Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ht45EaJJAS0ZgxwY8sUFyiPlVYM.roa
File: ht45EaJJAS0ZgxwY8sUFyiPlVYM.roa (raw, json)
Hash identifier: ADocU0yXigQOvwbVuZhQGhIt+o4LH6BKqdG3hR7ak4g=
Subject key identifier: 86:DE:39:11:A2:49:01:2D:19:83:1C:18:F2:C5:05:CA:23:E5:55:83
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B11892AAECC3248C6E77E8AC8DDF5DB3C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ht45EaJJAS0ZgxwY8sUFyiPlVYM.roa
Signing time: Sun 08 Oct 2023 23:04:43 +0000
ROA not before: Sun 08 Oct 2023 23:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:1188:a1ce/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:11:89:2a:ae:cc:32:48:c6:e7:7e:8a:c8:dd:f5:db:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 23:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86de3911a249012d19831c18f2c505ca23e55583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:55:26:dc:8f:bf:11:d2:6a:8d:0f:92:d9:
f0:7d:cb:10:b5:a0:d3:d5:76:25:1a:f0:47:6c:18:
a8:1c:1a:f0:fa:22:47:9e:9e:72:f5:7a:ad:ff:1d:
d6:ea:ff:ae:90:b9:56:d5:10:be:bb:da:b7:ed:4c:
55:e9:fe:b3:31:fd:f2:95:b8:06:0b:06:ac:02:93:
1b:a8:66:b8:61:17:f0:72:28:9f:99:53:d6:e2:4b:
4f:ca:a5:61:cd:31:f8:56:94:46:f8:fe:42:c2:c5:
12:0c:76:42:8d:61:8a:eb:75:d8:9a:01:53:f0:37:
1b:fa:c4:ea:f8:a6:c5:ca:c0:a6:bb:2a:6d:44:f5:
53:8a:1e:e2:06:c2:27:c4:c8:fb:4c:56:38:2e:f3:
29:28:43:c1:5a:fe:2b:d9:5d:90:80:a7:8d:a3:bf:
ef:71:01:73:9d:96:1b:84:54:a7:34:df:0a:c9:4e:
a6:8f:07:f5:59:dd:bd:09:a8:11:48:7c:80:68:84:
85:dc:41:22:c7:b6:50:0d:ca:ff:7c:20:68:55:74:
a2:c7:32:4b:cd:19:28:ab:58:e2:d6:71:8f:94:a5:
0f:ea:ba:e1:5f:69:0c:6e:92:5e:72:9e:39:90:17:
9a:4a:39:9e:38:69:39:7a:66:2b:3c:b9:d3:df:36:
9e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DE:39:11:A2:49:01:2D:19:83:1C:18:F2:C5:05:CA:23:E5:55:83
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ht45EaJJAS0ZgxwY8sUFyiPlVYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:2f:46:c7:74:60:79:d0:53:49:83:b2:58:42:ab:e4:77:e8:
1e:7b:e9:51:b6:dd:bd:6d:83:7b:ad:ec:a3:82:d5:2c:83:95:
61:73:f3:50:8a:97:6a:74:4d:30:9d:d9:98:b3:d0:5d:16:b9:
b0:50:8f:7a:18:5e:6c:5c:d2:44:17:80:93:76:47:82:1b:7c:
4d:b6:85:90:a3:d6:c8:7e:f2:39:02:4e:7d:62:eb:56:fd:74:
e1:f5:67:22:f7:5f:3b:62:46:67:d4:e9:ff:77:88:54:90:19:
79:89:a9:ed:06:13:51:d3:31:51:ef:b8:7a:b2:6a:ed:21:1a:
2b:72:1a:7e:9a:3e:5e:70:75:3d:d4:fa:2e:d8:7e:17:41:39:
dc:d7:5c:8c:55:2e:48:37:ab:96:b3:d3:b9:aa:b0:e4:ee:05:
0a:ed:74:1b:ef:a1:c8:a9:da:57:04:ae:0d:58:62:ab:a4:42:
17:1c:18:4d:72:fa:48:7a:42:30:61:f4:ed:ed:b9:f8:e4:c0:
8b:88:18:ae:50:ed:b0:93:aa:41:42:72:af:da:3f:08:22:c7:
1b:af:20:78:ab:d8:52:56:ce:8c:ac:44:22:5c:59:c4:8d:66:
29:72:e9:d8:d1:21:15:f4:ce:35:72:2e:4b:17:9f:42:c7:c7:
a5:f2:ee:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:38:00 2025 by rpki-client