Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xqUs_mKntOBqtdYs5rwvgNJpNA4.roa
File: xqUs_mKntOBqtdYs5rwvgNJpNA4.roa (raw, json)
Hash identifier: 3gHTn7WO6wN+2B5hN4gngzB8VQ7n2OQ2lltjVKaeA3k=
Subject key identifier: C6:A5:2C:FE:62:A7:B4:E0:6A:B5:D6:2C:E6:BC:2F:80:D2:69:34:0E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1C8319D2AC55A4B09041170AE6A92B8F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xqUs_mKntOBqtdYs5rwvgNJpNA4.roa
Signing time: Wed 11 Oct 2023 02:13:55 +0000
ROA not before: Wed 11 Oct 2023 02:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1c:83:19:d2:ac:55:a4:b0:90:41:17:0a:e6:a9:2b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 02:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6a52cfe62a7b4e06ab5d62ce6bc2f80d269340e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fb:67:fe:d6:ab:14:89:0d:df:cf:21:fe:90:
e8:e7:ec:fd:b8:ef:6a:87:a1:41:29:36:65:74:31:
e4:1c:45:fe:96:ae:62:73:c6:ef:69:96:80:67:4d:
b3:93:23:8d:49:4b:37:d8:38:bb:37:a4:74:2e:3d:
18:f4:2e:36:d5:61:4c:b1:5f:49:44:4a:e5:41:2f:
f5:6d:7d:f5:e3:48:a5:72:2c:fd:8b:c2:a7:07:b2:
1d:8b:40:ab:b8:78:33:ea:64:fe:ed:04:92:37:31:
e4:be:5e:b0:d9:24:7a:a1:9f:7b:cd:93:1d:92:b3:
cd:30:e9:be:1f:8d:17:0d:79:2a:fa:70:7e:41:c1:
71:5b:2b:14:7e:88:d3:86:e3:c6:1c:66:80:07:0b:
08:71:d7:a1:cf:ec:f7:75:39:f8:3e:73:ec:9e:09:
39:cb:07:01:8b:b6:3a:e3:d1:e8:21:8b:4b:95:c7:
9b:a3:a0:ce:9e:6e:51:64:56:9e:b8:85:39:e4:e4:
4e:00:f2:69:40:5f:a3:46:f3:b1:17:a8:50:37:3b:
6d:72:56:78:fb:fc:8e:b1:b3:78:6a:bf:dd:a3:6d:
b7:48:b1:4d:d8:e5:92:8c:e4:a6:f3:3a:04:29:e9:
1c:2a:13:1d:2e:92:4b:7f:d9:9d:7d:19:1e:04:04:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A5:2C:FE:62:A7:B4:E0:6A:B5:D6:2C:E6:BC:2F:80:D2:69:34:0E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xqUs_mKntOBqtdYs5rwvgNJpNA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:0e:f0:6e:0b:41:8b:fa:47:69:c8:74:df:05:37:99:4d:fc:
93:d6:46:37:cf:77:29:78:f7:fa:23:ba:38:6a:f1:0f:00:95:
85:4c:ec:fb:40:5d:ca:ad:ae:17:aa:90:db:d8:df:bb:4f:a0:
e7:03:8a:29:57:ad:b4:3a:5e:f3:2f:f5:c7:26:00:62:d3:ec:
19:36:16:77:a3:7a:8b:0e:39:6b:89:6a:70:0a:8a:df:57:eb:
b6:e6:c4:f3:69:12:e0:1b:2d:c1:c0:5c:be:c3:7a:97:76:bc:
5c:dc:8c:a1:2c:a4:5c:62:56:b4:45:e1:3b:e1:21:00:36:9f:
1f:53:b1:d2:b8:8b:52:f5:0b:b6:e6:52:dd:c4:43:49:dd:79:
d7:72:67:98:b3:77:c2:66:a6:a0:ec:48:5c:62:ae:de:92:12:
e8:31:a5:a3:e4:0f:72:be:3f:ad:42:27:5b:73:bb:7b:91:33:
0e:f5:60:e6:8e:41:7a:f0:a6:fb:a9:e0:34:55:6e:3c:2f:b0:
49:61:a4:85:ab:b1:8c:7a:39:c7:55:25:52:cf:ac:8a:e7:ef:
40:01:0b:1a:0c:2e:17:ec:68:50:be:c7:77:da:36:2e:a2:6a:
2f:70:c8:be:2e:b7:37:31:3f:14:b2:13:d0:3d:82:61:71:7b:
9d:70:00:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:29:32 2025 by rpki-client