Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9Yp6O1NFuACgzow4dQ8838kvMJE.roa
File: 9Yp6O1NFuACgzow4dQ8838kvMJE.roa (raw, json)
Hash identifier: FvM/1z5I7ihNYKXXXNCFHyP0G4OxW6amvSY/EEfbWog=
Subject key identifier: F5:8A:7A:3B:53:45:B8:00:A0:CE:8C:38:75:0F:3C:DF:C9:2F:30:91
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B940B148E10BAAC74F09D8B90B11FA656
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9Yp6O1NFuACgzow4dQ8838kvMJE.roa
Signing time: Fri 03 Nov 2023 07:17:16 +0000
ROA not before: Fri 03 Nov 2023 07:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:0b:14:8e:10:ba:ac:74:f0:9d:8b:90:b1:1f:a6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 07:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f58a7a3b5345b800a0ce8c38750f3cdfc92f3091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3a:de:ec:1c:b3:57:b8:bc:cc:3d:75:c4:8d:
d9:17:0e:07:53:b6:20:e1:14:67:83:90:15:a6:9a:
e2:f4:d3:4e:2a:4e:ce:f2:c1:45:8b:2f:62:37:77:
87:5a:68:12:5d:6b:46:95:0e:f4:ad:42:8a:57:9d:
ba:62:ec:ea:eb:ea:fa:9d:73:c7:01:06:e7:ca:c2:
15:06:1a:08:84:33:11:6c:99:d9:a8:b8:73:96:c0:
7b:0d:be:d5:70:28:65:c3:c3:12:3a:c9:8e:bc:cd:
a9:51:b3:33:f3:5b:0a:e0:df:ac:a1:23:16:db:f7:
09:b1:14:29:ca:bc:7a:da:31:e6:db:da:4c:93:f6:
d7:7d:a1:18:95:ee:ca:8f:f0:6b:6e:a9:3c:39:6a:
92:96:f9:d3:a1:95:8c:69:51:c5:fc:1c:28:40:cc:
2f:e9:13:f6:2f:aa:02:40:55:cf:ea:6d:f3:37:81:
2e:47:51:6b:ba:21:99:e8:1e:02:c3:90:af:75:e6:
74:40:ac:a0:2c:20:cd:d5:40:c8:66:99:72:4d:44:
ed:78:1b:21:2b:b5:4c:07:5d:b9:db:05:55:00:de:
87:29:87:8f:da:21:df:8c:b3:63:d3:6f:75:3e:de:
da:7d:56:7a:e7:1f:87:bd:14:8c:1b:52:80:5b:df:
3e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8A:7A:3B:53:45:B8:00:A0:CE:8C:38:75:0F:3C:DF:C9:2F:30:91
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9Yp6O1NFuACgzow4dQ8838kvMJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d4:58:58:e0:d8:47:d1:2c:e6:2e:f9:03:e1:7d:37:35:ea:8c:
b9:4a:7f:a9:d1:d1:af:d9:2e:cc:14:83:fe:c4:56:f0:fc:7d:
de:38:b7:f0:04:63:67:95:33:bd:ff:96:10:0b:8e:f0:c8:94:
3b:9e:46:a5:fe:f7:9f:fb:a2:7a:bd:b9:ca:97:9f:05:37:6c:
3f:43:0d:40:05:a5:41:7e:a4:d9:a2:0b:d0:36:99:83:ea:5a:
47:ca:9a:64:fb:b9:4a:21:93:37:21:0b:5e:20:47:4b:f4:cb:
62:67:77:d3:23:31:a7:2d:af:57:2e:f9:78:35:a2:4d:fc:e5:
86:ea:22:39:4c:a7:57:48:1b:89:0c:69:21:aa:ed:b2:bf:f4:
aa:15:c0:05:8d:97:8f:d1:cb:0a:ce:7a:68:50:b9:27:f4:15:
a0:43:72:7c:21:42:e9:0f:07:f3:15:aa:74:bd:a1:26:74:c0:
61:e8:5e:ad:8b:50:75:5a:be:d5:89:e3:16:14:a3:e4:64:33:
bd:6e:2b:1b:3f:b9:c3:32:a7:3d:e1:b7:d7:bc:82:8a:ad:c9:
bd:8e:73:e2:11:57:ee:84:4b:59:d7:31:42:be:fc:cf:d6:e2:
45:6b:62:4d:d5:46:7a:5b:8e:97:6a:93:6b:ad:0b:36:91:11:
dc:d0:c7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:24:10 2025 by rpki-client