Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hMty8QfH2sIIHBfiOB68ExhsNX0.roa
File: hMty8QfH2sIIHBfiOB68ExhsNX0.roa (raw, json)
Hash identifier: YxdD8d6UV1ijCFvtgvZWaIdy7dp7p0xTvW3FpYbgdVI=
Subject key identifier: 84:CB:72:F1:07:C7:DA:C2:08:1C:17:E2:38:1E:BC:13:18:6C:35:7D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEDF12AB70632C4D5327DC56D60872EC1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hMty8QfH2sIIHBfiOB68ExhsNX0.roa
Signing time: Mon 02 Oct 2023 01:11:59 +0000
ROA not before: Mon 02 Oct 2023 01:11:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ed:f1:2a:b7:06:32:c4:d5:32:7d:c5:6d:60:87:2e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 01:11:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84cb72f107c7dac2081c17e2381ebc13186c357d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:f5:a8:54:61:e0:f0:75:a0:56:72:88:c1:
f6:f3:15:57:c9:72:4b:7e:23:9b:64:7b:e1:47:d1:
d3:3b:63:1d:d9:b6:3e:ed:13:84:b7:cb:cd:bc:eb:
b2:34:9d:78:50:3e:7c:dc:a6:8b:6b:59:c9:1a:d6:
8d:40:1f:d9:0a:df:08:fd:91:f9:73:38:17:aa:81:
3b:c8:8f:8d:6f:2c:f3:10:f1:55:10:bd:44:3a:3f:
fd:4e:12:9d:b4:21:cf:fc:cf:94:c9:2a:cc:79:2e:
fc:95:4c:5a:98:68:f2:93:b5:77:db:66:f7:17:6d:
e4:73:1e:1e:e1:d4:ac:f5:e9:76:61:fd:b2:11:24:
26:de:2c:b5:82:fd:3d:7e:fe:51:d4:e8:be:63:a5:
f4:d3:d6:c2:85:2e:42:11:dc:56:43:94:c9:b2:d5:
33:31:6c:7a:e8:70:a2:36:d9:2a:be:91:c1:71:4c:
ee:cf:22:e6:b6:d5:ed:d9:07:85:b2:74:b8:ef:4f:
3c:96:68:25:f7:3c:f8:f5:98:4f:e1:74:b1:42:31:
9c:48:4b:49:9b:fb:3c:55:b5:03:a2:82:ca:f8:9e:
13:a4:08:5d:c0:c0:bb:71:34:f7:3d:20:4b:f7:52:
3a:c7:f1:e7:96:cb:f3:49:a1:53:9f:af:c4:1b:91:
ac:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CB:72:F1:07:C7:DA:C2:08:1C:17:E2:38:1E:BC:13:18:6C:35:7D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hMty8QfH2sIIHBfiOB68ExhsNX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:69:1f:42:69:fd:24:b0:9b:97:87:c4:e3:3e:1e:e7:20:51:
d6:87:2b:d6:59:60:ee:f5:ec:5f:e1:a0:bb:d1:c5:1c:3e:8b:
67:09:0e:11:cb:da:b5:e4:46:ba:6d:b2:96:da:94:7f:b4:bb:
17:da:1b:ba:23:45:69:5b:f7:d2:f1:21:c3:18:78:19:04:af:
a4:7c:94:39:6a:92:bd:8f:b3:82:38:ff:eb:8f:72:8b:ae:7d:
04:55:7c:ed:a2:d8:da:ad:ca:2e:cc:59:6d:2b:f6:e3:02:48:
00:28:7a:f5:4d:09:70:73:13:c3:27:ff:2f:f8:31:0a:92:b4:
65:22:b8:e5:07:bc:6a:47:78:be:d0:f3:5a:96:27:02:8c:6f:
e9:5c:3c:9b:14:a4:c9:8e:30:bc:d1:d7:7b:d1:01:2f:b5:84:
a9:65:d4:6c:17:f3:3f:9c:1d:02:92:b1:0a:f0:6d:37:2a:9e:
d1:d2:f7:f5:53:fa:1d:da:80:3e:31:31:3a:c8:22:c0:a2:8e:
b0:4e:fd:22:3b:c4:70:e1:34:44:cb:10:a9:6e:46:86:1b:ec:
fe:c1:44:1b:61:0d:e2:9f:cb:aa:0c:04:b8:34:3b:cf:4d:2c:
1a:31:af:e6:93:21:36:c6:bc:60:94:16:42:00:fd:b7:e1:3f:
07:84:e1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:29:15 2025 by rpki-client