Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JNXKKFSMlA4dGPGYvW2idRwJ9bg.roa
File: JNXKKFSMlA4dGPGYvW2idRwJ9bg.roa (raw, json)
Hash identifier: ahRjtQcIAS5dH2f+9sNqOGtSP/oPMP4cprJHule38iU=
Subject key identifier: 24:D5:CA:28:54:8C:94:0E:1D:18:F1:98:BD:6D:A2:75:1C:09:F5:B8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C15DC2AC5FAC3E90B53EF96C042ED5070
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JNXKKFSMlA4dGPGYvW2idRwJ9bg.roa
Signing time: Tue 28 Nov 2023 12:16:39 +0000
ROA not before: Tue 28 Nov 2023 12:16:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:dc:2a:c5:fa:c3:e9:0b:53:ef:96:c0:42:ed:50:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 12:16:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24d5ca28548c940e1d18f198bd6da2751c09f5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:d2:3f:4e:5f:9b:a5:7f:54:7d:70:0d:fc:
ac:39:1d:3e:37:d0:82:99:c3:6d:5c:08:b4:ae:b7:
6c:78:e5:b8:92:27:b7:61:13:c8:64:a0:14:66:92:
77:21:8c:bc:e5:4d:d5:66:67:50:96:f8:9c:ee:97:
46:99:ae:a5:ec:59:76:f1:19:f2:d4:37:1b:ba:ea:
ce:21:81:51:38:8b:3e:5e:c2:4f:f0:1c:e4:a9:5a:
43:05:86:e1:f1:74:bd:ca:c6:fc:3f:90:41:9d:f5:
ef:b4:ee:d3:a0:8c:63:19:61:ef:21:60:e1:0f:0d:
f6:1a:16:1e:b3:8a:9f:a4:04:64:d5:9f:9b:55:df:
c8:65:d7:5b:5b:bb:92:6e:66:b0:5c:1a:35:b5:a6:
b6:3f:1a:00:9c:e7:21:c5:3e:93:73:23:d7:6a:aa:
a1:85:59:b1:bf:f4:59:43:4e:e0:fd:7d:c7:96:08:
05:25:5b:79:46:0c:79:b0:31:ac:71:03:98:f3:f6:
90:f6:47:e6:e2:cd:a0:c4:49:b6:c7:8b:05:c5:b8:
52:ee:34:22:ed:65:9a:41:0d:28:77:00:53:17:c9:
f1:71:95:ac:f0:f5:1e:cb:26:a1:19:c4:4b:10:92:
32:c2:e2:7d:b0:d2:a2:e5:f8:0e:64:46:4b:12:81:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D5:CA:28:54:8C:94:0E:1D:18:F1:98:BD:6D:A2:75:1C:09:F5:B8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JNXKKFSMlA4dGPGYvW2idRwJ9bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:82:e4:08:6f:29:82:a8:0b:13:07:04:c1:1c:7e:4c:93:de:
53:a5:e1:d0:21:f7:4d:dc:04:6f:d8:02:21:f4:95:71:2b:39:
4f:a5:55:4f:46:c0:f1:c8:b0:71:94:34:b5:16:2d:d7:c7:8a:
0c:64:f4:06:53:ac:f6:94:60:69:03:65:93:6b:fc:55:1e:bf:
05:e9:59:75:89:eb:0b:3f:b1:62:c1:11:fb:4d:4d:b0:06:4d:
78:d4:20:fe:1a:95:03:1d:b5:3f:50:1a:d9:eb:30:20:51:0a:
5d:16:fd:aa:2c:d2:d6:40:be:e4:ea:e0:f2:f9:92:28:4b:9e:
8f:a2:cb:f1:9f:c9:ca:cb:c6:f1:6d:a1:cc:d2:2c:ed:a7:b3:
6d:d8:60:a6:c4:57:33:49:aa:04:57:f0:f6:59:e7:46:f2:ac:
84:c3:92:06:ae:97:ab:12:f8:0c:36:25:58:60:92:94:83:94:
e4:0d:d7:6a:a2:ee:d0:72:bd:ef:f7:72:49:cd:ad:8b:0e:78:
00:9c:e4:d6:3b:fe:81:41:38:93:f7:b8:db:4c:9a:62:36:b3:
e0:38:42:80:4e:03:d7:83:41:32:1f:97:c0:b0:5d:12:38:f8:
04:92:0e:f5:ac:9b:a2:66:9d:df:fc:48:fc:74:20:43:25:88:
f7:b6:ca:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:19 2025 by rpki-client