Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8hrJZTqOFH9bLsl9iqFZXPFPmzY.roa
File: 8hrJZTqOFH9bLsl9iqFZXPFPmzY.roa (raw, json)
Hash identifier: PFxK2Vd2QX9wF3z1FtPPHdaPWLyounfhbPRwN9W6DMc=
Subject key identifier: F2:1A:C9:65:3A:8E:14:7F:5B:2E:C9:7D:8A:A1:59:5C:F1:4F:9B:36
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B081F7F16081D6F58569D555F6D24A6CE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8hrJZTqOFH9bLsl9iqFZXPFPmzY.roa
Signing time: Sat 07 Oct 2023 03:12:43 +0000
ROA not before: Sat 07 Oct 2023 03:12:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:08:1f:7f:16:08:1d:6f:58:56:9d:55:5f:6d:24:a6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 03:12:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f21ac9653a8e147f5b2ec97d8aa1595cf14f9b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b7:3e:97:b2:dc:a3:2e:42:32:a0:7b:ef:59:
9d:dc:43:0d:5d:2e:38:8d:06:9b:ad:26:cc:34:3e:
60:dc:f6:fe:cf:70:26:55:96:4c:85:83:24:5b:62:
a6:35:81:b9:7d:8e:51:82:6b:99:93:56:f2:e1:f7:
7a:46:80:d3:3e:bd:7e:a6:3c:7d:aa:10:70:b5:93:
b9:d0:f5:02:0d:0e:3f:52:35:2e:a2:30:69:96:ac:
36:a3:47:0f:e1:03:f5:2e:5e:ea:c6:b5:6e:d3:6f:
49:55:2f:2a:41:0b:c0:b1:46:a8:42:37:55:7b:b1:
ed:29:e4:99:d4:f5:f8:81:20:5d:0d:d6:37:03:f8:
38:ec:4e:4e:da:48:b4:9d:44:5a:88:f8:62:49:60:
ac:05:43:b9:07:7f:8a:e9:90:84:ba:42:00:27:b8:
8c:94:51:c6:43:97:c1:da:7e:60:7b:a5:40:5e:ad:
38:1d:4e:a5:da:c2:71:f7:18:eb:05:1e:45:64:7c:
79:cf:6d:3a:2e:c6:eb:57:b4:a0:a6:1b:fc:c0:a7:
24:93:52:86:16:2d:0c:ad:89:1c:75:9c:04:c3:32:
7c:f6:40:8d:de:61:bc:be:3b:3b:63:d2:f4:2d:38:
b0:fd:cf:77:47:53:6d:51:8e:52:b3:2e:ef:4f:da:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1A:C9:65:3A:8E:14:7F:5B:2E:C9:7D:8A:A1:59:5C:F1:4F:9B:36
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8hrJZTqOFH9bLsl9iqFZXPFPmzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:64:22:b3:db:8d:23:d1:cc:30:42:bf:80:e6:aa:44:1a:12:
f3:a7:8c:f6:3e:95:de:c5:6a:b1:5a:92:c9:fd:79:31:4e:ad:
d8:5d:b4:41:9d:81:ff:42:78:1e:73:6e:8a:1c:a2:06:e5:15:
8b:22:00:4c:9e:f0:d6:ce:b7:88:1e:73:3f:ad:53:6a:fc:1f:
3f:98:ac:04:9b:98:bf:03:71:74:60:bf:09:bf:d9:0f:5d:68:
17:a0:2c:6d:9e:38:1a:62:ae:27:78:ab:4c:30:ed:a7:0f:30:
a2:4c:cb:af:e4:13:ef:ac:08:ce:e4:ad:a3:73:eb:a3:51:58:
c0:68:bd:c1:86:ea:c9:19:25:bc:35:6e:e6:f0:71:69:1d:65:
77:4a:12:c4:b4:65:0e:ab:93:80:f6:9e:28:45:c4:20:68:89:
79:84:2d:c2:b4:9e:eb:e7:4f:2d:b3:69:27:f7:18:77:22:14:
5e:3d:05:0d:46:1d:d2:4c:90:9d:31:42:0c:ef:a4:fd:7d:62:
3a:03:78:76:2b:c9:16:4a:6f:e2:28:39:e1:ee:c9:de:d5:65:
1f:f9:e0:e4:b0:24:7b:61:a3:b7:ec:90:41:76:9d:25:29:ec:
fa:10:99:33:86:40:0e:d4:14:0a:14:b0:80:b4:40:c9:6c:f4:
8c:41:52:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:17:41 2025 by rpki-client