Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9JLZchCvggVAN8D_wJ9Qo2-FBZU.roa
File: 9JLZchCvggVAN8D_wJ9Qo2-FBZU.roa (raw, json)
Hash identifier: dR5/CwPAd9VgElPzdmd/FBCkfWGCF9DPFzKYJ/+IqhQ=
Subject key identifier: F4:92:D9:72:10:AF:82:05:40:37:C0:FF:C0:9F:50:A3:6F:85:05:95
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB46F240FDE6D873B9735BC0EDED64329
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9JLZchCvggVAN8D_wJ9Qo2-FBZU.roa
Signing time: Wed 20 Sep 2023 21:11:37 +0000
ROA not before: Wed 20 Sep 2023 21:11:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b4:6f:24:0f:de:6d:87:3b:97:35:bc:0e:de:d6:43:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 20 21:11:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f492d97210af82054037c0ffc09f50a36f850595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:84:cc:7c:d1:6c:c9:2d:93:ef:3f:f8:a3:
8e:21:2f:a1:52:7f:c5:b5:13:0e:95:3a:4d:8b:77:
f1:fc:28:8a:70:ef:37:c1:ab:15:e0:31:71:5a:3d:
ad:a4:f1:f8:0e:42:51:67:bd:44:a0:45:0f:64:f0:
19:a8:e6:51:84:16:59:73:03:cf:5c:b4:35:5f:c2:
8a:f9:01:d3:b5:e8:f3:99:9a:bd:a5:43:7f:3e:f6:
a3:ab:f5:60:bf:83:62:ca:4d:2e:ff:61:c8:0b:85:
c6:26:89:49:2e:f4:27:a3:98:ec:73:a4:7f:d0:dd:
4e:54:b3:c8:6d:0c:c9:5e:34:80:c1:7b:34:ed:f6:
17:a9:18:be:39:97:d2:5b:5c:62:a5:cd:a0:b2:75:
79:28:7f:80:78:98:84:7c:79:73:bf:c8:69:58:87:
7c:47:6a:66:ee:f0:6e:ad:09:f4:3b:b4:3a:fd:78:
04:46:7f:cc:2a:d2:33:b5:32:21:cf:c1:06:59:8b:
3a:35:d7:1b:8f:e4:54:e1:44:c2:5b:cd:52:93:9b:
09:e8:b9:a1:e3:d8:90:d2:81:68:53:4b:c7:04:e3:
b8:0a:b1:5b:fa:b5:46:63:91:13:05:78:fb:bd:88:
e0:c1:39:1e:f6:07:cc:fb:d9:b6:5b:90:e0:05:38:
9b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:92:D9:72:10:AF:82:05:40:37:C0:FF:C0:9F:50:A3:6F:85:05:95
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9JLZchCvggVAN8D_wJ9Qo2-FBZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:75:5a:36:94:42:9b:84:d0:68:a7:63:4d:08:61:9d:8b:45:
4e:60:27:11:b5:0c:c1:32:6b:a8:10:9c:e3:ed:85:3f:13:69:
db:b0:6a:fe:a2:2a:e8:19:e5:0e:1e:2d:81:24:44:5b:56:c4:
aa:9e:68:40:95:28:fc:cf:85:db:64:3c:b2:f3:16:40:a2:01:
57:01:98:4e:0c:f5:64:f4:91:87:b7:90:1d:ae:de:59:8f:e5:
21:db:39:7f:33:a0:a1:fa:11:4f:37:d4:74:ec:20:65:98:fd:
70:10:91:31:39:af:34:65:21:e6:e9:5b:80:7d:ec:69:75:b2:
4d:bf:cc:f8:ee:3d:5a:07:81:56:43:6f:f3:75:c1:d9:cd:59:
53:cc:2e:a7:20:82:3a:38:18:1b:20:45:fe:d7:bb:9b:1c:05:
9e:21:8f:61:7b:68:82:ec:ff:69:1a:89:7e:d8:6b:1d:98:38:
87:b5:59:24:35:47:0d:b5:70:f9:cb:f1:f9:1d:47:0c:9f:70:
0e:f3:06:64:aa:32:2e:09:51:31:73:67:8c:db:b3:30:d1:b2:
4f:a9:e6:de:7c:aa:35:65:a1:af:da:d0:54:f0:a5:9e:08:96:
02:36:04:66:a8:f3:0a:93:08:f9:e0:bc:1e:1b:93:71:0f:c2:
4b:6a:4d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:50:13 2025 by rpki-client