Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7JAJsIj0bldjFYQY25pW8JAjhTs.roa
File: 7JAJsIj0bldjFYQY25pW8JAjhTs.roa (raw, json)
Hash identifier: PcM3rP3P5/PEChXod+RPwxrzmkInwgpuZ1muWavGfLQ=
Subject key identifier: EC:90:09:B0:88:F4:6E:57:63:15:84:18:DB:9A:56:F0:90:23:85:3B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1FF1AEAF82FAE670659D5D653D4B8829
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7JAJsIj0bldjFYQY25pW8JAjhTs.roa
Signing time: Thu 30 Nov 2023 11:16:21 +0000
ROA not before: Thu 30 Nov 2023 11:16:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:f1:ae:af:82:fa:e6:70:65:9d:5d:65:3d:4b:88:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 11:16:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec9009b088f46e5763158418db9a56f09023853b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fe:90:26:5c:ba:7c:b3:92:70:58:0f:03:e5:
a2:d1:aa:31:53:23:a9:2a:f3:e0:50:02:cf:ad:de:
46:be:2a:13:6a:2c:ca:a7:74:d4:f2:c6:36:08:7b:
43:54:73:1e:3c:8a:26:39:33:ef:ac:3e:28:21:2e:
7c:28:64:b8:a6:d7:af:02:d3:d8:4f:8d:7c:b0:bf:
71:0f:5b:51:0f:55:a4:a7:9f:36:10:73:a2:04:e9:
9b:ae:17:f9:f0:e1:b6:e0:e0:4d:b7:71:7d:a8:17:
c8:37:05:fe:20:a0:18:0d:5c:16:7b:e0:d9:78:fe:
bf:d1:44:8e:93:fd:04:fa:4a:b4:bf:8e:16:37:55:
3d:37:d2:34:6b:c6:34:cc:b4:ec:5d:98:41:ad:09:
cd:65:57:18:d7:58:ae:e4:e2:f3:ff:17:84:eb:91:
94:07:29:43:52:41:3e:f1:8c:85:a8:a1:fa:ed:c5:
5b:df:e2:b6:98:6e:6f:7b:b8:af:05:48:9e:ec:ed:
73:c3:ce:ab:3f:5e:c4:c5:4f:6f:6e:e6:c9:2d:49:
21:53:42:c3:60:e0:33:d8:3c:d7:d5:71:c7:12:a8:
9f:f9:f0:0b:32:b8:bb:fe:47:ac:d5:c5:d0:a4:1a:
d4:49:de:1f:21:f5:ae:e4:7a:c3:0b:37:e4:8c:9b:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:90:09:B0:88:F4:6E:57:63:15:84:18:DB:9A:56:F0:90:23:85:3B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7JAJsIj0bldjFYQY25pW8JAjhTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:4b:ec:f8:50:52:95:c4:17:61:4e:e1:cd:de:74:9b:90:d3:
bd:29:c1:f5:c8:76:ed:56:cb:b7:f0:30:4f:e1:24:28:f0:70:
6b:3f:88:92:f7:99:bd:55:3d:82:bb:3d:29:67:10:3b:63:8a:
00:17:7c:4a:86:88:04:93:fe:2c:e8:a7:59:56:e5:2e:ea:56:
06:92:f7:e9:bb:d6:44:f2:a3:9d:6b:de:d4:5c:fa:37:53:8c:
21:f3:73:27:34:f1:2c:fb:89:d8:48:a1:8c:ba:74:22:52:f2:
a0:96:35:c0:ac:7c:f4:59:16:31:2b:53:c1:ea:34:1e:a0:ff:
86:91:cd:f2:28:76:77:67:be:f9:99:e2:b3:91:68:a4:dd:ab:
ee:e7:a7:36:13:95:9e:31:b1:a1:7d:fd:d1:6a:83:1d:f5:e4:
45:1c:0b:20:e6:1b:d1:cf:70:1f:85:eb:f9:bd:b2:7c:ea:5a:
b2:6c:c1:99:2c:b8:86:41:75:87:b4:b2:45:37:c3:16:a1:9e:
28:a1:27:95:2d:35:25:b0:fd:7b:23:6f:66:96:c3:1c:43:19:
89:94:13:9d:19:83:02:21:c1:4e:a2:94:98:2b:a7:08:5f:69:
a7:b5:0f:b4:c5:66:5f:9b:81:1a:ec:12:56:65:f5:66:4f:22:
3f:af:f3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:00 2025 by rpki-client