Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J-ft-98fhVIZSCSlwH9D1N26PZU.roa
File: J-ft-98fhVIZSCSlwH9D1N26PZU.roa (raw, json)
Hash identifier: 2zMbWGl4u4P2sRLar7sgOIJ199fU0lYDtcxJtLc9/sk=
Subject key identifier: 27:E7:ED:FB:DF:1F:85:52:19:48:24:A5:C0:7F:43:D4:DD:BA:3D:95
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5002A81B4E5CE72E86382C8D5AC0F199
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J-ft-98fhVIZSCSlwH9D1N26PZU.roa
Signing time: Sat 09 Dec 2023 19:16:40 +0000
ROA not before: Sat 09 Dec 2023 19:16:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:50:02:a8:1b:4e:5c:e7:2e:86:38:2c:8d:5a:c0:f1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 19:16:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27e7edfbdf1f8552194824a5c07f43d4ddba3d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0a:a1:fa:b3:74:eb:c2:e6:0e:73:fc:02:02:
72:b6:70:55:13:7c:a0:9c:bd:83:c1:55:75:ea:52:
d0:f6:ae:43:c1:ae:44:d3:a8:dd:08:52:a2:6a:36:
a9:0f:fe:78:e9:fc:85:8b:e2:3b:c9:db:7a:0d:35:
6d:6d:d6:c2:81:93:62:38:28:23:1d:f6:de:a7:cd:
fe:d5:c6:99:3f:5a:76:b9:1a:d3:96:d0:38:8a:98:
43:0b:43:c1:62:82:59:7f:e0:3d:44:e7:27:28:a7:
6b:f6:8d:57:51:8a:91:43:36:9f:cf:66:04:92:e9:
8b:45:10:28:78:6f:e0:9d:57:3d:f6:35:5b:81:57:
71:1a:07:0b:95:61:89:bf:36:b5:12:cb:90:a1:03:
d6:05:83:df:d6:ab:37:b9:10:6b:0b:2b:4f:6d:55:
6e:d5:52:8e:20:ae:62:90:72:9e:ac:34:b1:88:00:
81:44:8f:9e:33:e0:c2:fb:8d:aa:dc:9b:9b:bd:0d:
72:37:e0:85:48:ee:92:2c:ae:14:19:93:d8:e5:62:
ae:81:e8:cb:2f:94:ce:cc:d6:42:4a:cb:30:b8:62:
89:11:01:95:0a:06:de:0b:8b:7b:a1:fa:af:1d:c4:
4b:3e:a0:fd:1e:53:06:5e:6f:5a:71:e8:be:4d:71:
a5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E7:ED:FB:DF:1F:85:52:19:48:24:A5:C0:7F:43:D4:DD:BA:3D:95
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J-ft-98fhVIZSCSlwH9D1N26PZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:6d:4a:ea:1d:ce:88:2d:7a:eb:3f:e0:0a:fc:07:7e:89:e7:
c5:17:b0:05:ed:9d:98:bc:0f:97:72:9b:df:a2:38:aa:11:e6:
9c:e3:db:1e:35:95:27:c9:ae:23:ef:9f:ea:25:8b:55:45:69:
19:97:5f:ff:67:ed:0a:25:50:c5:7c:62:66:a3:be:14:66:62:
23:be:82:32:43:f6:bc:b7:40:e7:99:f4:80:e2:61:fa:a0:00:
95:c5:70:de:cf:ad:fe:c3:d7:64:d0:93:e2:7e:1e:8d:78:1b:
62:47:16:fb:59:d1:b4:c0:4b:f8:28:54:8e:0a:7a:74:95:e0:
ae:d9:28:0f:b6:4d:d2:7e:83:76:a4:35:9a:e0:f3:4c:83:79:
2f:62:fd:c5:a8:09:ef:83:df:63:cd:31:85:9f:8a:17:65:ad:
f2:0c:d9:bb:00:0f:e5:5e:7e:5c:09:bf:0c:fb:e9:58:b5:65:
83:7b:a6:f4:59:6b:aa:42:b4:bd:2f:e9:4b:03:cf:cd:fe:88:
3a:d6:57:3e:47:ff:2c:1f:8a:99:f2:9d:5a:6a:5b:f3:94:34:
7e:f0:8c:db:3b:1b:4f:ea:10:ae:1d:06:9f:e6:42:30:f2:23:
db:22:3b:f4:22:ea:3f:83:1a:e8:ab:55:01:93:f5:1a:ae:60:
ad:7b:06:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:22:31 2025 by rpki-client