Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xoTuO2_zDtzn1SAmfmPpF6DciWM.roa
File: xoTuO2_zDtzn1SAmfmPpF6DciWM.roa (raw, json)
Hash identifier: EuOVzRkKsvuNXW42ytezKOnC+RnHAcdrX7vXtJdrHLg=
Subject key identifier: C6:84:EE:3B:6F:F3:0E:DC:E7:D5:20:26:7E:63:E9:17:A0:DC:89:63
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA077547FAE22A7DAE8ED270D0C488E34
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xoTuO2_zDtzn1SAmfmPpF6DciWM.roa
Signing time: Sun 05 Nov 2023 17:10:56 +0000
ROA not before: Sun 05 Nov 2023 17:10:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:a071:674e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a0:77:54:7f:ae:22:a7:da:e8:ed:27:0d:0c:48:8e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 17:10:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c684ee3b6ff30edce7d520267e63e917a0dc8963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:54:c8:d9:13:7f:41:8d:82:ef:ce:cc:44:7f:
36:3e:fc:c5:08:54:bd:05:d2:c5:e1:42:52:7f:c5:
fb:0b:0f:ed:9e:5d:fe:e6:1f:a3:02:05:0e:c4:fb:
f5:f1:79:02:65:9e:a0:09:b0:08:6e:76:24:6a:2f:
7c:10:c9:e7:01:61:14:01:b7:4c:c8:be:ee:ad:3c:
5c:45:21:e1:2f:30:a2:81:ca:18:de:90:71:91:14:
ce:12:30:df:e0:a9:31:75:02:6c:f7:10:27:47:e1:
b4:dc:91:b4:ae:a1:3a:e6:3a:3a:88:bc:76:0a:72:
7a:8e:0b:b9:67:fa:99:aa:2c:3e:06:4f:40:3f:40:
ae:ad:76:21:6f:d0:0b:17:19:a9:0b:e9:fd:ed:a4:
04:75:ac:53:b9:e3:a8:86:12:e3:7c:7f:15:92:be:
e7:51:18:39:da:a7:f2:f6:95:bf:ac:97:9d:48:ed:
9f:12:fb:7d:68:59:e5:2e:81:36:02:01:93:0e:20:
cb:fc:05:25:d9:f2:8a:b6:3f:dc:c4:2b:26:99:e7:
7c:b1:3b:5c:e3:e3:be:0b:d4:58:be:8f:83:c2:30:
e7:ec:27:0a:f2:86:ec:ae:ac:17:94:a1:40:6f:c4:
80:de:1b:a6:63:33:60:1a:8c:48:e6:21:02:d9:79:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:84:EE:3B:6F:F3:0E:DC:E7:D5:20:26:7E:63:E9:17:A0:DC:89:63
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xoTuO2_zDtzn1SAmfmPpF6DciWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:60:90:87:b8:da:37:01:e8:f8:50:db:6c:2c:f1:80:0c:7e:
99:84:63:7a:c8:9d:f8:a2:72:32:54:aa:6e:2b:1a:85:16:2a:
4f:8a:8e:59:a2:00:b2:27:79:f7:22:df:75:7b:74:f0:11:44:
9b:2d:5e:83:38:01:ab:44:8e:7f:10:44:ae:19:67:e6:b0:d3:
61:53:71:f8:c4:17:9c:78:d1:9b:f2:64:38:c1:13:32:7e:b3:
d5:6e:c9:0c:9c:ef:b3:42:06:a2:0d:3d:db:98:5b:86:02:2a:
8a:92:76:ec:a5:15:20:3f:48:b4:c0:12:5c:fa:e2:1d:c0:48:
f5:6a:ad:10:71:d7:7c:41:92:6b:08:c1:6c:58:2b:39:44:02:
3c:07:5b:51:79:cf:17:af:eb:83:47:8a:db:09:62:f0:b6:62:
b2:60:2e:aa:94:c0:8f:c0:ef:71:f5:bc:1f:d9:46:9d:61:ff:
10:14:2f:2e:b0:cf:88:c7:4b:9a:fe:46:16:64:a4:60:a2:08:
2e:8b:51:03:1a:f4:0b:2c:8c:51:ca:18:18:07:bf:ac:21:21:
5b:40:75:6d:0e:b9:b2:02:33:c7:82:b0:66:16:8f:65:0e:d0:
6b:0a:8f:90:12:45:e5:02:37:d1:13:b0:c2:88:42:f1:2d:67:
ce:71:13:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:46:16 2025 by rpki-client