Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xBHtz9lQU5XLWowcej2cc2PG19E.roa
File: xBHtz9lQU5XLWowcej2cc2PG19E.roa (raw, json)
Hash identifier: 75SI13t9XBgNCdJlO91Rrap7GIU1vUcXsTj3PRTazd0=
Subject key identifier: C4:11:ED:CF:D9:50:53:95:CB:5A:8C:1C:7A:3D:9C:73:63:C6:D7:D1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C069C16838C378167A168F3A1798CD1D0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xBHtz9lQU5XLWowcej2cc2PG19E.roa
Signing time: Sat 25 Nov 2023 13:12:21 +0000
ROA not before: Sat 25 Nov 2023 13:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:06:9c:16:83:8c:37:81:67:a1:68:f3:a1:79:8c:d1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 13:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c411edcfd9505395cb5a8c1c7a3d9c7363c6d7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:07:2f:d3:c4:54:97:41:80:87:ff:68:3d:e1:
83:3f:58:2d:af:7f:f7:34:59:f9:c6:52:b9:15:ec:
fd:8a:81:45:82:21:ac:2a:c8:33:2d:1a:19:04:3c:
2d:01:04:6b:86:4d:fa:48:4c:d1:e5:aa:93:5e:c1:
b2:86:31:55:50:cd:b4:6a:8e:60:12:2c:5e:bf:64:
18:ea:fa:71:2b:6f:8f:8a:8c:00:cf:79:04:c6:73:
3b:17:c5:c2:48:c2:bf:89:bb:50:d7:bd:32:d2:99:
ab:1d:bb:e7:9e:0b:e1:29:d3:76:90:3d:fb:25:d5:
8c:ae:5a:b7:0c:f3:da:1c:35:62:fb:31:93:ba:c5:
14:5b:1d:c0:9a:05:0e:77:90:e3:87:1e:60:90:68:
a1:fe:ed:4a:a9:41:56:94:1f:a7:d5:0d:c6:c5:c0:
28:53:c2:c4:bc:bb:09:31:36:e8:a6:43:1d:dc:a0:
fc:68:04:64:c1:2d:c8:78:9e:49:d0:82:df:21:7a:
f1:ad:70:a6:ac:a7:cf:73:5a:f7:da:3d:c0:a8:71:
01:4b:93:a6:3a:f9:f0:b3:87:b7:3c:56:69:e0:94:
61:c1:60:9c:72:41:80:7d:41:61:e9:e1:e0:67:01:
d8:94:2b:ed:8e:ef:52:bc:89:96:8c:10:23:1b:78:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:11:ED:CF:D9:50:53:95:CB:5A:8C:1C:7A:3D:9C:73:63:C6:D7:D1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xBHtz9lQU5XLWowcej2cc2PG19E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:82:99:de:69:3a:c8:d6:cf:9e:0d:35:a8:cd:c1:ed:69:67:
3a:e2:be:77:de:02:e9:1f:4a:56:49:a2:10:a6:e1:89:03:e0:
1a:fc:0e:80:16:08:67:a0:e7:35:43:c6:88:55:04:b8:97:6b:
c7:33:47:79:ca:f1:9e:76:a0:be:15:33:bb:d9:4b:c4:c1:f2:
07:3f:25:70:ed:40:9d:a8:51:d7:67:97:90:a5:eb:40:3a:a6:
52:d3:44:cb:66:2b:96:78:b1:a1:23:b1:ef:cf:69:60:d6:70:
fc:ff:ef:f4:88:fb:f0:1a:2c:05:b3:27:12:0f:69:68:08:ee:
06:62:8e:cc:88:69:13:d1:ae:d0:a9:13:71:01:e7:bd:45:23:
5c:bd:f2:0a:98:f6:f7:f3:8e:3e:5a:a4:be:f6:e1:7b:b5:86:
ff:74:77:02:a8:bb:ee:d7:82:e5:1e:d5:57:b4:3f:10:2c:79:
34:9a:84:91:81:eb:3f:c0:8c:1c:6f:f7:75:e7:c4:ca:d0:2c:
13:7f:04:be:58:3c:40:30:79:d2:1e:39:a6:9c:fd:a0:fd:85:
df:cf:51:fc:ba:72:a9:f3:47:4c:02:b2:97:02:87:de:da:46:
5b:73:90:87:2e:39:94:0b:f7:fc:bf:57:ba:45:d7:b3:55:49:
12:3e:2b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:19:24 2025 by rpki-client