Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hKlVFZr36Wueb5IUk6zlMV_ru3Y.roa
File: hKlVFZr36Wueb5IUk6zlMV_ru3Y.roa (raw, json)
Hash identifier: 2xdUMJkKKpLLm7wL25LnP+fWzJ73xJumJhm5tMYIdQM=
Subject key identifier: 84:A9:55:15:9A:F7:E9:6B:9E:6F:92:14:93:AC:E5:31:5F:EB:BB:76
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0EC9203FD206B3077E8E54EBC7DAEF89
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hKlVFZr36Wueb5IUk6zlMV_ru3Y.roa
Signing time: Sun 08 Oct 2023 10:15:43 +0000
ROA not before: Sun 08 Oct 2023 10:15:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0e:c9:20:3f:d2:06:b3:07:7e:8e:54:eb:c7:da:ef:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 10:15:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84a955159af7e96b9e6f921493ace5315febbb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:20:16:87:3d:f7:4e:4a:d8:23:6d:46:6b:
2c:ee:54:1d:9d:30:e9:f6:09:f1:1b:31:f9:a7:bd:
d2:84:26:62:1b:07:15:04:85:b2:71:6a:62:3c:00:
42:f6:8d:96:fe:78:62:f1:d0:cb:33:7f:90:d7:c6:
73:86:e3:78:45:39:00:5e:f6:d2:e9:20:b3:5c:fc:
c3:63:14:c3:40:08:43:94:7a:bf:44:8e:d7:b7:48:
d5:42:e5:16:aa:97:7e:55:f4:8f:28:59:a5:21:ab:
58:a2:44:48:f0:c4:d6:1a:a6:04:8a:87:1d:cc:fd:
60:7a:3b:92:f0:06:7d:c2:1f:15:8f:3d:66:fd:b5:
bc:c3:08:35:d1:65:7e:b3:f9:3e:94:15:39:51:96:
3a:4d:77:22:f4:af:85:6c:fb:91:18:55:56:4a:c3:
51:74:93:96:5a:fc:49:50:6f:93:f6:1c:92:71:d2:
05:6e:c3:14:b7:eb:1e:16:31:48:61:12:ee:29:55:
2e:51:14:56:e5:6c:70:37:23:5e:e3:9c:19:38:c4:
69:25:8b:22:ce:d9:06:0c:95:b7:a1:4f:57:f9:e5:
d6:6b:52:19:a3:7e:56:cc:ee:00:cf:36:17:c9:d1:
ba:b5:1b:4c:18:61:4c:24:0e:2b:5c:59:e2:55:ca:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A9:55:15:9A:F7:E9:6B:9E:6F:92:14:93:AC:E5:31:5F:EB:BB:76
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hKlVFZr36Wueb5IUk6zlMV_ru3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:d7:1d:31:4c:59:8d:2f:9f:1a:30:5a:56:52:ca:e4:31:f2:
b7:66:5b:94:59:73:c0:c3:98:17:c5:a9:13:8d:d3:af:48:f1:
86:f6:c1:63:fc:80:70:8c:11:72:78:53:45:3e:ac:93:1f:86:
b8:8b:19:1c:57:34:31:3b:88:8f:66:b1:87:3c:8c:33:1e:51:
b0:98:d7:2c:e7:1f:52:69:af:07:88:93:ac:85:b7:a2:39:2e:
ff:00:55:50:17:60:88:dc:87:63:84:2e:7c:0b:3b:2a:a3:ce:
2c:b2:64:46:f8:f3:dc:dd:6e:a6:41:5c:f3:27:ab:da:88:fb:
fd:26:0c:27:64:e5:52:c3:c5:c7:ce:85:8c:ab:9e:a0:f7:20:
57:aa:ac:a9:a9:fa:f1:5a:0b:d7:a4:73:5d:ff:3d:d8:bb:61:
b4:e0:9d:f4:04:7b:ea:13:d6:5c:6d:f8:f5:c3:c7:9f:c2:11:
a4:b6:a7:fd:2e:95:86:df:72:c5:90:eb:c6:d4:91:6f:bb:48:
4b:cd:2d:d4:f9:9b:c1:c1:fc:42:bb:7e:54:24:1f:54:ac:83:
52:bf:32:f7:ab:55:ff:2d:dc:30:2e:77:b4:aa:35:d6:5d:bf:
95:ce:a0:94:28:a7:9d:65:83:c2:45:16:91:e2:9c:03:45:17:
11:20:38:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:16:21 2025 by rpki-client