Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hL2thHudjVCMf_arCIyuetNbGPM.roa
File: hL2thHudjVCMf_arCIyuetNbGPM.roa (raw, json)
Hash identifier: e8R3u9CbxMepknMfPh5V33b1BtaztykSWNVhoa0t79E=
Subject key identifier: 84:BD:AD:84:7B:9D:8D:50:8C:7F:F6:AB:08:8C:AE:7A:D3:5B:18:F3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5068A0C8BFDB38FA8AE646FFA3727FE4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hL2thHudjVCMf_arCIyuetNbGPM.roa
Signing time: Sat 21 Oct 2023 04:05:16 +0000
ROA not before: Sat 21 Oct 2023 04:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:5068:e88/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:50:68:a0:c8:bf:db:38:fa:8a:e6:46:ff:a3:72:7f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 04:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84bdad847b9d8d508c7ff6ab088cae7ad35b18f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:55:cc:ce:31:68:d3:ce:32:06:df:97:a3:d5:
3c:c5:72:a8:18:8e:c6:5d:ef:89:2f:18:50:64:ba:
56:d7:56:44:44:2a:f0:80:e3:39:25:2f:a3:92:ed:
60:d2:31:0c:2d:3a:cf:bd:c4:95:73:87:5d:8c:6c:
96:6a:05:c5:c2:67:1b:d5:d7:32:d6:5e:3f:19:14:
46:df:64:23:b8:58:f4:c8:7d:04:d7:ec:13:0e:2c:
ae:27:17:b8:62:f7:8f:3d:83:53:fc:95:4c:ca:e3:
1e:f7:df:33:c3:36:13:9b:8a:61:3b:16:ed:3c:87:
c9:78:a9:c6:f4:c2:ba:b8:4e:7d:6a:f2:3e:82:a3:
d2:36:28:c8:56:e0:08:aa:53:99:c9:7d:26:3b:fc:
16:4c:b6:7e:2b:4b:bf:db:42:98:59:36:ee:58:f9:
82:91:d8:b4:3e:66:05:84:1a:dc:6f:5c:be:d1:a8:
99:a6:e8:e0:6d:24:ab:fe:3d:af:76:94:08:67:d6:
81:03:f8:58:14:d1:64:83:d0:1b:68:2a:89:62:dc:
98:53:2b:8d:2a:61:12:42:05:a0:35:93:62:29:57:
52:62:3d:74:3d:4b:da:49:86:7a:30:a2:c0:26:b0:
27:e4:61:66:7b:71:93:97:40:2d:81:57:f7:f5:dd:
48:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BD:AD:84:7B:9D:8D:50:8C:7F:F6:AB:08:8C:AE:7A:D3:5B:18:F3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hL2thHudjVCMf_arCIyuetNbGPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:b9:e5:f1:49:75:cb:10:73:f9:cd:72:14:d8:e6:ae:73:e9:
39:ee:4f:50:72:ca:91:11:02:ca:60:dd:bd:c3:43:52:48:22:
33:f5:61:c8:56:e1:df:ae:7c:63:9c:14:1c:26:14:ff:2f:5b:
01:34:5c:04:1e:14:8f:08:19:53:35:09:72:43:f1:4f:4e:2c:
25:c5:60:76:6c:a3:57:74:7d:b4:3e:31:e7:38:e6:48:41:4e:
c3:0b:93:a4:a6:02:40:4c:9c:f9:d7:8a:bc:df:66:91:a3:d0:
1e:ce:ce:85:98:06:85:37:ba:69:42:52:5e:22:f1:30:45:bf:
3f:a2:79:f6:85:1e:e3:51:c2:c1:38:5b:2d:80:6c:a8:57:92:
2c:05:4a:ec:b9:84:29:2d:14:9f:87:69:19:cc:bd:d9:c4:73:
0e:21:6f:29:38:b7:3a:32:6d:44:60:de:77:0c:8f:55:93:f3:
b9:d9:56:84:65:87:d1:bb:06:af:8f:e7:98:2f:39:f9:27:38:
fc:27:a3:64:4a:d1:99:53:ce:6f:fe:c8:4b:eb:92:cc:3c:d1:
41:ae:89:b5:ee:78:5e:96:b3:39:19:e2:37:02:2b:8b:e0:8c:
e8:f7:bc:80:c6:ac:26:3f:f2:89:82:80:dc:c2:8c:5c:41:63:
0d:3f:ed:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:44:43 2025 by rpki-client