Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9rhvQdR7T1ktKkmwSl_K8LfI5fE.roa
File: 9rhvQdR7T1ktKkmwSl_K8LfI5fE.roa (raw, json)
Hash identifier: mObq7AIBz3usgvqINzJ7ULU/mgY0vvEPieaGSEpjKtk=
Subject key identifier: F6:B8:6F:41:D4:7B:4F:59:2D:2A:49:B0:4A:5F:CA:F0:B7:C8:E5:F1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B48B753FC9F0CDC8D5F20C210DE35ADAF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9rhvQdR7T1ktKkmwSl_K8LfI5fE.roa
Signing time: Thu 19 Oct 2023 16:14:15 +0000
ROA not before: Thu 19 Oct 2023 16:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:b7:53:fc:9f:0c:dc:8d:5f:20:c2:10:de:35:ad:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 16:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6b86f41d47b4f592d2a49b04a5fcaf0b7c8e5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:ad:39:72:22:5f:64:31:30:d9:30:32:46:
58:21:8b:20:bf:89:94:1d:b4:2d:b7:61:28:4f:ea:
e7:63:85:40:9f:1c:6c:59:57:0f:33:c0:3b:c6:c2:
21:8e:b2:84:16:10:d0:b7:cf:51:50:27:76:af:22:
56:18:de:4b:5a:27:2f:67:84:e3:f6:94:ee:e5:e0:
32:96:85:e4:80:05:e7:3e:a2:f7:88:ce:e4:97:eb:
0f:33:7b:5e:36:0e:ac:d5:31:cb:29:28:43:e3:ba:
19:bd:90:a0:e2:59:76:ab:b8:40:c2:77:c3:bf:f9:
c6:43:5c:8e:45:d2:f9:e1:8d:34:36:d7:60:c5:49:
02:c7:de:33:35:49:66:34:cc:9c:a8:a4:f3:5d:9e:
47:c6:e4:07:81:fd:70:5c:7c:e6:d3:4e:92:ae:cb:
82:5b:70:b9:04:5a:3a:69:ff:c2:c9:d1:58:10:d7:
5a:cc:6f:c6:c6:d1:5a:77:40:07:18:64:2a:31:fa:
8c:44:b3:7e:c5:49:aa:b8:c5:09:77:42:7d:d9:62:
6e:15:0c:dc:ec:9a:b7:d1:05:7c:86:be:7b:c9:61:
81:64:9e:4e:3b:58:c9:40:e8:a8:a6:ea:ac:14:13:
0f:ba:6c:be:46:92:49:02:53:99:91:53:74:13:9d:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B8:6F:41:D4:7B:4F:59:2D:2A:49:B0:4A:5F:CA:F0:B7:C8:E5:F1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9rhvQdR7T1ktKkmwSl_K8LfI5fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:18:1f:44:d7:b5:7f:33:39:94:f4:15:34:da:af:e0:da:0f:
b9:18:f5:43:31:0d:45:39:05:2c:35:54:19:95:87:dd:20:3d:
28:12:db:9c:88:37:b9:33:3d:12:aa:72:21:56:c7:d5:9b:0b:
69:a9:62:1d:c6:cb:c4:66:db:7f:03:59:65:9f:b9:a9:66:11:
a8:72:2c:64:63:1d:2f:45:f0:d5:06:49:5f:82:c6:88:c9:7b:
0d:d7:fa:99:6c:16:03:1a:3e:77:8a:f9:28:48:45:2d:bf:c0:
23:78:73:b8:cb:bd:43:d2:a5:e1:e8:2d:75:13:f1:01:2f:a8:
a8:e6:5a:47:52:87:a9:7f:0a:7c:a7:8e:78:b3:73:10:12:76:
43:f5:12:d0:7d:6e:f5:5c:9b:2e:6b:31:55:ac:58:2d:83:7f:
8c:eb:e8:68:94:67:4d:6d:55:8f:d3:91:34:15:aa:ec:f7:42:
92:85:52:eb:bb:fa:05:67:0c:3f:e8:14:ce:96:34:45:83:91:
32:35:2f:40:6e:d0:4b:b4:67:ea:02:09:2c:2a:27:a8:ac:9b:
dc:d3:ca:f0:40:7c:6a:cd:17:e0:9b:d2:83:1f:71:78:c2:2d:
c0:3a:91:4b:79:01:c2:f5:5c:4a:47:78:a0:89:73:0c:62:a1:
79:20:12:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:08:20 2025 by rpki-client