Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1Z9V85zfiQJmvLhQIppn9xXeU1c.roa
File: 1Z9V85zfiQJmvLhQIppn9xXeU1c.roa (raw, json)
Hash identifier: Jthq5r3er12xOuQaEhkOpujVPFzQ5SkXiw6TCF29XNo=
Subject key identifier: D5:9F:55:F3:9C:DF:89:02:66:BC:B8:50:22:9A:67:F7:15:DE:53:57
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD6202C5FBAE8ADC3AD9DFF0A3AB92E09
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1Z9V85zfiQJmvLhQIppn9xXeU1c.roa
Signing time: Wed 27 Sep 2023 10:12:27 +0000
ROA not before: Wed 27 Sep 2023 10:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:20:2c:5f:ba:e8:ad:c3:ad:9d:ff:0a:3a:b9:2e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 10:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d59f55f39cdf890266bcb850229a67f715de5357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:3c:cf:74:80:2d:d9:6f:4e:73:99:88:5b:
17:08:99:08:27:89:92:d0:b6:c3:f6:e1:87:8e:d5:
0c:58:9f:a6:51:d7:11:3e:5d:5b:18:72:82:5d:7f:
b8:38:57:aa:27:4a:46:bd:73:d3:85:81:78:49:cd:
ba:53:74:98:14:e5:32:15:ae:d6:a0:c7:87:22:c2:
7d:5b:e9:b4:54:65:3d:b4:12:0f:9f:ed:c6:8d:f9:
f0:87:e8:20:cf:4e:0d:34:b3:2f:96:24:d7:e2:fa:
73:62:73:cf:e5:cb:46:7b:74:f3:c6:77:d2:b3:9d:
1f:d3:97:04:92:85:3c:c0:83:f5:20:f8:8e:56:8f:
b5:36:95:71:df:4e:63:29:17:89:5d:c4:c4:94:40:
a0:e6:41:5a:9c:b8:c7:3c:db:44:70:d3:ae:63:93:
d0:4d:de:10:d3:a6:f9:d5:05:c9:ca:d1:1a:b3:a2:
2f:6d:24:98:60:2a:cc:bf:7b:a8:d2:70:a9:48:55:
3f:cb:97:f3:a5:03:5d:0b:4c:23:ff:7f:76:54:38:
1f:63:78:6b:f8:f3:63:e9:77:9e:17:8a:02:02:0f:
88:b3:cf:2e:db:0f:62:22:94:c9:b6:2a:e1:1a:54:
d8:07:4b:0b:67:65:ae:62:09:c2:75:25:4e:7b:fb:
6b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9F:55:F3:9C:DF:89:02:66:BC:B8:50:22:9A:67:F7:15:DE:53:57
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1Z9V85zfiQJmvLhQIppn9xXeU1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:93:d0:0d:99:e3:b7:6a:da:2c:f9:2a:52:26:fc:4e:a5:80:
b3:96:b6:77:31:da:2c:b8:80:05:f1:cf:01:b9:38:48:96:11:
b4:7a:0a:5e:f6:32:94:2c:c4:64:47:87:c2:bc:cf:13:f0:e2:
89:d7:b1:95:ea:44:27:28:ba:9c:04:c5:01:63:41:7b:89:ad:
a2:11:26:18:ee:45:36:92:df:d4:31:54:91:e4:dc:3c:90:8a:
91:8f:f8:17:c4:f5:3e:f5:2a:92:4f:6a:c2:cd:06:19:2d:2e:
4e:a5:d9:dd:7d:e4:32:3e:b4:16:2a:17:c6:f6:db:6d:21:58:
25:d5:a0:15:af:3a:40:a0:92:55:e0:22:5e:af:3e:50:0e:25:
08:3c:56:8c:78:5b:1e:65:cb:7f:fe:41:dc:73:ea:8a:08:65:
40:2e:7c:d6:09:8c:55:2d:66:3d:58:92:7f:39:e7:f1:50:90:
11:5a:42:ef:14:51:f1:96:11:f1:ea:c3:6c:58:ee:ca:95:46:
44:75:b9:67:1f:a7:71:1b:ce:a5:32:e1:3c:10:f5:fe:a1:75:
c6:f6:51:1b:a3:c0:e6:49:23:a3:1b:21:70:f1:45:3d:59:12:
9d:f6:0f:a2:5e:72:1b:d9:3d:03:9d:af:a0:2f:4e:2f:76:3d:
25:29:02:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:12:40 2025 by rpki-client