Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9IsJLOgdhq_89TPPtcTW-qufS9I.roa
File: 9IsJLOgdhq_89TPPtcTW-qufS9I.roa (raw, json)
Hash identifier: /xgD/RJiBq2rOFGp7TcAN4QH97kLEGWwYv9YAkJlA2M=
Subject key identifier: F4:8B:09:2C:E8:1D:86:AF:FC:F5:33:CF:B5:C4:D6:FA:AB:9F:4B:D2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C739FDF4FDFDB687792DCD0D8DC9C19CD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9IsJLOgdhq_89TPPtcTW-qufS9I.roa
Signing time: Sat 16 Dec 2023 17:15:06 +0000
ROA not before: Sat 16 Dec 2023 17:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:73:9f:df:4f:df:db:68:77:92:dc:d0:d8:dc:9c:19:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 17:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f48b092ce81d86affcf533cfb5c4d6faab9f4bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:98:aa:22:a9:14:5c:a0:b1:12:40:a6:a8:
6d:df:b6:58:85:ee:1e:9a:9d:f4:31:8a:60:50:7b:
ea:f0:13:31:9a:13:1a:fa:21:5f:3d:e1:dd:47:a8:
01:f4:ac:7d:02:4a:d6:d6:27:e4:17:48:ce:8d:4c:
bf:98:90:cb:71:8f:c2:74:fd:c9:cb:97:b1:9f:60:
20:d6:5b:c9:25:3f:5c:18:ca:03:ef:84:7d:a2:ea:
33:3a:4e:aa:a5:55:cc:85:12:b9:c2:68:94:46:f9:
60:ab:c7:76:44:df:ed:ff:8b:60:8e:65:d8:83:25:
d4:5b:f1:00:1a:a9:74:ec:ce:30:e8:13:ab:74:1d:
bc:eb:90:d3:fb:3c:85:69:5e:b5:68:2c:16:3b:c1:
82:5c:45:30:94:a4:bf:b8:48:ba:eb:0b:c3:fa:3d:
aa:3d:3d:37:4f:27:e0:69:c1:38:c9:68:19:71:ab:
68:f7:23:95:e3:31:fe:00:e6:b7:33:80:27:e1:63:
ac:88:82:d7:98:86:12:c6:25:b7:d6:c6:15:69:0a:
02:03:a0:1e:95:9a:f6:4d:99:f5:45:4b:d4:c2:81:
f4:0d:76:29:e8:5f:85:c1:f3:cc:b7:1a:b6:50:f0:
e0:9d:b6:1f:0a:50:69:86:75:d7:9c:c7:58:6c:12:
1f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8B:09:2C:E8:1D:86:AF:FC:F5:33:CF:B5:C4:D6:FA:AB:9F:4B:D2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9IsJLOgdhq_89TPPtcTW-qufS9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:17:ec:b9:ed:89:c4:1a:f7:f7:59:47:69:d7:b2:e5:34:8e:
0c:2f:85:58:59:ed:1c:16:6e:87:c6:09:31:9b:76:9a:b7:fa:
dc:a6:02:d4:f8:f1:a0:fb:24:ce:ac:5b:f5:bc:a4:9e:a3:aa:
53:41:46:fa:46:20:ab:1a:09:4e:5f:37:cc:9a:b8:c3:9a:3b:
94:3b:fa:45:50:f6:73:87:bf:1d:00:2c:af:61:35:88:89:11:
20:73:b8:65:b1:17:e0:fa:84:41:77:f6:fd:09:89:56:59:aa:
71:cf:3c:66:83:6c:10:70:8c:16:73:8c:fe:51:57:72:62:b0:
8f:ac:0b:08:36:06:bd:e2:86:1e:1a:7b:0b:81:16:74:1a:3d:
50:1a:2d:68:2d:8c:2d:60:63:be:ee:11:da:7f:3c:e5:fa:35:
fc:e9:9e:54:38:25:85:0d:59:e1:a8:31:ad:0c:49:b2:66:7e:
49:5e:3d:62:40:5d:1d:3e:d3:01:e5:e9:10:64:a5:97:68:9e:
9f:a7:06:ca:4c:68:19:e1:d8:22:b8:ad:1b:fb:cf:2f:32:6b:
ec:dc:07:26:82:3c:ba:28:41:30:2f:6a:6a:44:04:c0:36:f0:
64:21:b8:2d:c3:5c:fb:01:ec:5f:99:44:df:76:a9:b8:c5:c3:
36:29:97:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:37:29 2025 by rpki-client