Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hOTccZHjVum7boLN5VfUcijTgrM.roa
File: hOTccZHjVum7boLN5VfUcijTgrM.roa (raw, json)
Hash identifier: Lug4VS4nPbp/M/HWnplgIfB/UxBni9OGuD8Uv6Rnv4w=
Subject key identifier: 84:E4:DC:71:91:E3:56:E9:BB:6E:82:CD:E5:57:D4:72:28:D3:82:B3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD42B611A18AF4E7C61E2E5BBC104A1A3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hOTccZHjVum7boLN5VfUcijTgrM.roa
Signing time: Wed 27 Sep 2023 01:05:27 +0000
ROA not before: Wed 27 Sep 2023 01:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:d42a:dfca/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d4:2b:61:1a:18:af:4e:7c:61:e2:e5:bb:c1:04:a1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 01:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84e4dc7191e356e9bb6e82cde557d47228d382b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:53:34:cc:2c:c9:11:1b:93:1b:ef:27:69:40:
80:d7:bf:81:58:33:ff:c5:12:0a:63:03:18:b9:28:
7a:51:9a:4e:0c:e3:b2:60:02:ad:d8:ea:4b:5b:a6:
5a:0c:93:de:01:2f:bc:a4:47:a7:25:08:df:68:a9:
b5:41:18:5a:14:02:d4:5a:ed:8a:90:04:ff:54:dd:
62:ef:3a:55:f4:ae:40:2c:e1:19:20:19:9e:a7:b8:
b8:f9:40:97:4e:11:72:e5:77:e9:61:eb:6b:0b:5d:
bc:48:80:ed:b8:6b:97:90:03:a0:d0:86:de:b5:68:
49:8f:37:6d:3d:cf:ad:cf:75:82:c6:35:17:e7:e1:
ca:44:3a:46:e4:fb:07:a5:73:aa:1a:5a:e3:40:30:
2a:e6:ef:a9:eb:b9:ad:75:59:ca:0d:fb:ab:58:1c:
f8:20:10:cd:aa:2d:59:74:48:88:ed:91:1e:4a:63:
a4:a2:62:3f:e5:99:ae:63:61:86:4f:1e:03:fb:2b:
07:27:cc:7e:9a:f5:e1:9a:7b:26:aa:12:10:09:df:
d8:dd:ca:e8:c2:8a:58:8e:07:39:bf:ab:38:4b:b5:
9c:e6:cd:db:93:5a:df:38:26:0f:97:dd:44:3d:c3:
af:12:08:2a:22:23:4d:31:87:46:57:76:07:f8:38:
fb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E4:DC:71:91:E3:56:E9:BB:6E:82:CD:E5:57:D4:72:28:D3:82:B3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hOTccZHjVum7boLN5VfUcijTgrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:0d:38:c6:27:62:cb:44:80:36:19:28:25:50:02:a5:63:7f:
f3:f6:f6:52:86:d8:75:68:d5:28:a2:eb:c9:ac:fa:77:d4:23:
f7:71:cf:39:d8:71:fb:63:25:03:c9:e4:df:47:54:33:ab:9f:
d3:92:39:b2:57:ed:34:ee:e5:53:28:75:8b:0d:9d:be:7d:1e:
69:6f:e0:5d:4f:37:3a:b8:8c:b3:bc:ef:b2:37:ba:53:97:98:
2a:ae:79:22:51:a7:98:64:89:50:92:fb:58:ff:19:70:db:c3:
fa:a0:cb:ff:7a:a6:45:73:16:2c:aa:85:df:75:42:0d:a6:07:
77:21:ce:b9:7d:51:a4:46:78:06:73:28:b5:24:3f:69:0c:f4:
13:9d:d9:34:f5:7e:8f:b5:4c:44:1c:61:31:d2:87:37:ff:51:
5b:0b:7b:8f:c2:39:58:f8:ca:07:5e:65:1b:80:fa:46:12:c3:
3a:9b:75:77:2d:b8:4c:c4:99:90:d7:dd:a9:9b:ef:9a:0d:66:
4f:f2:f3:42:d6:5e:27:1f:1c:b9:b8:36:b0:ab:63:18:94:95:
71:89:e4:09:c3:04:94:e5:af:ba:a9:db:0c:97:2e:62:0e:b0:
a7:90:c8:d3:33:ab:4c:ec:9f:20:55:b6:2b:fc:57:39:c7:64:
1c:c3:4f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:19:36 2025 by rpki-client