Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9n3c1P9j775I2-eg3u-egT_yXrk.roa
File: 9n3c1P9j775I2-eg3u-egT_yXrk.roa (raw, json)
Hash identifier: 6g1RUv3BuTxEfmEJ3F9JJMhBJMtNE4fu/YM6nX4XTnk=
Subject key identifier: F6:7D:DC:D4:FF:63:EF:BE:48:DB:E7:A0:DE:EF:9E:81:3F:F2:5E:B9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B35DC1766C6BD314928E35734FA18DCFE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9n3c1P9j775I2-eg3u-egT_yXrk.roa
Signing time: Mon 16 Oct 2023 00:21:38 +0000
ROA not before: Mon 16 Oct 2023 00:21:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:35:dc:17:66:c6:bd:31:49:28:e3:57:34:fa:18:dc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 16 00:21:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f67ddcd4ff63efbe48dbe7a0deef9e813ff25eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2c:b8:5d:9f:bd:93:73:23:eb:be:25:92:ba:
58:e4:93:64:c0:e6:67:28:46:20:46:aa:28:5a:85:
f0:dd:24:ce:ff:19:76:4a:c2:b5:10:b5:34:1c:b0:
1b:ba:1b:5d:07:54:9c:e8:c3:30:0c:59:c1:ce:1b:
e3:f2:0a:08:60:27:96:dc:89:a2:07:9a:86:3c:a6:
d4:ff:75:47:a1:f6:24:f8:ef:35:ba:cd:92:84:3f:
37:6f:c3:96:17:b3:af:c2:f8:b8:42:ae:d8:c8:2b:
dd:0d:63:10:30:da:8b:a3:c2:32:1c:15:af:d4:2a:
41:0d:b2:24:dc:cf:aa:bb:f7:cd:e7:a1:b3:ef:81:
77:b0:44:2b:a6:1b:75:b3:0e:36:17:ca:7a:71:99:
36:52:29:9c:19:4c:be:36:ed:38:8b:78:32:c4:f0:
03:7a:a3:40:85:bd:67:76:d6:3f:0e:eb:b0:ff:29:
2c:01:7b:3d:8d:13:15:bd:92:80:b6:ae:e0:6b:67:
fc:f7:0d:a4:37:d7:a5:eb:c1:98:bb:89:1d:8c:c4:
1e:ec:65:6d:c3:dd:f7:8d:de:42:7e:d4:17:e9:f0:
19:a5:a9:c9:30:3b:90:5c:a7:8e:91:34:8f:70:66:
c3:e2:d6:5e:c3:20:e6:da:63:03:c1:05:b1:bb:50:
7e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7D:DC:D4:FF:63:EF:BE:48:DB:E7:A0:DE:EF:9E:81:3F:F2:5E:B9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9n3c1P9j775I2-eg3u-egT_yXrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:12:b8:3f:d4:32:4f:f3:a3:0b:11:49:9c:ff:bf:bc:af:f1:
f6:32:67:12:75:75:25:fe:a1:41:69:ea:ed:6d:87:2e:e0:2a:
31:b1:b8:5e:d4:ae:4b:d2:77:86:b7:a6:c1:4f:de:80:c3:41:
ef:b2:d5:3c:74:6a:3e:db:ae:0c:f8:75:dc:f9:f8:27:67:2f:
71:46:99:25:bf:06:06:97:ad:6c:b2:43:98:9c:b0:54:2a:96:
5b:42:f6:1f:f8:69:fd:b0:65:d7:54:04:a1:67:8f:9b:bd:9f:
b5:46:e8:86:88:0e:30:7a:a6:15:fc:b6:1b:4d:44:52:35:5e:
5b:a9:1c:5e:e9:ef:6e:9e:54:9f:bf:f6:e7:46:d4:22:90:39:
c3:e8:0d:1d:b2:d0:b4:fd:e2:00:87:da:83:96:59:72:e1:f5:
3c:c2:7c:22:31:00:b4:14:9e:20:fb:cf:d6:43:d3:aa:a4:92:
c4:d5:24:43:a3:12:a1:f1:e8:e3:dc:1c:c1:a1:3a:c2:30:7a:
f7:87:21:38:f1:79:ce:f2:0c:51:a8:d4:2a:ac:bd:4f:c0:67:
e1:c6:74:cf:b5:d5:e2:66:65:1d:7b:76:6f:44:77:d5:f8:07:
75:f3:40:7c:ed:cc:ed:f1:cc:ca:3f:a1:c0:f5:4d:a1:fc:7a:
8d:86:24:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:05 2025 by rpki-client