Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c-xS_ZWtmu4zy8Xtr5mtbJ5RNPM.roa
File: c-xS_ZWtmu4zy8Xtr5mtbJ5RNPM.roa (raw, json)
Hash identifier: bPaagqJHX33Bspxge9jHV/OjJf7i8mSo3nEkUHADrUo=
Subject key identifier: 73:EC:52:FD:95:AD:9A:EE:33:CB:C5:ED:AF:99:AD:6C:9E:51:34:F3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B56A6C71F0F70A1484FA7AC507E7B1E70
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c-xS_ZWtmu4zy8Xtr5mtbJ5RNPM.roa
Signing time: Sun 22 Oct 2023 09:10:52 +0000
ROA not before: Sun 22 Oct 2023 09:10:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:56a0:d08f/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:56:a6:c7:1f:0f:70:a1:48:4f:a7:ac:50:7e:7b:1e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 09:10:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73ec52fd95ad9aee33cbc5edaf99ad6c9e5134f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:58:52:3e:c7:be:38:61:f5:af:fc:41:a6:
0c:82:1f:cb:c1:d8:fd:f0:8b:2b:e0:16:ae:71:ce:
65:af:49:48:e2:bf:df:b5:6a:35:e1:46:1c:a3:08:
51:e6:95:d0:87:0e:98:df:87:eb:96:53:a4:fa:b7:
94:72:1a:97:83:ba:46:d8:42:e2:74:70:c1:f4:e7:
c5:de:50:5d:2c:c7:c1:70:7a:c4:22:a6:fd:f9:4d:
dd:44:d8:98:2d:6b:cf:f7:24:b4:2c:cd:f9:c7:59:
34:bf:75:ab:53:be:34:da:f4:67:ef:fc:fc:cb:a8:
b3:30:7e:27:66:6c:ee:3e:6f:7e:f2:36:0a:e7:47:
32:ec:08:06:3e:db:57:13:08:bf:f9:12:16:b9:0f:
c0:f3:79:9d:45:a9:ad:e9:4a:04:c8:d6:f8:d4:ba:
27:95:f0:b8:14:57:4b:64:f1:c6:9c:f8:ee:50:0a:
cd:48:1e:b9:d3:0c:91:88:61:e2:6f:88:75:9e:83:
ea:29:43:69:a7:61:f3:f1:61:a0:d9:31:cf:77:c1:
09:b2:d3:54:2c:0d:b8:8d:ef:78:be:2d:ff:49:9c:
13:4c:3b:47:38:04:af:05:c7:c2:e0:83:df:28:0d:
36:8d:cd:41:a1:00:8a:8c:65:ca:79:ca:4a:14:ed:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EC:52:FD:95:AD:9A:EE:33:CB:C5:ED:AF:99:AD:6C:9E:51:34:F3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c-xS_ZWtmu4zy8Xtr5mtbJ5RNPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:46:95:fd:26:e7:4d:e3:fa:7e:a4:a1:38:f5:6a:4e:ba:53:
ec:80:f9:4a:6f:d5:19:c5:ef:66:56:0d:c1:96:c0:4c:c5:10:
6d:93:67:9f:fc:dc:59:ad:f1:00:ef:d1:17:52:32:95:44:74:
c3:9f:0b:d1:20:07:19:d5:94:22:0b:e3:6e:4f:b0:17:dd:08:
ef:c1:0e:3b:cc:70:9a:b7:15:19:37:86:13:fa:bb:4c:67:65:
51:46:4d:e4:70:48:bf:1e:6d:63:77:3f:9b:db:64:4a:8d:b7:
c1:d8:f1:0e:20:9d:36:4c:7f:57:b2:10:e7:28:63:98:ff:8f:
d7:c8:c1:21:b7:68:c2:3f:c2:e3:5d:9f:37:a4:63:6d:14:a1:
ee:84:0a:2a:2e:70:94:b5:8e:a5:42:31:15:79:d8:83:f8:3b:
67:f5:12:1d:29:39:9f:4b:32:45:eb:03:0c:ed:8e:88:5c:55:
bc:e2:dc:7e:36:57:fb:cc:7a:5f:07:a8:df:7c:cb:1d:00:71:
2a:eb:88:7a:52:f0:55:14:3f:81:1a:f4:5c:e5:40:48:d4:5c:
5b:4d:21:3f:70:95:e6:39:08:7f:5a:39:41:38:a0:09:78:0d:
65:eb:3f:62:9f:0f:cd:88:d7:82:4c:f2:92:18:9f:e9:b5:39:
51:45:af:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:43:25 2025 by rpki-client