Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9jgRH5GYgScco2AXZrXq8ZbkX6w.roa
File: 9jgRH5GYgScco2AXZrXq8ZbkX6w.roa (raw, json)
Hash identifier: Cn4c0JzkoOxfzKYIZDHaRqTbIg3g0eF9a5ALhj2tB/g=
Subject key identifier: F6:38:11:1F:91:98:81:27:1C:A3:60:17:66:B5:EA:F1:96:E4:5F:AC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B913B7AC9B1990B5C1B15EAA8A38B2714
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9jgRH5GYgScco2AXZrXq8ZbkX6w.roa
Signing time: Thu 02 Nov 2023 18:11:16 +0000
ROA not before: Thu 02 Nov 2023 18:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:91:3b:7a:c9:b1:99:0b:5c:1b:15:ea:a8:a3:8b:27:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 18:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f638111f919881271ca3601766b5eaf196e45fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:23:33:c1:ca:58:d9:04:a5:43:bd:99:ae:
91:6b:ec:e0:78:c0:e0:1a:4a:49:17:01:7d:57:0a:
30:c1:ce:82:f9:16:aa:bd:29:14:7a:09:c5:11:ee:
c7:cb:c9:01:a2:03:bd:94:b3:ac:36:77:81:b7:58:
85:d3:06:a2:97:13:bc:a8:2e:10:b9:3a:77:e0:34:
1e:e2:50:42:d3:20:d4:ef:41:d2:55:cf:b7:53:50:
8e:29:67:6d:64:35:0e:49:22:00:82:54:05:48:e3:
d6:0c:79:bb:ba:31:ae:6b:67:84:54:4f:82:78:ce:
48:1f:3a:82:85:3e:f4:2f:89:3a:99:62:2f:76:15:
8f:4e:9f:b1:94:aa:cf:71:f4:8b:25:03:ff:93:b9:
41:8f:6e:56:5b:f4:47:b0:19:77:16:bd:e6:d2:95:
c1:6c:a3:79:53:b2:db:6f:ab:09:24:f3:53:d1:dc:
35:8a:a9:61:8c:cb:ae:98:94:d9:01:3a:19:44:5e:
99:93:e2:34:11:49:b6:77:5e:eb:6f:6b:cf:31:2c:
73:c8:23:d4:a2:b4:83:be:d0:b0:ea:20:c6:2f:c7:
b2:6a:ed:2b:28:6e:50:09:66:4b:e9:eb:09:58:d7:
36:ea:b3:68:20:75:77:da:6f:df:37:5b:6c:b8:cc:
55:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:38:11:1F:91:98:81:27:1C:A3:60:17:66:B5:EA:F1:96:E4:5F:AC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9jgRH5GYgScco2AXZrXq8ZbkX6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:2b:c2:03:23:35:41:15:7f:e4:ed:26:23:b4:b5:48:e1:5b:
0d:3a:21:42:e1:58:bc:6c:0a:33:c4:f8:c4:2f:b5:05:bb:b7:
ae:25:cb:6c:62:c1:c5:68:01:96:be:9f:ef:b4:93:31:f7:f2:
15:cb:6c:2e:68:49:2f:42:6a:6d:29:b4:4d:89:ca:f2:be:e3:
df:4e:3c:01:67:99:8b:91:9f:f3:09:0c:58:da:ea:2d:fd:26:
20:5d:37:5c:5a:ae:36:5a:9b:29:5f:30:3b:b6:3d:1c:79:90:
c6:6f:af:e8:cd:9d:ae:cb:19:16:97:4d:91:75:76:10:77:3c:
72:c2:eb:2b:59:26:6e:25:ec:de:76:d1:49:c0:4b:96:99:bb:
3d:45:83:57:dd:3b:73:2d:02:e9:76:45:47:60:1b:2a:fa:36:
54:63:a0:aa:b8:80:5b:7a:8a:7c:0f:66:43:bb:78:88:83:ce:
41:c9:8a:d0:51:0b:47:4b:a3:3c:dc:08:e1:c8:2b:7d:af:58:
52:ff:0e:7b:eb:f3:87:bb:64:7f:bb:d6:ab:31:13:3e:22:6e:
c1:d9:28:05:6c:f1:9e:cb:5e:ea:79:8a:15:a3:fa:da:54:3a:
52:6d:71:f8:18:e2:92:0b:06:c6:72:38:cd:e0:39:36:b0:d4:
23:36:98:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:53:25 2025 by rpki-client