Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cr6lL-q4JHcBzjGILtmXMQFcm1A.roa
File: cr6lL-q4JHcBzjGILtmXMQFcm1A.roa (raw, json)
Hash identifier: UwpXsfAlTmRKyt01BAGI4W+VaxSzpUTvH912QmAFsKg=
Subject key identifier: 72:BE:A5:2F:EA:B8:24:77:01:CE:31:88:2E:D9:97:31:01:5C:9B:50
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2172B025072227811B7C45EF9B417DB9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cr6lL-q4JHcBzjGILtmXMQFcm1A.roa
Signing time: Thu 30 Nov 2023 18:16:53 +0000
ROA not before: Thu 30 Nov 2023 18:16:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:21:72:b0:25:07:22:27:81:1b:7c:45:ef:9b:41:7d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 18:16:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72bea52feab8247701ce31882ed99731015c9b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:b0:25:8a:31:00:0b:01:ac:fa:36:a2:b3:
f9:d2:fb:37:3e:c4:9b:ae:05:03:fb:6e:e4:c6:c8:
a0:ca:f6:dd:72:60:38:a4:b8:36:05:f7:08:e9:f0:
05:d6:1c:4b:d8:b2:4e:4a:13:ce:08:d2:55:b1:03:
38:5f:cb:10:45:22:c1:3b:50:80:b1:6f:5e:dd:f5:
44:1c:8b:c8:f1:58:a4:91:fd:7d:28:b2:b3:6c:e6:
82:b9:37:b8:1f:2b:a9:cb:21:06:0a:a2:20:6d:a8:
7b:33:8a:dd:25:ed:e8:ff:99:6a:65:0d:50:d5:92:
c2:ed:a0:4a:f4:5f:92:b6:65:17:7a:f7:a0:b6:c8:
4a:c0:30:fc:e4:9c:75:03:b7:c1:d1:08:d8:29:81:
c9:43:7c:58:f1:6a:42:8f:d3:88:4d:df:ee:04:ad:
81:e6:b3:38:c2:f5:ab:7d:b5:2d:f7:c1:76:f6:95:
2d:1a:e4:89:be:4d:58:34:19:db:89:69:d4:a4:20:
c1:da:6d:a0:02:65:0f:94:19:f5:32:54:6f:ff:49:
7b:e4:e2:49:a6:f5:0b:eb:e8:17:19:f2:39:c6:b4:
8e:c2:d2:7c:59:47:4b:e9:33:33:31:4e:a8:b2:48:
b2:fa:ea:0b:55:a3:c6:58:19:a5:87:88:0d:85:c9:
4f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BE:A5:2F:EA:B8:24:77:01:CE:31:88:2E:D9:97:31:01:5C:9B:50
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cr6lL-q4JHcBzjGILtmXMQFcm1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:d3:8e:ae:8c:1a:ed:b6:79:96:18:15:61:7c:09:23:61:33:
6d:4f:3d:9f:0c:03:72:e5:25:2c:76:c6:14:89:f1:56:3e:05:
a9:75:5a:d2:bc:27:90:3f:d6:38:76:df:df:7b:26:c7:c1:c4:
4d:65:99:49:ab:82:e4:8d:40:61:5a:db:b9:40:e4:de:23:34:
d1:53:4e:99:58:52:e0:e0:ef:f3:84:fe:b9:60:46:8c:65:64:
a4:5d:08:d5:77:80:d3:6a:68:98:34:9b:04:3d:d3:ad:69:6e:
14:3a:16:78:c5:59:7e:3a:93:a1:7d:2f:d8:a7:a5:7e:96:bb:
bb:42:6d:47:3c:d0:28:36:68:99:7a:26:f9:10:f1:56:10:da:
11:f2:a3:19:6f:32:94:59:17:4b:90:0a:b4:2a:9b:8b:72:38:
78:ca:7e:26:2d:19:75:45:2e:cd:e3:38:e2:4f:02:97:36:89:
5f:25:f6:f2:e3:17:95:6e:7e:67:77:b2:e6:f9:4b:99:af:49:
ad:8c:e1:c8:21:82:95:ca:c3:78:83:04:df:34:4a:bb:01:5b:
72:ca:02:43:39:20:02:fb:0e:88:a9:ca:23:7a:5d:80:e7:af:
28:2b:33:cb:fc:c5:bc:34:82:1e:49:79:d5:3c:d3:db:2b:9a:
97:a2:4c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:13:26 2025 by rpki-client