Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/X12o3A2oodpergBbHBF7ExwJjpE.roa
File: X12o3A2oodpergBbHBF7ExwJjpE.roa (raw, json)
Hash identifier: JZb3+921oUwXwaN66AB88Hw7w94V3k5Mn/VZi9sF7PY=
Subject key identifier: 5F:5D:A8:DC:0D:A8:A1:DA:5E:AE:00:5B:1C:11:7B:13:1C:09:8E:91
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2EC220A0E1300E458BC0E8D181E8257C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/X12o3A2oodpergBbHBF7ExwJjpE.roa
Signing time: Sat 14 Oct 2023 15:15:55 +0000
ROA not before: Sat 14 Oct 2023 15:15:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2e:c2:20:a0:e1:30:0e:45:8b:c0:e8:d1:81:e8:25:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 15:15:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f5da8dc0da8a1da5eae005b1c117b131c098e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:f3:06:b1:da:b7:ff:51:7c:22:ad:80:65:
10:fe:69:1a:df:a7:01:93:f8:23:71:3f:d2:03:cd:
61:a0:bf:34:69:ad:76:6d:5a:97:b7:ed:d4:67:48:
7d:02:f6:c8:0f:76:17:62:28:90:7d:3f:30:05:ab:
42:ad:97:06:71:00:85:63:9a:fd:2e:95:b5:41:e7:
f2:a1:9c:75:a2:94:26:f4:f8:58:47:b5:59:e2:3a:
79:d6:d5:1f:d1:a9:d5:fa:8f:3e:20:49:11:32:48:
9d:f8:72:3a:c3:7c:60:29:d1:74:9b:48:95:95:51:
e3:a2:a3:80:ac:c6:dc:90:39:04:dc:4f:75:cd:7f:
99:ac:0d:e0:85:a5:62:23:b7:2a:80:98:cf:ee:70:
4e:53:25:b3:eb:76:b1:97:f9:bd:55:23:71:ad:08:
53:ff:2a:4b:01:fc:8f:c6:49:82:23:84:af:27:f6:
ff:15:e7:bf:1c:95:5d:18:b3:03:c2:28:93:5d:17:
fb:f2:38:95:73:49:73:8c:e0:8f:44:ab:9e:76:6a:
63:27:6b:b0:ad:9c:e3:8a:e7:36:5e:50:f6:72:96:
b7:2b:bb:fc:dd:e8:72:90:a5:34:f2:49:08:ec:cd:
5f:cb:aa:33:71:01:f3:87:ee:d5:ef:e8:30:f9:39:
da:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5D:A8:DC:0D:A8:A1:DA:5E:AE:00:5B:1C:11:7B:13:1C:09:8E:91
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/X12o3A2oodpergBbHBF7ExwJjpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:1f:dc:52:90:7f:87:16:a7:97:eb:51:4b:40:75:bc:f9:38:
79:e1:62:cf:26:ea:15:ca:6b:9b:67:23:63:15:2b:22:14:09:
16:dc:80:b3:0c:19:cb:07:fa:b7:b0:08:5b:b3:2a:7d:7f:05:
dc:c4:4e:28:25:44:f1:66:73:e4:18:50:ec:8a:11:90:d1:55:
20:59:74:19:02:73:fd:1d:9a:e0:d9:73:15:e2:8e:d8:d4:0c:
df:6a:a1:b7:71:95:15:84:2f:d6:ec:be:63:f0:0a:0b:af:f1:
fb:f8:ea:18:35:22:cf:5c:09:b6:97:02:9d:f0:54:de:5b:4b:
a8:66:a3:56:42:a8:d4:5e:d0:84:4e:20:1f:92:ae:db:58:6c:
63:1a:6b:d4:39:cc:98:cb:47:4a:b2:7d:f8:bc:a8:14:dd:b8:
95:cc:95:5d:ba:4d:d3:f3:cc:b1:b0:0c:85:a8:8c:9c:f0:1f:
8d:18:cc:af:b7:f0:b1:9a:43:92:30:1a:31:06:33:29:13:e4:
b2:ec:dd:ff:f9:d9:a6:fc:ab:98:e0:bf:7e:d0:34:3c:c3:72:
1e:74:cd:f8:ab:7d:b6:84:ad:59:3b:74:e4:4d:5a:6f:0c:94:
90:1e:28:12:88:28:86:5e:5c:8f:ce:48:49:fe:d4:40:9a:74:
85:23:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:10:05 2025 by rpki-client