Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xuOttVi2XrcF9fwZiYYPD66wa-U.roa
File: xuOttVi2XrcF9fwZiYYPD66wa-U.roa (raw, json)
Hash identifier: Eadlqi5MaLubI4lXdNK5fQkT8IlH3Fn0HAK3/LqxtEk=
Subject key identifier: C6:E3:AD:B5:58:B6:5E:B7:05:F5:FC:19:89:86:0F:0F:AE:B0:6B:E5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAD89E7870F647038C10B42E1681A5718
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xuOttVi2XrcF9fwZiYYPD66wa-U.roa
Signing time: Wed 08 Nov 2023 06:06:17 +0000
ROA not before: Wed 08 Nov 2023 06:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:ad89:1735/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ad:89:e7:87:0f:64:70:38:c1:0b:42:e1:68:1a:57:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 06:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6e3adb558b65eb705f5fc1989860f0faeb06be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:16:08:8d:18:24:b4:48:ae:b7:51:1d:f2:
27:67:89:ad:6a:61:d9:5b:85:7c:4f:26:d4:cc:ad:
1c:2d:8d:e7:5b:ec:98:27:d3:d1:28:3b:10:4a:91:
5a:9e:cd:7c:fa:3b:2f:71:86:4e:01:73:99:0a:7f:
78:72:a4:30:73:c2:9f:2a:b5:c9:21:40:21:57:f8:
1c:4f:ec:2b:b1:db:5b:92:e4:4c:5f:69:3c:8f:cb:
d0:b0:30:74:8f:22:26:3c:74:7c:18:bf:9a:90:c1:
78:e6:8e:d5:bb:e8:e9:0c:41:58:39:dd:8d:32:35:
53:ed:86:95:30:c2:3c:29:9f:d0:5a:01:e2:73:6c:
8d:1e:ee:fd:fe:dd:53:bf:67:27:50:98:f9:51:82:
0b:b6:a2:16:a6:e3:78:8f:b8:15:8c:1a:4a:a3:80:
6a:02:c8:a4:f2:ce:59:56:75:cd:a0:d8:e8:f6:db:
9b:c2:5b:9a:71:f2:65:a9:83:99:7e:67:e1:86:3d:
9e:d1:c7:47:4e:da:73:d5:1d:f1:46:38:c7:dc:49:
bd:2e:c1:71:52:bb:ce:45:a2:87:59:4c:af:fc:4e:
6b:93:a7:e1:9e:3c:af:fd:9b:0d:30:16:92:d5:b6:
fe:5e:fb:b5:1e:cd:e8:c7:d2:b5:f3:63:37:8f:df:
5b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E3:AD:B5:58:B6:5E:B7:05:F5:FC:19:89:86:0F:0F:AE:B0:6B:E5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xuOttVi2XrcF9fwZiYYPD66wa-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:ee:ec:2b:58:f0:76:92:e1:14:28:cd:13:72:c4:cd:90:ae:
ce:ef:ba:b5:e4:0d:8d:be:a9:78:ac:be:ff:84:6c:f4:ce:84:
31:df:cb:74:e2:cf:eb:fb:10:15:9e:e8:bc:72:db:f6:7d:1b:
6e:06:4e:52:14:1a:bd:3f:82:d7:03:84:5b:81:28:f5:dc:65:
c9:9e:bb:54:e2:7a:1b:b7:69:cf:ef:6f:71:97:9b:41:a5:f3:
93:b0:99:6b:73:3c:9d:04:87:9c:e1:cd:db:97:1a:3c:60:cf:
9d:ec:e5:10:02:6d:04:61:33:d0:8f:e5:3c:27:4b:13:a4:fc:
77:ce:b3:51:9b:46:60:3f:40:8a:e8:c3:41:cc:41:88:53:7e:
8d:e6:6f:00:0f:9d:71:78:fd:bc:6b:a3:55:64:11:91:22:7d:
ea:b3:88:ef:b2:ab:8d:10:20:88:3e:87:9f:42:ac:b3:cb:18:
6a:c9:6a:9d:f7:6a:49:74:37:47:4c:3c:8b:2b:81:28:88:1a:
f4:35:61:5e:52:ca:73:e7:97:08:95:da:c9:7b:2e:0e:4b:46:
e1:01:ba:c4:de:d3:a1:cb:3c:3f:0d:20:b7:82:78:51:20:b6:
43:fe:7a:c5:03:eb:ea:bb:fd:a6:07:7a:cd:b2:21:7b:bb:f0:
cc:c4:d4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:49:22 2025 by rpki-client