Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xdnEsVOEJweqiz-NvguFURe_D90.roa
File: xdnEsVOEJweqiz-NvguFURe_D90.roa (raw, json)
Hash identifier: /lBJL6tHJ8IpJ1KUX7CC52UBDVvF70Gy+OZ5RSdvDJY=
Subject key identifier: C5:D9:C4:B1:53:84:27:07:AA:8B:3F:8D:BE:0B:85:51:17:BF:0F:DD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B175CBDE6D2144E582A0FA5AD7C1BCE85
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xdnEsVOEJweqiz-NvguFURe_D90.roa
Signing time: Tue 10 Oct 2023 02:13:55 +0000
ROA not before: Tue 10 Oct 2023 02:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:17:5c:bd:e6:d2:14:4e:58:2a:0f:a5:ad:7c:1b:ce:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 02:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5d9c4b153842707aa8b3f8dbe0b855117bf0fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d2:90:81:09:58:d5:be:09:74:02:e7:46:36:
23:40:31:b2:38:d6:bf:9b:43:25:b8:43:a4:6f:f9:
af:9a:d9:ad:18:f3:67:a9:18:8f:16:88:58:f7:d4:
54:2f:48:5c:bd:98:53:06:74:70:d3:26:39:ab:b0:
72:af:24:52:9e:fc:50:d0:39:1f:bc:8a:c3:93:23:
94:67:ce:3e:56:5b:a4:89:78:c8:97:b7:52:a0:db:
a3:67:62:89:fa:33:97:c6:7a:a8:7d:7f:78:fa:9a:
39:c8:69:5d:96:8a:05:08:f7:f9:10:6f:4d:d7:76:
47:c7:80:1e:cd:6a:c8:76:aa:0f:cd:89:b1:1a:a8:
e9:4d:f3:72:ac:a6:0c:dd:37:ad:f5:bc:f8:81:04:
00:81:bf:14:14:c0:1c:cd:e5:bc:9c:37:71:c1:dd:
6c:a6:21:fc:4e:4f:6e:ba:7e:c2:a4:f5:08:b2:f5:
c3:e3:f8:e4:9d:45:2f:cc:88:3c:60:eb:26:9d:c9:
6d:e9:28:41:cc:b6:0c:04:38:17:c8:f5:3d:af:6d:
57:c9:bf:e7:ba:34:5d:24:ba:eb:e3:2f:bb:81:e4:
63:7b:4a:97:2c:ec:83:4e:d9:21:b1:59:f9:0e:8a:
f8:40:fc:28:91:df:d9:e5:1e:21:91:07:3b:c7:22:
18:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D9:C4:B1:53:84:27:07:AA:8B:3F:8D:BE:0B:85:51:17:BF:0F:DD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xdnEsVOEJweqiz-NvguFURe_D90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ba:5a:82:33:07:83:e8:c8:90:f5:47:9d:5b:5d:1b:16:c3:15:
1a:31:7c:d9:38:29:3d:92:b5:79:ac:95:a8:2f:6e:94:29:b1:
04:32:a6:2c:6f:f8:8d:b6:1e:5a:d8:06:9c:6e:b5:f0:4a:15:
e8:ba:dd:78:b9:87:2f:c0:03:01:7f:0b:45:ec:f9:84:d8:78:
7b:82:e6:8a:9b:1d:c2:4d:2f:d9:3d:8d:d2:50:de:0e:5f:23:
3a:3e:00:1b:2f:5d:bc:21:41:8f:fa:47:43:a0:54:c7:ff:bb:
d6:57:1a:da:62:a5:ce:c8:83:e2:f6:5b:43:8b:85:e0:45:a0:
71:4f:94:46:4c:65:10:61:0f:4a:e0:3d:15:91:e8:0e:91:71:
7f:4d:3d:2b:19:3f:51:bb:7f:db:ff:37:70:d2:59:d6:04:d9:
9c:bc:05:55:3c:bc:99:3e:19:99:c6:a1:e7:d7:ac:2c:a4:a4:
e6:7a:61:e3:bc:af:84:84:3e:0f:f9:69:0e:82:0d:f5:8e:c4:
28:cb:6b:33:2f:1a:dd:c2:62:fc:41:27:e1:f2:51:f2:57:02:
5c:05:f4:4e:5a:df:a4:22:e6:67:f8:dc:04:37:79:7a:a7:9c:
bd:a9:08:a1:73:09:08:0e:ff:a9:c8:7b:da:12:67:8d:7d:d3:
30:8d:c0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:05:27 2025 by rpki-client