Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9ih7cWmHxkkorK8uA8WOYN5qpa0.roa
File: 9ih7cWmHxkkorK8uA8WOYN5qpa0.roa (raw, json)
Hash identifier: ird72rxoGu/OwH0OXkILkVEbC2AmsfrPTxk0dFWU4q0=
Subject key identifier: F6:28:7B:71:69:87:C6:49:28:AC:AF:2E:03:C5:8E:60:DE:6A:A5:AD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1CBBDDC931A6D4F22DCFD6A2A485550E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9ih7cWmHxkkorK8uA8WOYN5qpa0.roa
Signing time: Wed 11 Oct 2023 03:15:55 +0000
ROA not before: Wed 11 Oct 2023 03:15:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1c:bb:dd:c9:31:a6:d4:f2:2d:cf:d6:a2:a4:85:55:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 03:15:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6287b716987c64928acaf2e03c58e60de6aa5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:c0:00:eb:9e:78:0f:08:13:dd:bc:f1:40:
82:57:89:9b:f8:5e:42:2f:b4:4a:57:92:d2:46:de:
ea:e2:51:b3:b5:05:b4:be:9e:99:b9:72:9a:b8:e2:
5d:8d:7f:a5:31:3f:03:7c:f5:74:ac:31:33:b4:99:
0e:3e:e9:4b:7f:0d:8c:84:6b:ad:1f:b2:e6:8c:f8:
3b:20:85:89:02:43:94:49:c7:30:e1:c0:64:60:52:
31:3a:08:93:e7:62:ee:70:a3:76:0b:ad:1f:07:de:
05:b2:06:7a:36:b4:44:37:82:9e:d6:94:e7:49:9b:
ad:8b:28:45:0b:6a:ba:85:3f:e7:ca:dc:4e:a5:66:
5e:91:64:d0:91:29:d9:ab:5a:eb:5d:d8:f6:d1:59:
99:48:3a:03:7c:96:00:a8:b8:eb:77:1c:50:39:a0:
83:3d:6e:8d:6a:ec:99:2a:25:8c:ba:2d:06:3f:12:
27:6b:aa:35:eb:70:d5:ac:e8:ac:11:50:6c:0e:36:
54:c5:57:9c:44:7b:2b:7e:83:9f:92:57:ac:7c:b6:
a0:d4:20:d4:bf:cb:ec:4e:29:e4:56:94:eb:87:80:
26:70:a1:76:0e:79:83:37:3b:d0:b8:d8:53:f4:e4:
f8:f8:30:1d:e6:9b:dd:3c:e3:5d:96:24:2a:48:7d:
9c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:28:7B:71:69:87:C6:49:28:AC:AF:2E:03:C5:8E:60:DE:6A:A5:AD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9ih7cWmHxkkorK8uA8WOYN5qpa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:16:fd:7c:e7:dc:36:7d:14:d4:a2:55:5f:63:03:37:ae:80:
ae:97:38:62:ae:0d:d6:92:39:37:41:59:bb:d2:11:d6:f1:ce:
e9:6a:1b:8d:6f:b7:1c:2a:42:db:89:8d:4a:af:b1:b7:e0:52:
ac:a6:22:09:c9:f4:e0:88:b7:13:71:7d:a6:f7:f9:2c:9b:7d:
14:f7:b3:d3:c6:3f:73:2a:80:d8:32:a4:fa:91:04:74:7c:0d:
e5:7b:80:99:f3:c7:a5:0e:99:a6:a0:d8:53:ea:bd:9d:4a:39:
f1:fa:e5:8c:d9:a6:18:26:5d:15:a6:4b:42:21:be:d3:c5:f3:
49:e4:fc:ec:59:a8:c1:49:36:77:dd:42:a3:19:ee:38:e9:08:
d7:92:da:85:c3:e7:23:e5:12:da:5e:7c:03:27:cc:d7:60:f2:
08:8f:c9:6d:ea:be:c1:ff:09:f9:2f:e2:b5:a8:9f:09:ab:26:
e9:35:41:9b:9c:53:e1:62:10:e9:1e:7c:79:f0:43:14:66:f6:
59:0d:48:a6:cc:bd:18:8a:71:86:46:98:74:77:91:5d:af:b4:
58:36:f4:ac:02:cf:b5:f7:d4:c1:6f:17:82:67:19:46:61:b5:
90:8e:e6:cb:68:cb:7d:46:dd:21:d7:88:ba:4c:d8:41:51:5b:
02:6e:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:14:41 2025 by rpki-client