Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c3HZoETHTg4QwBuEYGvC7UUCGh0.roa
File: c3HZoETHTg4QwBuEYGvC7UUCGh0.roa (raw, json)
Hash identifier: 2ZnTkbi5lzj9aGKl7Xy1LJMMq0fjs8NNwnR9WJNP1YI=
Subject key identifier: 73:71:D9:A0:44:C7:4E:0E:10:C0:1B:84:60:6B:C2:ED:45:02:1A:1D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B40C1CBDB8B38CA3EAB97F3E1945A7B87
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c3HZoETHTg4QwBuEYGvC7UUCGh0.roa
Signing time: Wed 18 Oct 2023 03:08:44 +0000
ROA not before: Wed 18 Oct 2023 03:08:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:40be:e495/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:40:c1:cb:db:8b:38:ca:3e:ab:97:f3:e1:94:5a:7b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 03:08:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7371d9a044c74e0e10c01b84606bc2ed45021a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d5:d8:33:e5:2d:bf:25:43:75:a9:8c:28:62:
f3:3f:f4:5f:1f:61:60:ad:ad:d6:e5:2d:8f:f4:8e:
86:b5:61:2c:ad:50:31:67:c5:85:d2:ed:72:3e:b5:
d1:e4:3f:be:03:c3:7f:7f:3d:05:d0:ee:ba:8b:77:
8c:70:54:8a:3e:2e:5e:31:6d:41:f0:9b:f6:e0:ac:
9a:66:9a:ae:b8:db:64:4a:a0:06:c6:33:c4:bf:34:
99:67:40:c3:c6:44:ab:99:0d:5d:26:62:4a:b7:20:
02:3e:54:7e:0d:21:78:eb:a9:4c:06:d7:57:b0:da:
b4:19:a8:65:08:2c:b6:21:0f:8e:9c:d1:9d:a7:72:
57:71:ec:91:41:1c:28:5a:f1:91:0a:f1:f5:06:6e:
ed:f1:7b:a0:6c:d2:11:3b:f7:a3:26:e0:e0:f7:4e:
cf:d6:b4:3c:39:fe:d6:33:83:8d:a8:67:38:a1:ae:
a1:ff:a8:e5:b8:e9:1d:0e:02:37:06:82:48:ec:39:
9a:3d:24:ca:ed:a8:bf:fe:b6:75:d2:9a:f1:92:a0:
e6:2a:13:7d:e7:1f:b2:c2:fa:4a:68:c4:ab:36:5a:
78:aa:d1:bf:f0:ef:9f:df:cf:1d:04:0c:cc:04:01:
47:7c:ee:60:a8:95:4c:ec:bc:17:90:ec:3d:6b:c4:
57:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:71:D9:A0:44:C7:4E:0E:10:C0:1B:84:60:6B:C2:ED:45:02:1A:1D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c3HZoETHTg4QwBuEYGvC7UUCGh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:c6:3a:ea:7f:d2:61:22:e7:27:0c:97:a2:db:08:df:9d:71:
28:46:14:0d:c7:63:4b:2a:48:c8:89:e7:45:44:31:2f:8a:a5:
a2:d9:f4:b3:8a:dd:43:a1:08:dc:19:e8:55:c7:f3:fd:4d:77:
f5:04:13:cf:5c:cc:97:63:b8:65:23:d0:10:45:8b:54:84:aa:
0c:63:f1:08:88:56:a5:ca:ff:a2:44:df:d0:27:c7:a3:68:dc:
97:39:89:8f:27:a9:ff:b5:5b:f3:cb:cd:60:6b:26:80:92:a8:
f0:b9:57:2d:9b:b3:7b:2e:47:86:3a:8b:08:de:6b:22:f5:85:
74:8f:fe:45:93:a5:af:c2:fc:3e:3c:92:c2:84:e3:53:43:ea:
72:d5:9b:01:2f:7e:dd:35:8a:ec:3a:5a:32:54:90:13:12:22:
8f:78:c4:33:28:df:dd:89:eb:c5:aa:e4:72:78:8a:17:dc:99:
1b:94:ba:a3:d8:c3:70:45:98:37:21:3a:5c:e5:39:cf:db:8c:
14:1c:78:3b:c6:de:b7:d2:e6:77:6b:54:c2:af:dd:bc:25:b4:
fe:27:d3:e8:19:d7:e5:1e:b8:c2:11:1a:92:76:94:34:dc:fc:
a3:5c:d6:9a:bb:24:82:ab:60:29:1b:7b:82:c4:27:b1:0d:8d:
a1:b4:b1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:14:01 2025 by rpki-client