Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JVfLBRVsaOPzQNdIf1OP1UfSPaY.roa
File: JVfLBRVsaOPzQNdIf1OP1UfSPaY.roa (raw, json)
Hash identifier: Et7vNBGDu2t21jmJ4INmhDo0OzsXrJHLyVPLBzv6FJE=
Subject key identifier: 25:57:CB:05:15:6C:68:E3:F3:40:D7:48:7F:53:8F:D5:47:D2:3D:A6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2697FA1149D701150908EF9E1F98193B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JVfLBRVsaOPzQNdIf1OP1UfSPaY.roa
Signing time: Fri 13 Oct 2023 01:12:55 +0000
ROA not before: Fri 13 Oct 2023 01:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:26:97:fa:11:49:d7:01:15:09:08:ef:9e:1f:98:19:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 01:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2557cb05156c68e3f340d7487f538fd547d23da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8b:20:ef:04:b9:de:5c:d1:00:0b:36:41:b0:
60:50:60:78:72:f7:19:55:f8:c2:b9:e7:94:e0:a9:
49:4f:ab:61:99:94:10:de:cd:c8:c9:b1:db:51:3f:
d2:76:06:89:4b:60:df:16:a5:66:bb:f0:95:84:88:
8b:b2:b2:d9:5b:ad:07:5a:62:72:7b:0f:5f:28:56:
05:8b:0b:12:2b:64:9f:39:5d:18:2c:b5:80:6c:e1:
96:a2:90:9a:c1:fc:e7:86:2b:60:af:a1:23:04:e3:
32:c5:15:d4:93:cf:dc:cd:b5:04:d5:b9:da:2c:be:
8b:eb:e2:8b:d6:5a:b5:fc:c4:c3:6a:bf:4a:6f:db:
59:d6:89:ba:3a:7d:64:5d:19:4c:fe:32:e5:d6:13:
b2:86:06:13:27:dc:35:de:43:be:ed:36:86:f5:00:
9a:08:33:14:19:18:0a:d9:89:19:6b:dd:e1:c1:12:
57:a2:7d:13:92:1c:48:9a:c4:4f:b7:b2:40:60:58:
9b:43:ff:d1:4c:b9:ff:70:ca:c3:41:23:65:2e:37:
61:fa:eb:41:1b:4a:74:40:72:ac:32:14:99:a4:0b:
39:6d:38:15:29:b3:a5:00:fa:9f:6c:f3:8c:4e:52:
84:60:28:b0:ca:e4:30:98:5a:56:84:d5:9a:83:f3:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:57:CB:05:15:6C:68:E3:F3:40:D7:48:7F:53:8F:D5:47:D2:3D:A6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JVfLBRVsaOPzQNdIf1OP1UfSPaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:46:a7:d9:23:16:9a:49:a3:a6:14:52:20:9c:22:c2:c7:02:
34:9a:70:e5:98:17:35:37:81:62:0c:1e:8a:3d:80:c3:4e:62:
e6:d5:01:ac:eb:2a:71:64:32:bf:86:38:77:a9:cc:a0:32:38:
7c:64:2e:20:3f:57:a6:b9:e6:a5:83:9a:13:79:e2:b3:56:c2:
2c:28:d9:1a:bb:f0:62:1b:99:6d:ca:74:a4:16:19:90:8e:e6:
ca:62:ca:d9:15:a5:04:c4:d5:a5:9c:23:cb:0a:8e:8b:8c:11:
b5:b6:d7:18:15:dd:e3:e5:1e:ce:82:bb:4d:20:29:70:c6:32:
f6:9d:c7:c5:89:22:6d:d1:e3:ed:95:a8:6a:05:14:b0:86:a3:
f7:44:0c:8c:7d:4b:da:21:61:e7:d7:5f:c0:20:21:75:59:01:
cb:21:65:83:91:88:a7:35:52:58:50:95:03:14:4b:6b:7f:66:
5e:ed:ae:f3:88:ae:bf:90:68:d6:25:1d:f4:2c:f3:48:fc:25:
99:1f:53:c2:80:8f:eb:d0:9c:5d:25:0a:04:8b:f9:fe:ba:9b:
52:cf:18:4d:dc:9b:13:cd:b1:ef:6a:fb:15:89:77:ce:54:76:
4a:dc:94:ef:fe:c3:19:47:32:80:1c:95:b4:1b:7e:b7:d2:1f:
e8:70:b4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:15:55 2025 by rpki-client