Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9qKshumKCZnsgczAZU977EaSphA.roa
File: 9qKshumKCZnsgczAZU977EaSphA.roa (raw, json)
Hash identifier: K44Ws8lVrqHWAYeeGzGMLJcUefR0uM/fx7rQXg32RBI=
Subject key identifier: F6:A2:AC:86:E9:8A:09:99:EC:81:CC:C0:65:4F:7B:EC:46:92:A6:10
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C311976F77A91F724BEE72DC7A64B9AB9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9qKshumKCZnsgczAZU977EaSphA.roa
Signing time: Sun 03 Dec 2023 19:13:21 +0000
ROA not before: Sun 03 Dec 2023 19:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:31:19:76:f7:7a:91:f7:24:be:e7:2d:c7:a6:4b:9a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 19:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6a2ac86e98a0999ec81ccc0654f7bec4692a610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:e0:2f:7a:c8:08:a0:cb:06:b3:ac:4a:06:
15:43:50:0a:cd:f5:02:42:08:65:93:49:9a:ac:70:
0e:2e:0f:02:80:1c:8b:82:4b:6b:fd:58:50:8b:5c:
73:a0:78:fb:b2:0e:6b:a1:b2:f3:9b:bc:05:26:be:
fa:3e:94:02:0c:9a:b5:22:e1:cc:48:c6:c9:77:7a:
c8:e4:c9:25:ca:bd:fe:a0:4a:1c:cb:75:49:7b:18:
f9:45:0e:55:93:3d:da:8c:54:40:5e:17:87:33:2c:
db:74:ab:f3:9b:08:43:37:5c:79:7c:c6:f8:7d:d4:
d4:29:69:51:27:80:06:2b:e9:fa:b9:9d:63:d0:58:
ea:bf:6a:d3:a5:09:f5:37:59:8f:8e:51:9e:05:96:
56:a1:6f:27:07:55:aa:05:40:7c:70:f3:a7:67:ef:
b3:f0:e5:eb:86:72:d3:13:f5:66:1d:04:b1:d4:1e:
81:91:5d:cc:2b:57:d5:69:09:c3:90:30:a2:a2:f2:
19:e7:ef:1a:ff:63:9b:e1:4c:81:bb:50:51:dd:8b:
51:8f:8c:67:7d:f5:49:e2:14:86:23:fa:22:b9:0e:
dd:f3:c9:ff:dc:7d:38:6a:16:33:53:a2:d0:e9:bc:
3c:3c:2b:40:73:73:8b:63:bc:a3:25:ae:d8:40:a3:
58:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A2:AC:86:E9:8A:09:99:EC:81:CC:C0:65:4F:7B:EC:46:92:A6:10
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9qKshumKCZnsgczAZU977EaSphA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bf:9d:cb:84:95:bb:49:8e:96:67:61:a9:82:3e:24:cc:84:e3:
c5:b5:91:c5:d3:ae:f0:d9:1d:1b:49:91:30:3f:07:e2:b9:9b:
98:be:22:bf:a8:a3:9c:d8:03:89:fb:25:23:d7:c8:0c:51:95:
92:5b:26:fb:32:32:bd:e9:72:ab:fe:f2:54:f5:1b:fd:1b:04:
fe:8a:67:b9:6b:12:ac:bf:dc:45:7b:b2:3b:7d:09:c6:d6:77:
d3:d6:53:09:78:c6:ad:fe:c3:7b:70:2e:0d:fc:84:11:67:62:
29:c3:6e:9e:04:d3:70:1c:48:37:bd:51:45:1b:a5:a0:53:7e:
72:1a:a4:dc:e1:e0:69:40:bd:62:c2:ef:c8:5a:00:02:7d:1e:
45:9e:ab:53:bb:5e:d2:9f:b8:0c:67:1f:e4:10:f2:55:37:65:
c8:73:2c:74:03:c8:9c:9b:cd:ac:43:b2:22:77:f8:79:ed:cc:
58:94:25:3c:89:5b:6b:a5:73:42:ac:e9:de:46:61:34:e0:15:
12:64:2a:df:38:5a:b4:d2:90:9d:62:61:d3:fb:58:70:f6:de:
ad:cd:64:4f:6e:01:f2:44:dc:0c:f3:68:e5:cb:21:6b:07:6d:
16:62:7e:96:15:65:88:04:3f:4e:d2:21:6f:fe:bf:fd:9a:bc:
8b:8f:4d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:58:22 2025 by rpki-client