Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x59iOjqWO4jo6ir6sGk4QOVUYLs.roa
File: x59iOjqWO4jo6ir6sGk4QOVUYLs.roa (raw, json)
Hash identifier: DO1jEUSVFMJh1QO5RQbVozFdmBK7VCRvxhzR1usg+Zw=
Subject key identifier: C7:9F:62:3A:3A:96:3B:88:E8:EA:2A:FA:B0:69:38:40:E5:54:60:BB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C43FB9DC9BF2CF52AC04700619D016530
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x59iOjqWO4jo6ir6sGk4QOVUYLs.roa
Signing time: Thu 07 Dec 2023 11:13:32 +0000
ROA not before: Thu 07 Dec 2023 11:13:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:fb:9d:c9:bf:2c:f5:2a:c0:47:00:61:9d:01:65:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 11:13:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c79f623a3a963b88e8ea2afab0693840e55460bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:66:f4:ee:63:dd:0d:92:be:db:49:47:09:9e:
b5:d7:e8:f3:c6:b3:62:c7:a8:10:44:5b:c0:1e:94:
71:48:58:c9:d0:9f:81:ca:bb:ed:ce:49:28:b3:fa:
d5:78:aa:9b:de:d4:d8:6c:5c:db:75:f4:4b:a1:00:
19:07:ff:58:d6:41:b5:72:ae:96:b5:ce:97:42:7d:
9e:95:8e:3c:09:43:75:ca:0e:ed:ff:d8:41:a6:28:
7a:30:18:7b:d9:9c:26:1a:36:94:39:b4:75:e6:54:
cc:47:32:a1:fe:a6:7e:a5:14:4e:96:c6:d0:fd:73:
02:57:55:ff:be:18:f5:36:11:d8:98:1f:84:28:1b:
b1:44:e8:f9:b4:6b:ef:78:40:6d:7f:d4:d7:24:10:
88:a4:50:dd:86:c9:0f:e0:6a:ec:04:03:6a:38:b9:
5c:a8:60:38:03:e9:aa:48:88:5b:20:fb:18:f8:db:
e8:77:20:f6:46:49:8f:14:79:53:ab:bf:d4:7e:65:
93:30:cc:de:52:d6:1f:eb:2b:3f:6a:db:9c:14:3d:
66:b5:51:16:1e:85:28:67:f3:82:6e:a2:0a:a4:98:
4a:74:80:0f:a8:b3:a5:6d:31:cd:63:ce:8f:9c:b8:
53:93:b2:c7:4a:7d:08:e9:b2:b9:be:c1:3b:59:01:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9F:62:3A:3A:96:3B:88:E8:EA:2A:FA:B0:69:38:40:E5:54:60:BB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x59iOjqWO4jo6ir6sGk4QOVUYLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:85:20:86:35:22:f5:fe:9b:dd:fa:76:19:5f:8a:cc:64:e1:
3d:d2:8a:9b:b5:3f:32:a0:e2:c7:62:cc:4b:73:72:a4:04:1b:
e1:96:f6:77:62:d0:c7:44:94:8e:bd:96:a6:33:d5:5f:09:19:
fa:c3:c5:4e:f1:b6:c9:75:a4:ca:22:b7:88:3e:f2:52:a7:91:
f8:db:c8:ac:0a:fd:c4:7e:ac:0d:40:f0:85:75:5c:aa:76:61:
c4:26:a7:f7:c7:06:97:21:5d:5e:c5:54:18:15:a2:06:c5:94:
4d:b4:3e:42:b2:f7:ea:66:47:03:ab:7a:e7:34:9c:11:95:67:
d9:ac:8c:40:5e:60:89:ba:f3:59:0e:95:43:f6:3a:ab:cd:62:
99:fc:36:40:c6:71:0e:d2:e1:c1:fb:05:fb:79:4f:08:ef:da:
99:0f:5a:ff:63:c3:a6:93:01:eb:66:86:fd:3b:aa:a8:ba:6f:
5f:56:13:e6:67:be:5c:d2:1f:be:fe:81:33:07:00:2f:ed:85:
58:6e:b6:e8:1d:74:4d:5f:82:55:f6:68:62:88:ce:32:2f:f2:
7e:cd:bf:61:10:90:f5:88:c1:5a:fd:e9:74:05:3c:e6:70:61:
be:4e:bd:37:f3:cc:05:be:7d:7d:59:38:f0:a2:0f:9d:bc:c6:
c0:29:e1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:38:47 2025 by rpki-client