Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/huT-lpLdvpYFEZDJOpzPL9IfUWU.roa
File: huT-lpLdvpYFEZDJOpzPL9IfUWU.roa (raw, json)
Hash identifier: 2g7Bfi900HwGJ5i8Ah1G68uf0FjO7FPHZziJePKWv7s=
Subject key identifier: 86:E4:FE:96:92:DD:BE:96:05:11:90:C9:3A:9C:CF:2F:D2:1F:51:65
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE74DF2C0121EF6EA59607A3087C9E850
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/huT-lpLdvpYFEZDJOpzPL9IfUWU.roa
Signing time: Sat 30 Sep 2023 18:15:59 +0000
ROA not before: Sat 30 Sep 2023 18:15:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e7:4d:f2:c0:12:1e:f6:ea:59:60:7a:30:87:c9:e8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 18:15:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86e4fe9692ddbe96051190c93a9ccf2fd21f5165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:8b:bb:75:21:4e:83:9b:06:c7:9b:eb:ad:
19:03:07:51:39:ca:27:fa:58:c7:cd:2f:4e:a9:29:
11:c4:82:22:10:2f:09:2b:b7:a4:f6:9a:9a:cc:8e:
2d:21:00:04:6c:b5:99:30:5b:41:21:87:13:cb:fe:
1b:b7:ce:c6:e7:1f:88:59:d9:8e:3a:b9:14:88:4e:
59:8f:5c:96:94:fb:2d:b4:ef:d8:a4:c3:8d:aa:00:
87:b3:d5:0b:f9:38:3b:e1:1d:63:d9:da:2f:eb:12:
a3:70:d4:75:d8:53:ff:92:93:35:4d:31:de:9c:39:
24:78:d7:ef:db:cc:87:97:d1:bc:32:bc:e3:22:0f:
f3:ad:25:c8:ee:97:72:32:d6:55:db:c4:70:09:4a:
db:f9:2e:8f:d6:c6:86:f2:a7:17:32:11:6e:b6:b9:
3c:06:f7:02:91:78:34:ea:ce:69:d9:42:90:2d:63:
8f:3c:7d:32:19:8a:47:b3:35:dc:eb:69:8d:71:33:
d8:9b:60:ac:af:73:1c:19:67:c8:b6:70:49:c0:72:
e6:7b:0a:fe:15:5f:7c:b8:c0:3f:3e:17:5c:82:2b:
13:b3:bc:e5:a9:3e:a8:2e:fb:1a:ba:0d:21:0f:c2:
a6:6a:be:ec:d4:67:cf:82:44:e3:24:2c:d4:9c:b5:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E4:FE:96:92:DD:BE:96:05:11:90:C9:3A:9C:CF:2F:D2:1F:51:65
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/huT-lpLdvpYFEZDJOpzPL9IfUWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:59:3c:54:16:0a:26:76:76:fb:a5:eb:33:d7:a3:fb:a9:16:
5f:6f:65:b2:79:ba:25:9f:e0:a1:d1:b0:fb:c9:11:34:f4:f4:
98:08:a3:99:d8:9c:5e:d1:e6:d8:89:b0:b9:47:a2:ee:df:9e:
99:b1:8e:ac:ec:c6:86:af:82:31:62:b6:64:52:15:c5:76:2d:
e6:db:4d:70:9c:31:c5:19:0c:97:4d:7c:60:b5:05:56:ec:b0:
e8:d5:65:03:c0:10:67:14:6d:71:61:51:de:92:8b:e6:ff:83:
0c:e4:c3:a0:d4:4a:5c:0d:6d:0d:dc:56:84:ed:1d:cf:5c:e6:
5c:61:96:ab:21:f6:72:1a:23:2d:62:f8:36:69:6d:3a:33:62:
55:88:61:7e:14:d9:08:14:2b:e3:55:60:9c:5f:a0:b3:d8:08:
10:73:a0:00:d0:de:ca:b9:cf:83:72:9f:9c:b3:1d:59:9f:2a:
2e:76:7c:4a:01:33:a9:17:c1:e9:da:e8:56:b5:a8:9d:88:1d:
b8:24:3b:cc:1a:6e:fa:00:de:9f:77:c7:a2:2f:4b:c9:83:85:
32:6d:de:8c:20:9e:ec:da:82:99:19:85:0b:3a:93:d7:4f:c5:
d7:35:db:ad:5c:f4:91:6a:d5:26:e5:ce:99:9a:1c:64:33:a2:
3b:2d:12:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:35:28 2025 by rpki-client