Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XSd0D-3hWZYUL1gu5JTYhJqV7Qs.roa
File: XSd0D-3hWZYUL1gu5JTYhJqV7Qs.roa (raw, json)
Hash identifier: YxufkTP05HWU1JGZFVsZoNzV88aXWnluoOd9oZEdX5M=
Subject key identifier: 5D:27:74:0F:ED:E1:59:96:14:2F:58:2E:E4:94:D8:84:9A:95:ED:0B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6CF8FE31263C380273200019635878CC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XSd0D-3hWZYUL1gu5JTYhJqV7Qs.roa
Signing time: Fri 15 Dec 2023 10:15:06 +0000
ROA not before: Fri 15 Dec 2023 10:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:f8:fe:31:26:3c:38:02:73:20:00:19:63:58:78:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 10:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d27740fede15996142f582ee494d8849a95ed0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:5e:86:8e:a9:aa:85:8a:de:d3:1a:05:1f:
31:02:b9:05:b5:8d:47:5f:ff:89:3d:89:75:67:8e:
f8:73:b6:01:53:b5:e4:83:e6:63:59:87:c8:14:9a:
24:9c:83:04:b4:a0:e3:7b:25:54:7c:39:2e:e7:7f:
b1:45:c5:a4:a0:cb:0c:e8:23:93:02:ab:f2:5b:d7:
32:0f:d6:c3:72:84:2b:52:56:56:3b:f3:aa:89:e6:
3e:56:8a:84:c0:75:e7:2e:cf:9c:09:4d:45:89:fc:
7d:dd:67:9b:68:3e:d7:d3:ad:92:78:0a:f1:c2:ee:
34:bc:97:af:fb:c5:3b:67:6f:b6:50:a7:9a:92:7e:
9a:ce:c5:d7:0b:a1:59:80:ae:c4:e9:cb:1e:d5:e5:
3a:af:11:5c:b5:99:0a:3d:34:df:7a:2e:8b:c6:2c:
dc:ab:97:ae:20:8f:f3:71:5c:2f:e2:99:76:66:e9:
4c:af:ba:30:c8:0a:cb:7a:91:38:e7:d4:e9:46:3b:
95:4d:bf:23:07:7c:fd:67:2e:ff:6a:b3:8e:4a:0b:
72:7b:91:fd:4d:8e:85:fd:28:f3:ef:4f:48:55:48:
cc:75:4f:14:ca:0b:8b:de:f0:b0:11:73:45:c4:7c:
58:ce:90:3b:bb:21:f6:03:eb:ee:af:c2:c8:f6:13:
9f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:27:74:0F:ED:E1:59:96:14:2F:58:2E:E4:94:D8:84:9A:95:ED:0B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XSd0D-3hWZYUL1gu5JTYhJqV7Qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:b5:4a:b1:6f:fb:ae:d2:f5:3d:4d:15:72:ab:81:53:8c:2c:
23:e1:d1:d8:66:0f:bd:79:fb:28:a1:6a:c2:39:d5:43:77:81:
6b:52:bf:08:61:7c:4a:6a:79:05:fc:87:d1:c7:2e:12:e4:67:
a5:82:91:60:1f:cc:44:ad:ac:0f:16:5c:a9:6d:06:58:ec:99:
7b:75:bb:b5:09:d1:0d:67:46:34:1e:68:bc:ff:43:e9:25:91:
f8:a3:b9:74:56:15:25:30:aa:39:54:3e:54:77:f1:25:a1:64:
37:ed:f7:82:a1:7d:c4:b0:16:5c:bb:f2:86:e1:34:ee:47:4e:
82:10:c9:b5:8d:e2:fa:a5:0a:bb:53:55:dc:60:2a:44:57:a8:
b5:7c:af:65:64:d6:b3:40:4c:11:79:dd:3f:c6:2f:ef:42:33:
c7:d5:21:33:f2:3b:ad:2c:08:4d:ce:53:f1:22:12:f5:bf:c8:
60:28:89:c5:7b:87:21:69:22:05:85:e6:36:99:7f:0e:6f:e4:
9b:1f:c6:d5:34:01:f1:80:aa:68:bb:60:26:a5:ff:fe:f9:f5:
75:c3:6f:fc:ff:19:11:93:b0:8c:cf:95:97:49:f7:c1:bd:07:
bc:03:14:09:5d:35:a7:25:cf:a7:3d:73:07:f2:c2:1d:d1:8b:
fa:24:ab:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:20:44 2025 by rpki-client