Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J_l4w6Jhu-8W_9ZSno1jX0yb55w.roa
File: J_l4w6Jhu-8W_9ZSno1jX0yb55w.roa (raw, json)
Hash identifier: Z5YKHvY2FwQDg2zHptbk20BeqOGw3u2IKE/jqWQZIhk=
Subject key identifier: 27:F9:78:C3:A2:61:BB:EF:16:FF:D6:52:9E:8D:63:5F:4C:9B:E7:9C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6C1FF6FC2EBAFAFFD75A90837BC1D98A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J_l4w6Jhu-8W_9ZSno1jX0yb55w.roa
Signing time: Thu 26 Oct 2023 13:15:15 +0000
ROA not before: Thu 26 Oct 2023 13:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6c:1f:f6:fc:2e:ba:fa:ff:d7:5a:90:83:7b:c1:d9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 13:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27f978c3a261bbef16ffd6529e8d635f4c9be79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:92:fa:a4:8a:ab:ab:f2:7c:48:7c:fe:3f:
ad:ba:33:70:a3:d8:d3:93:15:b7:b4:77:5c:51:0c:
e8:9c:1d:bf:c4:63:7b:73:35:b5:62:2a:e6:78:ab:
07:13:0e:d9:a6:ce:5e:7d:3b:38:54:65:7e:4c:a8:
d5:3d:7f:f2:cb:14:82:1b:a8:c1:86:74:f0:e6:8f:
88:8c:9d:80:ba:cf:0d:c9:bf:83:82:5a:c5:ea:c4:
3e:9f:33:3d:51:19:20:8a:cc:34:35:b8:9f:d8:a8:
3f:1f:55:0e:c3:51:d4:74:10:e7:01:45:52:98:5e:
8e:04:ac:0c:8e:82:21:1e:d1:71:91:c2:d7:c1:94:
1b:86:69:63:bd:ea:97:ca:78:2a:67:71:cb:ab:d5:
28:03:b9:5d:ab:6a:2b:8c:9f:01:a5:82:76:f0:53:
62:8b:f7:a8:c4:3e:69:9b:7b:9d:38:7a:ad:1a:45:
61:cd:86:fc:d6:97:50:e6:95:91:7d:b8:33:b7:2e:
25:17:8d:5e:86:87:70:f5:89:5d:81:56:10:b4:45:
06:42:6e:6e:8c:37:73:8b:17:38:c9:81:cf:1b:ec:
e3:9f:b4:f9:2d:94:b8:ca:c0:ce:3e:fa:b0:71:38:
5f:91:b0:df:2d:a4:ec:6e:b8:b8:cb:d1:23:f1:e5:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F9:78:C3:A2:61:BB:EF:16:FF:D6:52:9E:8D:63:5F:4C:9B:E7:9C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J_l4w6Jhu-8W_9ZSno1jX0yb55w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:30:f7:3b:eb:72:37:4d:7d:71:2a:bf:0f:ba:b4:72:7c:b9:
7e:59:06:ce:2b:7e:6d:c2:15:b4:2c:fa:0b:52:64:22:c7:96:
5c:fc:05:f9:20:6b:5d:70:e6:58:c3:82:9d:c6:80:57:d4:d8:
ae:42:e0:46:da:b3:be:3e:a1:7b:c2:17:64:9d:1e:69:75:7b:
27:36:a6:65:0c:63:e7:2a:8f:77:fa:52:bb:5c:bb:c7:9a:2d:
b4:bf:76:ea:34:ce:34:6c:1f:99:61:2e:1c:18:4b:97:d2:8d:
38:e1:d8:9c:ad:b1:da:6d:ed:98:23:3e:1b:35:0d:91:54:c1:
fc:83:bf:88:af:08:dd:ff:62:61:26:cd:c7:41:95:cd:d7:e7:
03:0a:9f:61:27:5b:ac:38:d3:3a:4e:60:71:81:bd:c3:a7:8f:
28:db:c3:76:b1:65:a3:a0:71:df:60:ea:a0:9e:49:49:82:4d:
03:d5:7d:4e:6f:ca:bd:50:cb:d7:cb:e9:ff:6e:83:dd:37:61:
41:91:95:72:12:69:dd:4c:89:de:8b:ab:08:3c:35:bc:f9:13:
73:dc:33:f8:b7:06:2b:70:52:08:cd:71:5e:cb:74:ce:c0:8e:
ea:f9:1b:fc:26:37:11:40:13:9b:15:65:b6:2e:c7:82:35:37:
58:e6:38:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:52:16 2025 by rpki-client