Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XD65QG0qqpq9W_8OgT-bjYxkWbw.roa
File: XD65QG0qqpq9W_8OgT-bjYxkWbw.roa (raw, json)
Hash identifier: loPKg0qSNoDJ9jcbTo5HtvLpLHytQoWC5vEmTV2UVWk=
Subject key identifier: 5C:3E:B9:40:6D:2A:AA:9A:BD:5B:FF:0E:81:3F:9B:8D:8C:64:59:BC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3A8A9B7A3581D16A2930F4BF80A2CEE0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XD65QG0qqpq9W_8OgT-bjYxkWbw.roa
Signing time: Tue 05 Dec 2023 15:13:31 +0000
ROA not before: Tue 05 Dec 2023 15:13:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:8a:9b:7a:35:81:d1:6a:29:30:f4:bf:80:a2:ce:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 15:13:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c3eb9406d2aaa9abd5bff0e813f9b8d8c6459bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3d:5e:f7:57:48:ff:a8:71:82:32:e2:79:2f:
f9:9b:18:6c:8c:72:14:5c:65:77:d5:9c:a6:c4:ba:
94:92:ab:23:2c:03:17:e9:e9:70:f5:ef:55:df:2c:
28:03:df:6b:66:63:4a:a8:18:bc:b9:bc:63:40:81:
17:fc:0d:8c:a3:ee:6c:09:a8:88:de:bf:2d:31:c5:
02:a2:0a:aa:17:01:e6:da:5a:13:65:fd:d7:1f:c4:
4a:12:04:cb:f5:43:8f:c6:12:87:72:fc:07:81:61:
ed:e7:df:c9:92:a7:59:cd:77:19:58:4d:72:b2:15:
3f:7c:d5:68:62:88:ab:f5:32:a1:fc:87:df:c3:c3:
f1:2e:08:01:c3:7b:65:22:5f:d0:65:e3:7b:8e:45:
42:20:d1:c4:a6:48:80:5a:aa:96:23:46:11:ce:65:
95:30:8e:20:cf:08:2d:aa:cb:72:c2:a4:5f:30:30:
3d:4b:27:46:56:99:30:b5:18:a8:ac:9f:ee:ab:96:
7d:cc:fb:aa:10:81:f7:55:7f:84:c9:47:bd:9c:3a:
9e:ed:b1:54:fe:55:67:ae:57:6e:41:1d:70:ad:4d:
99:d3:e7:48:96:29:fc:df:d1:2d:ce:76:a5:8b:61:
a0:d7:1c:b2:f3:84:11:61:36:3a:34:a0:89:78:6f:
97:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3E:B9:40:6D:2A:AA:9A:BD:5B:FF:0E:81:3F:9B:8D:8C:64:59:BC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XD65QG0qqpq9W_8OgT-bjYxkWbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c9:41:9a:9a:f0:70:33:ab:a9:ac:3a:2e:69:df:ad:ec:5b:89:
83:50:f2:de:19:00:b7:b9:76:86:87:53:f9:7c:c9:aa:a1:08:
85:dc:aa:15:53:a2:d1:58:d2:f0:de:11:14:86:a0:ea:72:1c:
93:ca:d0:71:47:97:62:0f:df:d9:48:b8:4e:68:27:31:ed:e0:
9a:42:ae:7d:dc:68:f4:c6:27:4a:66:be:4f:29:7d:d3:de:2f:
e4:b3:0e:94:d4:1e:15:aa:6a:db:b3:1d:9b:39:74:ca:de:9a:
3e:47:06:48:c2:3b:20:07:9b:2a:bb:4d:36:5e:f4:0d:7b:77:
bb:20:7d:45:38:57:56:ab:e0:6b:5b:aa:24:46:a6:9e:d7:a2:
49:f9:35:7c:12:54:76:c1:70:e7:81:39:d0:8a:a6:1b:f9:7d:
6b:30:0c:a7:c3:51:1c:8a:34:69:5e:77:5d:1b:ec:53:49:b8:
ad:f9:fb:2b:db:07:41:12:54:4c:61:b3:85:5b:90:53:2b:36:
cc:54:e4:a9:06:d8:75:4f:c6:9b:5d:12:dc:ce:a0:0d:f9:db:
cc:b0:b7:a4:b4:94:71:0d:9c:29:89:50:25:04:c6:bb:aa:de:
97:61:27:e4:51:78:c9:0e:b6:c8:fe:f9:69:c9:b4:7b:2c:15:
54:3e:68:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:56:32 2025 by rpki-client