Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9ltYNJueJnS6IdtAIVOKWGATV70.roa
File: 9ltYNJueJnS6IdtAIVOKWGATV70.roa (raw, json)
Hash identifier: lC9ZCHYPSMBFIC1w+u2xAzCqr5ernjLd24f445F9tq0=
Subject key identifier: F6:5B:58:34:9B:9E:26:74:BA:21:DB:40:21:53:8A:58:60:13:57:BD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABC638116E4A15930289EBB505D12289D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9ltYNJueJnS6IdtAIVOKWGATV70.roa
Signing time: Fri 22 Sep 2023 10:15:52 +0000
ROA not before: Fri 22 Sep 2023 10:15:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:63:81:16:e4:a1:59:30:28:9e:bb:50:5d:12:28:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 22 10:15:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f65b58349b9e2674ba21db4021538a58601357bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:99:36:f4:29:3c:3a:2a:58:42:67:2e:11:
cc:bd:42:6c:78:db:7d:d8:4c:4f:f6:85:78:37:69:
e7:c9:13:36:e9:19:06:f3:42:27:e1:51:ed:9b:29:
18:69:d0:ee:86:2e:0b:17:a0:ae:ee:a8:06:3f:cb:
1d:67:1b:78:36:de:49:ae:0b:3a:8d:7f:61:72:f9:
4b:eb:d9:f2:f4:01:67:06:50:97:3c:cc:0d:97:4d:
26:00:62:76:3d:ce:1e:29:df:fd:18:53:c0:f0:75:
26:81:d0:6f:cd:29:98:54:a7:df:94:eb:df:74:7a:
9d:c6:e4:ad:c0:b4:33:b4:c8:8e:a9:86:ea:28:1c:
bf:19:e7:5c:85:4d:06:f9:03:20:48:91:bb:83:68:
87:4d:4a:2d:9c:3f:cb:f5:84:12:75:2f:c6:c2:a0:
64:67:dc:04:c3:37:4c:32:62:88:c6:67:a3:14:d9:
37:7d:38:14:82:81:5f:55:ed:c9:1e:c4:81:a5:78:
f0:d8:b9:8f:f7:6c:80:c3:9b:bd:bc:f8:55:97:c2:
a1:a8:b4:78:ca:8d:ed:eb:79:2b:d1:0b:46:b6:c2:
a9:69:bc:77:0c:50:56:62:8c:4e:86:1b:dd:49:da:
66:b8:5c:e2:3a:9e:bb:9e:52:9f:1b:4d:34:6e:de:
8e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5B:58:34:9B:9E:26:74:BA:21:DB:40:21:53:8A:58:60:13:57:BD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9ltYNJueJnS6IdtAIVOKWGATV70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:e6:06:1f:57:dc:af:c3:74:97:a1:fc:91:6e:ee:31:c7:76:
c5:66:1e:b4:5b:9f:0a:34:59:3f:30:9d:22:24:43:a7:74:50:
cb:f1:99:a8:ad:11:06:bc:54:9e:c4:b9:cc:d8:bc:5a:67:e4:
48:c0:fc:a9:06:02:d3:ef:b0:76:c8:78:ae:a5:3e:ef:9e:c6:
32:c3:e2:a9:89:a3:99:61:2e:85:a6:cf:52:e7:51:b5:8d:8a:
df:9c:fb:8e:9a:29:3d:05:80:e7:5c:c8:69:61:ae:6f:88:ff:
89:7a:fc:a8:af:9e:b2:d7:1c:05:e8:99:8a:d6:a0:a0:6a:94:
7f:01:74:33:4a:d7:bc:c8:8c:5e:02:34:1e:75:47:0c:07:c8:
22:2d:08:53:c4:95:ba:4a:a5:f5:b4:ef:b9:25:b1:eb:e3:e3:
a5:d9:f0:59:ff:40:a2:e0:72:cd:ea:de:e6:69:64:7d:0e:82:
43:62:a1:08:f7:09:97:80:2d:88:71:2b:c6:5d:95:cd:73:eb:
99:f3:27:49:68:5b:43:90:fb:c2:19:79:32:51:aa:b3:79:f2:
cd:f1:f1:9d:a8:9f:0a:f9:67:e4:6d:68:b7:97:6e:f7:f3:81:
cb:49:4f:a3:38:03:cd:fa:1b:80:a8:5b:64:73:d3:13:d9:6d:
3e:ee:38:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:15:42 2025 by rpki-client