Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9v9mWCAxEEMVyOi8H87PRfL-zPw.roa
File: 9v9mWCAxEEMVyOi8H87PRfL-zPw.roa (raw, json)
Hash identifier: YhHV40uRI4yjN3Rgypz1MdvPRQZMZep8zWdLf9TwHeY=
Subject key identifier: F6:FF:66:58:20:31:10:43:15:C8:E8:BC:1F:CE:CF:45:F2:FE:CC:FC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE4B30E1980A9CD9A1338062FF843EAAC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9v9mWCAxEEMVyOi8H87PRfL-zPw.roa
Signing time: Sat 18 Nov 2023 23:10:21 +0000
ROA not before: Sat 18 Nov 2023 23:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e4:b3:0e:19:80:a9:cd:9a:13:38:06:2f:f8:43:ea:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 23:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6ff66582031104315c8e8bc1fcecf45f2feccfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:ca:16:64:1d:a4:55:5d:54:9c:af:f9:32:
be:ca:64:85:a9:0e:fa:9e:0e:fe:d5:98:ae:ac:38:
e1:29:28:ea:f8:95:95:e1:f4:d5:b6:02:e6:6d:cc:
91:72:d7:d0:42:2c:17:d7:80:fa:c7:f4:54:ca:7a:
5c:b3:4f:84:97:df:e2:c5:f9:b3:bf:0b:a8:69:1e:
77:b3:5e:ec:4b:80:ef:3c:1b:7e:11:91:18:74:86:
8e:11:71:f3:b6:c7:c5:1a:fa:ed:1d:6b:c4:45:03:
46:02:ee:5b:de:77:a1:80:f9:7d:69:c8:1b:31:0c:
fa:91:b0:0d:89:f0:95:28:41:1b:77:7b:cb:5f:c1:
4b:2f:81:a0:9c:33:30:8e:14:67:40:0c:d0:36:2a:
c2:be:58:c3:ed:db:08:39:e6:85:21:ab:1f:d7:4c:
b6:15:d8:13:0b:e2:94:5b:60:bc:6e:77:93:4c:db:
cf:41:00:07:a6:19:74:2a:fa:50:74:43:01:07:bf:
f8:c1:5d:e6:f7:20:fe:e3:9a:98:dc:c9:c5:43:34:
4d:42:04:e7:52:1f:c2:1a:ff:f8:59:5d:3e:ac:ea:
bb:37:1e:cb:bf:7c:75:16:7e:ee:bc:59:04:80:f4:
34:61:4d:c0:dd:88:11:36:d0:ce:c3:56:ef:b3:45:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FF:66:58:20:31:10:43:15:C8:E8:BC:1F:CE:CF:45:F2:FE:CC:FC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9v9mWCAxEEMVyOi8H87PRfL-zPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:1d:b3:a5:21:6d:ce:52:60:00:c5:ee:69:fe:0a:f3:76:92:
7b:b5:d9:48:a8:80:76:36:a1:48:db:66:11:9d:2c:e9:17:85:
cb:f6:24:5f:d9:7c:1d:70:f9:af:ef:73:3e:7f:70:4b:b3:b1:
ac:3e:50:0e:69:ad:b0:59:76:a1:f8:78:d0:d3:0b:ef:9a:86:
14:f8:6c:d2:62:77:eb:67:56:c7:00:72:86:f1:fc:ad:4e:b1:
0a:63:1c:96:25:28:f5:c5:5a:93:5c:ae:6d:76:cb:0b:63:d3:
b5:40:68:3d:c5:e4:24:b4:7a:f1:ce:32:14:1b:f1:b6:9f:47:
49:2b:4a:ea:c6:a2:96:31:44:b2:56:a9:ad:29:6c:15:eb:1a:
fb:27:3b:b9:c5:4e:18:f0:d1:3f:49:ec:b1:03:f8:c2:55:56:
4a:2c:3f:62:9a:28:a6:02:83:9b:31:2e:c3:de:8f:c9:c5:96:
4e:f9:4c:b9:66:17:8f:d4:d0:39:42:ab:07:59:2a:87:2d:1a:
b0:34:91:96:e3:50:ae:6b:0f:71:63:5f:07:66:77:62:a2:eb:
dc:00:b8:da:0a:32:65:e0:2a:f1:e5:df:53:ee:37:1a:43:8d:
2c:12:6a:a3:f2:db:56:ff:7e:84:df:ba:55:b2:e1:72:c4:b8:
cd:c8:ed:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:32:52 2025 by rpki-client