Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9SmuHoLzDDT-MoRyI9123oD0rOM.roa
File: 9SmuHoLzDDT-MoRyI9123oD0rOM.roa (raw, json)
Hash identifier: thKNNyr8T4C2XLjgW+wvWz4jFPzAOKlgkXdPuky/Xs0=
Subject key identifier: F5:29:AE:1E:82:F3:0C:34:FE:32:84:72:23:DD:76:DE:80:F4:AC:E3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF3E9B54FEC63CE8A2224C91BD88B994E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9SmuHoLzDDT-MoRyI9123oD0rOM.roa
Signing time: Tue 21 Nov 2023 22:04:21 +0000
ROA not before: Tue 21 Nov 2023 22:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:f3e9:8f8d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f3:e9:b5:4f:ec:63:ce:8a:22:24:c9:1b:d8:8b:99:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 22:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f529ae1e82f30c34fe32847223dd76de80f4ace3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:40:c8:aa:99:65:dc:e2:d1:fc:ca:0b:54:
29:c3:b3:2b:11:36:c1:82:c1:61:c7:a4:5e:48:ab:
06:70:1d:fa:bc:f1:23:91:93:79:59:74:4b:ad:d3:
92:36:a4:e7:38:9e:a7:e1:d5:43:28:ac:df:99:be:
78:38:57:de:6a:4f:cd:d3:e5:ef:22:41:0d:f3:aa:
ea:4f:40:5e:f1:50:37:6a:e7:e1:8a:16:07:16:b5:
63:87:e0:76:7e:a1:26:69:67:56:12:1e:89:96:83:
08:9d:72:82:9e:6b:99:27:3c:54:27:53:46:cd:fd:
d0:8d:a2:f1:0b:23:61:5f:ee:5d:8f:be:24:6e:29:
18:ef:12:7c:8f:2f:2e:a3:16:ea:d8:49:97:d2:60:
2f:09:70:ad:76:31:af:7c:80:bb:40:e7:74:ce:d4:
ff:13:4a:d5:9a:23:d6:16:b1:db:7c:04:d1:d6:e6:
73:9f:0d:6e:be:7f:74:b6:a9:c4:bf:20:34:a6:f3:
7e:ec:a2:0a:1b:1e:a3:7d:06:27:a2:4b:94:9f:bf:
c9:61:38:3e:65:69:1c:b4:cf:b1:18:d4:74:8d:7c:
87:26:01:85:c9:f2:61:ee:d2:cd:4a:ac:b5:b5:9d:
89:1f:65:17:cb:b5:5a:62:cd:90:b7:87:8c:66:cc:
85:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:29:AE:1E:82:F3:0C:34:FE:32:84:72:23:DD:76:DE:80:F4:AC:E3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9SmuHoLzDDT-MoRyI9123oD0rOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:c3:33:96:a4:6c:a8:c7:87:c0:0e:0f:2f:9e:08:b6:eb:91:
2f:aa:08:5a:41:62:c4:46:de:36:82:3c:58:03:06:cf:b3:b0:
0d:55:37:6a:0c:17:f1:f7:5b:b3:25:80:c3:c0:b3:48:03:39:
17:d9:cf:23:63:dc:7f:a5:bc:db:31:48:5f:fa:fe:b5:dc:7e:
8b:88:1e:84:49:85:d5:41:a6:3f:f7:94:21:15:d5:fc:1c:69:
6f:2e:30:68:8e:bb:e0:14:01:15:fd:73:8c:39:a8:4b:08:f8:
cb:68:42:0c:75:3f:77:32:f3:20:23:d1:03:db:09:fd:3b:e4:
71:1f:c1:30:27:66:86:b5:68:a6:0c:11:c2:eb:06:f2:21:d9:
bc:7a:2c:f3:09:f3:fe:27:2e:36:8e:43:1b:08:ad:23:66:7b:
13:0e:4c:72:2f:ab:c6:de:ed:62:7d:be:9f:59:c9:38:7f:a3:
fb:cb:9e:2d:fb:26:a3:d6:b9:a3:85:46:b3:0e:58:f4:d1:46:
9e:e3:8b:6a:f0:10:b2:fd:b6:be:83:e9:f9:f1:0b:6e:da:37:
fb:e2:64:dc:0f:24:7b:13:81:ac:69:1f:c3:67:44:48:cd:8f:
69:bf:2e:fc:ff:50:dc:43:75:e5:83:d9:14:fb:5b:7c:44:62:
2b:cc:96:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:34 2025 by rpki-client