Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xffGYIYlSVPXUt5YO5rcNKRy_XM.roa
File: xffGYIYlSVPXUt5YO5rcNKRy_XM.roa (raw, json)
Hash identifier: 7mQ9vaD/BjxJHTpjNoX3D8Dqz7O4ttrz7THdV0taAPY=
Subject key identifier: C5:F7:C6:60:86:25:49:53:D7:52:DE:58:3B:9A:DC:34:A4:72:FD:73
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C77B2A7E8BD463049D3E6B8CE24B5D498
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xffGYIYlSVPXUt5YO5rcNKRy_XM.roa
Signing time: Sun 17 Dec 2023 12:14:06 +0000
ROA not before: Sun 17 Dec 2023 12:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:77:b2:a7:e8:bd:46:30:49:d3:e6:b8:ce:24:b5:d4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 17 12:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5f7c66086254953d752de583b9adc34a472fd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:09:ab:28:bf:2c:29:81:7d:04:41:d1:7d:7a:
c7:5e:88:65:27:8a:f8:f7:d8:f6:a7:86:7e:09:c7:
b7:ad:8a:b4:1f:14:ba:eb:7a:2a:c3:5f:7c:f9:d0:
b3:60:de:80:e7:b3:a0:74:98:74:bb:95:9b:66:62:
88:92:c3:cc:e5:92:2c:ce:2e:5b:4a:1e:f6:44:94:
b2:32:35:c4:f2:9a:fa:dd:48:d0:34:c8:e6:d3:37:
04:49:30:d8:d6:66:85:13:19:22:47:e9:92:7c:0e:
8c:2d:6d:8a:f1:97:ce:7b:4a:05:0f:73:f1:dc:9e:
60:5a:f3:fa:c9:88:6b:99:41:99:75:15:7a:8a:db:
0e:0c:07:4d:37:9e:70:5d:94:e0:be:30:4c:23:b7:
c6:d7:13:b4:8f:00:bd:47:f3:cd:67:8a:04:10:d1:
f3:62:07:3e:87:78:35:43:92:5b:c1:7f:48:8e:c8:
ba:b6:c4:c7:2e:e6:a3:f9:69:b4:3c:4e:98:b8:43:
07:47:fa:27:b7:54:d6:da:a3:15:c1:f0:88:da:89:
86:59:a3:11:74:26:f5:5a:41:ae:ba:27:dd:a8:6c:
c6:c1:31:ba:28:76:34:6a:f4:4a:8f:dc:7d:83:38:
c8:62:9c:29:c7:3f:47:f2:ea:87:d4:4d:f2:65:bc:
17:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F7:C6:60:86:25:49:53:D7:52:DE:58:3B:9A:DC:34:A4:72:FD:73
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xffGYIYlSVPXUt5YO5rcNKRy_XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:4d:54:3e:f2:ca:24:08:0e:e9:6c:9e:fd:00:e9:f0:e6:76:
61:d5:32:da:4b:89:69:28:7f:e3:57:f1:26:63:0c:bd:09:86:
ca:e4:4b:39:45:42:29:aa:f4:1d:51:c6:7a:c7:f9:6a:f7:05:
5a:0f:3b:83:93:ec:32:d6:6f:79:76:d9:7f:00:67:99:ba:e1:
31:a8:07:92:02:ee:de:9a:1d:c9:df:ed:e4:ba:1c:84:78:4a:
a9:21:d0:ca:80:28:11:38:de:d1:52:ce:5e:65:9a:55:ba:e2:
eb:0e:5c:c6:12:87:1c:f5:d8:2e:7f:b3:75:5f:bb:1a:99:61:
f9:5d:94:ee:e2:fa:bc:39:a8:2e:13:95:a8:7c:e9:8d:40:f1:
bf:98:88:84:10:3b:ab:88:23:03:d1:a7:4d:85:dd:27:52:48:
c6:d9:8a:00:0a:e8:18:7f:c8:6d:05:97:b2:4a:48:49:e6:3c:
de:d6:5c:f5:fd:24:02:a5:d2:33:d3:2e:06:92:bb:80:61:84:
9d:6d:26:5d:c2:ed:42:d5:5f:60:cb:af:da:c4:53:34:66:ef:
90:a0:60:79:d0:5e:b2:4d:cb:80:84:81:48:11:b7:83:04:46:
84:64:84:66:33:a6:a3:4e:51:fe:d5:74:a1:36:59:0a:7f:40:
27:bc:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:59:39 2025 by rpki-client