Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XHHmHJadCAD06p-TB9CPt1XgycQ.roa
File: XHHmHJadCAD06p-TB9CPt1XgycQ.roa (raw, json)
Hash identifier: TpvCTzzr2omAxNcGM1TcUTKtS9unHlYGDFMDm0fgSGU=
Subject key identifier: 5C:71:E6:1C:96:9D:08:00:F4:EA:9F:93:07:D0:8F:B7:55:E0:C9:C4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE63392A945F0A8F56073E26245B7CC7B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XHHmHJadCAD06p-TB9CPt1XgycQ.roa
Signing time: Sun 19 Nov 2023 06:10:21 +0000
ROA not before: Sun 19 Nov 2023 06:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e6:33:92:a9:45:f0:a8:f5:60:73:e2:62:45:b7:cc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 06:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c71e61c969d0800f4ea9f9307d08fb755e0c9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:73:2f:4b:93:ee:1b:6f:fc:5d:18:41:92:
8b:2b:67:56:3d:68:0e:75:d3:ab:76:a8:6b:d6:25:
eb:24:39:7e:a9:dc:98:79:67:a2:a1:5f:52:4a:d4:
0a:76:0d:39:04:06:9c:41:83:e0:04:ba:16:28:a6:
48:8c:cd:cd:41:61:70:a7:87:e5:6a:66:bf:f3:5b:
88:39:16:4a:78:b5:f1:14:b8:c0:e7:90:1d:20:d2:
83:79:4a:9b:95:4b:d2:56:54:04:36:64:42:93:b5:
0f:ef:ed:1e:62:51:4e:dd:f4:29:ed:59:9d:17:65:
9c:bd:97:9f:7c:88:2f:d3:04:44:85:83:f9:c8:89:
d2:56:22:b6:85:74:a8:31:6e:3e:b3:0f:8d:62:aa:
ad:b4:47:04:91:03:23:c9:21:be:b7:de:ef:e4:bf:
3f:55:f0:60:de:7f:ac:2f:81:ff:f5:ef:06:55:4b:
7b:b9:48:0f:c0:fb:70:9c:4c:8b:c7:4a:c3:aa:63:
54:ed:ea:cf:cf:21:c9:00:8a:1f:19:a5:bf:e1:68:
54:ff:3a:ec:a6:bf:af:a4:cd:29:ea:60:77:74:3b:
46:8c:e4:b0:42:2b:35:c8:79:fb:56:ec:f0:f3:8d:
2d:1d:00:1d:fa:59:53:c4:ef:81:26:08:cc:13:16:
ee:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:71:E6:1C:96:9D:08:00:F4:EA:9F:93:07:D0:8F:B7:55:E0:C9:C4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XHHmHJadCAD06p-TB9CPt1XgycQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:1f:63:b3:29:05:d1:63:19:28:d5:54:04:aa:99:a0:ee:a6:
de:e8:17:c5:bc:29:01:f0:66:66:9c:0c:0a:d1:a5:41:05:e6:
a1:40:37:6e:14:a5:33:4a:10:d2:15:f5:96:45:59:cc:89:a4:
5d:de:91:dc:63:83:f1:98:9c:75:71:43:03:23:89:4d:a0:f8:
b7:62:74:f6:24:f0:08:8e:89:59:5e:f0:34:e1:b2:f9:70:bf:
39:da:4f:9b:b3:47:14:bb:2c:13:d0:28:5d:f3:fd:70:43:52:
96:12:12:f6:e4:ea:39:b7:1f:2f:9a:5b:be:0c:61:cb:d2:e5:
0a:55:09:98:d6:56:4b:2b:09:a1:44:37:bf:fa:8a:46:a1:ea:
c9:d3:11:a5:60:72:da:16:b1:bc:09:46:11:77:e2:5a:7f:c3:
e4:f8:be:9c:15:64:93:8c:84:95:e5:36:e1:28:5c:be:fc:31:
9b:3a:3a:59:ff:f9:65:47:bf:27:a3:a3:3d:fa:fb:56:90:05:
aa:2a:94:cb:92:77:7f:03:be:c6:93:13:c6:a6:f7:19:ce:3c:
96:53:bc:1c:63:bf:9f:0d:bf:14:bb:c0:cf:15:78:e7:bc:c8:
ea:70:57:b5:a2:07:63:d4:20:22:37:bc:73:32:fa:7f:1d:24:
2e:c7:be:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:59:26 2025 by rpki-client