Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JsV9quVKrJYXLLDOIXyMTwqNWTE.roa
File: JsV9quVKrJYXLLDOIXyMTwqNWTE.roa (raw, json)
Hash identifier: mJcqsfbvsHJsJorliCUDav0FUYK89mnC95oCCmMinko=
Subject key identifier: 26:C5:7D:AA:E5:4A:AC:96:17:2C:B0:CE:21:7C:8C:4F:0A:8D:59:31
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2CCED58F193B249E85E1708E26891BBB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JsV9quVKrJYXLLDOIXyMTwqNWTE.roa
Signing time: Sat 02 Dec 2023 23:13:21 +0000
ROA not before: Sat 02 Dec 2023 23:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2c:ce:d5:8f:19:3b:24:9e:85:e1:70:8e:26:89:1b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 23:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26c57daae54aac96172cb0ce217c8c4f0a8d5931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:27:72:e6:e8:e0:07:00:15:1f:ae:de:ef:
0d:6f:88:15:3f:5c:5d:7c:c3:12:15:28:7d:45:5b:
54:74:40:d7:67:58:c4:fa:0e:76:34:ef:a0:e5:67:
43:e0:0f:6e:e9:92:2f:08:c2:43:ad:07:9c:94:b5:
79:b3:96:e4:08:3d:0a:69:96:e2:c1:68:13:7c:78:
7d:e4:9c:9c:a4:ff:68:c2:69:81:1d:24:32:1d:f0:
b5:33:d1:bb:d6:f3:f8:3c:f6:61:1f:82:7d:45:c3:
be:86:db:37:96:03:9c:03:7a:da:2c:1b:26:4f:5e:
6d:1c:34:4f:97:93:31:a7:98:75:87:a8:da:d0:5f:
18:fd:43:2f:ea:0e:9c:1f:e6:54:8b:04:28:ce:4a:
68:49:e3:6c:f7:3d:3e:fa:a3:fb:18:98:a3:18:70:
e4:9b:8b:7f:3d:b1:1d:66:cc:72:1c:01:9c:19:f3:
f5:11:ca:c1:c1:9b:aa:cc:73:9f:0d:da:c7:94:61:
d7:0a:99:aa:df:dc:3b:91:30:fd:64:4e:96:76:e7:
64:b0:09:3e:cb:14:f7:61:ad:3c:cb:0e:b8:6f:13:
65:3a:e5:6f:b3:5b:81:cf:13:1f:53:44:d2:76:15:
89:23:8b:da:13:41:0c:74:75:48:9d:aa:d5:8c:fc:
b6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C5:7D:AA:E5:4A:AC:96:17:2C:B0:CE:21:7C:8C:4F:0A:8D:59:31
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JsV9quVKrJYXLLDOIXyMTwqNWTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
be:d7:bc:a8:ae:47:10:74:e4:2c:0c:d7:56:18:ec:af:eb:18:
af:25:85:de:e4:ca:4e:70:31:b3:22:3e:34:30:83:dc:f5:86:
5d:22:fd:de:51:84:19:00:5f:7d:ae:86:1d:71:c0:7c:57:bb:
1a:ff:c0:bd:62:d1:86:98:60:06:fa:91:21:e5:d7:ce:e3:6a:
c1:db:35:b2:eb:25:a3:1a:ac:ed:d4:9a:9a:e4:6e:cf:5b:7c:
69:3b:93:12:2f:34:25:58:e3:72:94:bd:6a:0c:ec:ea:72:1b:
f8:ed:7f:3d:10:ea:1b:5f:3b:25:c0:ed:56:ba:03:fb:3d:c2:
56:c6:3b:a7:34:a5:b9:1c:83:3a:23:7e:db:31:66:3d:74:78:
99:32:e3:14:f0:bb:4c:e0:f8:a9:e1:91:3e:0b:08:47:2f:15:
46:59:84:82:71:7a:58:db:73:3a:08:be:fc:41:e8:10:94:65:
f6:22:ce:ca:b5:16:c9:25:3c:7b:77:71:c9:b3:ce:0a:be:e8:
10:cb:7d:b5:7b:e6:1e:e9:24:fa:c9:ce:c9:e3:e8:2e:f0:fe:
ba:fb:c5:03:f0:d7:5e:5a:ca:88:7a:b0:ef:d4:02:68:0e:8d:
b5:3f:c4:a7:2d:b0:85:b0:8c:7f:72:7b:93:4b:ad:e8:a4:aa:
8d:21:bb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:46 2025 by rpki-client