Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xQBKJtJVrFTScSDxCjjxW-0gBmI.roa
File: xQBKJtJVrFTScSDxCjjxW-0gBmI.roa (raw, json)
Hash identifier: J8TygxAAdSRRhvuLTTszRSSqXQKML7IylXoX4XlQu4I=
Subject key identifier: C5:00:4A:26:D2:55:AC:54:D2:71:20:F1:0A:38:F1:5B:ED:20:06:62
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B27AAA1C4347E27ED9BFBACE9F052BA37
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xQBKJtJVrFTScSDxCjjxW-0gBmI.roa
Signing time: Fri 13 Oct 2023 06:12:55 +0000
ROA not before: Fri 13 Oct 2023 06:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:27:aa:a1:c4:34:7e:27:ed:9b:fb:ac:e9:f0:52:ba:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 06:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5004a26d255ac54d27120f10a38f15bed200662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:d7:db:6e:95:2d:15:1f:f6:23:f2:c9:4c:
e1:fe:3a:ef:b1:83:75:25:49:28:0d:ad:3d:02:df:
08:62:be:57:53:ab:e8:ef:aa:e5:b2:d9:eb:26:80:
e0:3e:e4:68:9f:9c:f7:96:e7:6f:45:54:ae:a0:ec:
5f:ca:d5:d8:c6:f2:c4:e9:f4:dd:44:e3:fd:32:15:
b1:b3:81:a8:59:fd:c1:a7:42:60:e3:ed:79:3c:7a:
02:d6:7b:df:25:fd:13:c6:c3:45:ec:63:41:12:38:
dd:ae:ef:45:8f:c5:1e:5d:7a:22:32:39:4e:71:02:
f2:29:96:f7:94:7e:20:63:e0:a6:66:3b:ee:5e:d7:
16:49:69:8e:3e:65:5b:74:28:ff:21:1a:7f:00:7e:
21:85:28:31:da:f0:91:3b:c6:69:92:5d:37:03:33:
db:59:b2:59:23:76:74:0a:35:32:1b:78:80:f2:98:
aa:eb:62:8c:c2:ef:5f:f8:72:72:c5:c1:f4:02:64:
13:e7:21:cf:6c:62:f4:31:02:f3:ff:89:ec:85:c9:
7b:72:0b:e1:a8:e3:8e:6e:f9:7f:2b:97:e2:75:17:
a8:82:1c:36:68:13:1c:fb:21:de:af:a5:ca:61:bb:
53:ca:f0:b0:05:2a:0e:80:b6:61:bd:e4:53:b7:e5:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:00:4A:26:D2:55:AC:54:D2:71:20:F1:0A:38:F1:5B:ED:20:06:62
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xQBKJtJVrFTScSDxCjjxW-0gBmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:c8:39:3b:28:0f:8e:77:72:e0:8e:6a:3b:95:d3:1c:f6:1f:
38:cb:c6:36:9a:f0:f4:cc:d8:c7:7f:5e:1c:3f:5c:97:71:d7:
d7:c8:ea:98:d9:57:e8:32:1c:a2:17:37:ba:4c:27:b8:36:47:
90:c4:30:20:54:cb:77:0a:24:20:62:35:27:54:78:f6:58:19:
ea:ca:26:e1:73:a3:f6:4a:18:18:0f:13:aa:6c:e0:bd:f1:33:
54:f0:a3:1e:2f:9c:e3:27:90:b0:97:e8:7a:2e:b0:99:29:10:
86:ea:2e:79:85:c3:22:52:fa:65:42:d6:e9:52:9f:c1:72:47:
2e:3f:5d:63:76:7c:2b:e4:9e:aa:8f:fa:8a:4f:bf:16:d3:dc:
85:10:af:b1:34:09:ca:2d:ae:fd:c6:f4:f2:21:b1:a3:de:3c:
b3:b1:38:ee:00:16:6b:aa:6d:bc:e9:1c:f9:dd:14:ca:99:5e:
bc:1d:69:19:2a:82:83:7c:29:ef:81:0f:ab:e0:bf:d6:b9:66:
ca:d2:59:7c:f7:f4:b7:f0:60:f5:b9:7a:9a:81:b5:16:54:5c:
a6:8b:81:b7:65:b4:4e:74:7d:9a:98:cc:88:0b:2c:d2:4f:bd:
42:8b:d0:67:9b:8b:0a:8e:34:2d:df:38:32:db:64:91:2f:4d:
3d:d0:4c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:33:40 2025 by rpki-client