Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hZ7mYjE9NPt6Ieo_LHu810w8suk.roa
File: hZ7mYjE9NPt6Ieo_LHu810w8suk.roa (raw, json)
Hash identifier: KSTvNn74vg71QB09h4tprh9nohhdd3L//CPVNGpw/eQ=
Subject key identifier: 85:9E:E6:62:31:3D:34:FB:7A:21:EA:3F:2C:7B:BC:D7:4C:3C:B2:E9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB5176BEB3233CFCE3E53214796896501
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hZ7mYjE9NPt6Ieo_LHu810w8suk.roa
Signing time: Thu 21 Sep 2023 00:15:25 +0000
ROA not before: Thu 21 Sep 2023 00:15:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b5:17:6b:eb:32:33:cf:ce:3e:53:21:47:96:89:65:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 00:15:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=859ee662313d34fb7a21ea3f2c7bbcd74c3cb2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ce:ae:24:36:12:d7:6c:01:7e:86:71:8c:9b:
d3:b3:7c:b6:e0:29:ff:a5:10:cf:bb:7a:1c:43:e1:
06:9e:43:d4:78:36:98:d0:a8:e4:15:5b:0e:c6:e5:
e6:0c:53:25:9b:5d:de:df:f4:00:56:a8:01:91:7d:
7f:18:f3:47:80:28:61:5f:79:ee:b2:0a:ae:70:4d:
0b:ea:61:23:a1:a8:8b:59:09:cb:3b:19:c0:2f:81:
47:40:5e:5d:10:f9:e5:4d:c0:52:91:b6:82:c8:42:
d6:23:2f:3b:87:0f:85:f2:be:94:31:aa:20:9f:64:
f1:e3:f0:6e:63:cb:83:1e:c3:3b:d0:e4:e3:c3:4a:
73:a7:22:90:22:8e:1c:18:b8:be:9d:6d:c4:e2:75:
63:72:f7:29:df:51:b0:10:5b:c1:e6:e0:9a:77:f4:
a9:d3:d9:de:67:ca:6f:37:13:1a:6d:d8:e2:a8:37:
b6:c8:55:9a:a8:2d:11:d8:bb:da:dc:3b:c0:f7:96:
07:3d:25:58:ec:25:01:2e:e4:7c:df:6f:c7:2f:bc:
6d:7d:a1:5a:58:f8:7f:f4:42:ac:a2:9a:a3:cd:3b:
2b:c4:33:d1:15:cf:e0:76:01:f6:3a:29:77:75:95:
73:fc:35:57:b4:fc:e4:a4:41:84:61:03:a4:d9:62:
e7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9E:E6:62:31:3D:34:FB:7A:21:EA:3F:2C:7B:BC:D7:4C:3C:B2:E9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hZ7mYjE9NPt6Ieo_LHu810w8suk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:24:4a:96:3b:8c:80:9d:63:92:1e:76:ce:39:e2:4d:0a:81:
12:1b:f2:13:85:cc:38:c5:f3:06:bb:bb:a7:8a:cd:02:ce:1f:
ee:5a:57:08:7f:7a:5c:5d:f6:d2:c6:ce:a3:d4:0a:53:ed:02:
08:e8:b5:f7:77:09:92:0b:b7:06:0f:ab:b6:28:76:8d:40:f6:
41:c6:92:5e:9f:b3:49:79:7c:36:93:32:de:72:33:44:07:1d:
f5:7d:7e:8d:b2:f8:58:57:ec:82:4e:fb:08:27:7a:46:4f:73:
2a:e7:4b:ef:47:36:7f:1b:57:1d:a1:ce:4b:71:50:54:d3:3e:
c1:9d:59:f0:ab:b7:40:95:9a:dc:c0:fb:42:95:c4:9c:29:bc:
79:00:1b:d9:df:b4:67:35:82:d5:b1:50:bb:ee:04:ae:c3:2f:
f4:cd:34:fb:dc:24:69:4d:d9:c9:2b:c6:08:75:45:1f:bf:67:
3f:75:f5:8b:a6:f9:68:44:90:7e:cd:9b:6f:e2:e5:8c:f0:0b:
7e:87:5e:6a:71:84:8e:7f:6f:8d:7e:bf:be:ef:2e:1c:c0:fc:
d3:23:8c:d5:c4:e8:40:d6:9c:68:c3:0e:f6:8e:08:9a:ec:98:
52:2e:2e:8d:1a:3e:85:2b:d4:dd:55:99:3f:8d:b5:85:10:d1:
f6:bc:ce:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:55:50 2025 by rpki-client