e4:ed:18:c8:79:8f:aa:b3:af:25:b9:d8:f0:70:
22:78:5d:7b:2b:eb:7a:f6:72:7e:34:67:95:e9:d7:
da:5b:13:02:ca:ad:65:a1:54:fb:88:b4:82:dc:d3:
7b:db:be:aa:f0:65:11:96:78:6f:8a:1e:f7:55:69:
b8:06:a5:6e:49:8c:69:05:09:02:27:7d:82:a9:99:
5e:c8:92:c1:c5:12:ce:99:3d:63:28:e6:d3:6d:24:
4e:50:15:64:a8:a9:e0:9a:64:72:88:be:e7:ac:40:
4f:82:a2:7d:b0:fb:40:1c:f7:eb:16:a5:18:e7:6d:
cc:97:11:77:a7:54:07:03:ac:b1:a3:84:81:06:7b:
7d:16:8a:1b:fb:f6:02:ae:8b:47:73:92:f9:51:a5:
af:27:c0:08:7c:47:4f:17:d2:11:91:da:4e:b9:7a:
d6:a0:7f:fb:7e:be:2a:ad:8d:a9:f8:42:18:7f:9c:
eb:f3:0b:97:82:16:1e:b3:ce:aa:8a:d5:24:09:bd:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:42:DA:F6:8A:A3:D4:A7:16:D1:26:D8:6E:6C:55:41:10:E3:0C:F0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HULa9oqj1KcW0SbYbmxVQRDjDPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:f5:e6:44:e9:0f:15:27:f7:47:62:3d:bd:29:fc:12:86:2e:
e6:6c:94:87:ab:7f:06:6a:2c:5a:29:52:8c:9c:d2:83:11:6a:
d5:8b:2a:51:ab:3c:c5:19:0c:8e:a0:09:94:ba:6e:6d:1a:01:
3a:d7:46:2d:8c:ca:fc:7d:fc:cc:72:56:02:74:cc:70:ce:77:
ea:84:71:41:9a:e9:cb:0c:24:49:94:39:79:6b:e6:10:1d:08:
25:e4:9a:a9:0b:d0:25:3b:23:84:64:04:8b:47:42:71:98:b3:
c9:cf:1c:be:01:d3:ef:93:1b:6b:19:e4:9c:27:0b:48:60:87:
47:d6:25:83:2a:7c:37:9e:4f:da:82:32:0f:34:e8:b2:69:96:
76:a5:ff:ed:e6:19:29:65:fe:18:65:0f:37:02:d5:ce:1e:91:
03:5c:a1:dc:70:29:2c:b7:9c:15:1e:24:69:57:a0:3c:bd:4d:
55:74:c0:78:ff:3b:37:a8:7a:98:c2:a2:c8:95:ec:cf:16:48:
13:02:54:9e:fe:4c:37:63:9e:ba:bf:99:ff:89:58:7c:4f:9b:
52:b2:f9:bf:e4:7b:5c:71:bf:2d:2a:55:38:3e:71:27:e5:a5:
c7:6f:7e:64:b8:9c:82:e0:27:1f:f1:a0:de:a3:40:65:2a:bd:
8f:9e:9b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:10:22 2025 by rpki-client