Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hl3nUyPk1rz14LQWWPEVuOavSC0.roa
File: hl3nUyPk1rz14LQWWPEVuOavSC0.roa (raw, json)
Hash identifier: aS9c3nASwfRAY0uFH16rDLTvEqSGeMiHiBBxbUHcdq4=
Subject key identifier: 86:5D:E7:53:23:E4:D6:BC:F5:E0:B4:16:58:F1:15:B8:E6:AF:48:2D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA1530224F6B1B56B1F497B4C217D61A3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hl3nUyPk1rz14LQWWPEVuOavSC0.roa
Signing time: Sun 05 Nov 2023 21:10:53 +0000
ROA not before: Sun 05 Nov 2023 21:10:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:a14c:ee41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a1:53:02:24:f6:b1:b5:6b:1f:49:7b:4c:21:7d:61:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 21:10:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=865de75323e4d6bcf5e0b41658f115b8e6af482d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:80:e8:81:62:c9:dd:c5:50:1b:bf:c7:97:
7d:4b:97:0c:37:de:57:82:43:2d:23:4d:13:cc:5c:
3e:cc:44:61:87:da:b9:41:5b:9c:dc:3e:92:da:94:
15:9c:26:a7:ba:50:df:b4:3b:fc:6d:d4:76:d5:a0:
b9:d9:45:7c:bc:06:c7:e2:4d:91:48:48:91:7e:99:
fa:c7:f9:53:d6:1c:4e:05:28:6a:20:c0:d5:ba:3e:
cc:e1:7e:b7:09:c7:9e:31:2c:4a:ab:22:c7:02:40:
fd:ea:fb:98:45:34:3d:f1:4b:86:28:17:90:12:d2:
eb:53:04:8a:be:f5:1a:86:aa:f1:0e:6d:ad:fc:27:
ea:56:c9:70:a0:38:c1:e2:98:8a:0b:f2:eb:30:7d:
78:1f:9a:7f:09:00:da:80:7c:4c:39:20:5f:5a:b7:
37:20:9f:a9:41:cc:db:48:db:34:e0:4f:a9:74:02:
82:4b:2b:88:4f:d6:ca:24:ee:b3:d8:0c:dc:9a:0b:
ff:f8:88:2a:aa:3d:39:40:1d:58:00:4a:4c:59:ee:
c1:89:81:a5:9f:9c:a3:49:d1:61:28:81:b2:02:d5:
b7:97:c6:b0:4f:fc:a6:d2:ba:e7:87:f8:5e:45:f3:
90:20:d4:5a:62:17:06:8f:30:f5:66:28:9b:ca:9b:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5D:E7:53:23:E4:D6:BC:F5:E0:B4:16:58:F1:15:B8:E6:AF:48:2D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hl3nUyPk1rz14LQWWPEVuOavSC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:b8:5a:31:7e:8d:56:71:30:ad:9b:a7:59:25:74:2e:19:b5:
60:76:ca:ba:a6:0d:0f:af:89:a8:8f:0b:22:fc:2f:c0:0e:08:
11:55:ce:0b:75:0a:68:5c:b8:f3:3f:c6:39:b6:7e:32:39:8d:
e3:e1:be:f1:d4:5d:96:83:95:e8:9d:08:5a:10:97:08:fa:e4:
91:3a:49:f1:38:41:a2:db:75:6b:33:8b:00:a2:0e:29:76:bc:
5a:6e:85:48:bc:4c:a4:52:fd:1f:12:a5:51:03:79:6e:5b:28:
26:7d:8f:03:db:6c:70:a4:1f:86:f6:ab:3f:d7:88:32:d6:a0:
3c:7c:11:1e:0f:03:5f:ab:87:40:b7:89:fc:94:4f:32:72:b3:
1d:01:c2:c1:2d:4f:e0:2e:2b:4c:79:e2:d0:6d:59:b7:c0:b1:
4f:b8:29:70:77:6b:fe:50:7b:dd:f2:4b:5a:25:a8:31:46:e0:
3e:52:5a:16:24:95:9b:fa:37:1f:4d:01:19:d9:bb:13:0b:13:
59:26:ef:8e:d1:3b:40:89:ad:14:9b:37:16:55:b1:17:62:55:
94:7c:23:b7:7d:cf:86:aa:f6:36:e7:2b:ef:2f:51:f2:34:95:
89:79:e2:32:a4:cd:e2:7e:82:1b:6d:30:3e:84:95:c5:35:e8:
3b:b2:77:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:10:40 2025 by rpki-client