Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JtQj79laPUf15Hw5fAa-2dAxsok.roa
File: JtQj79laPUf15Hw5fAa-2dAxsok.roa (raw, json)
Hash identifier: NOiOx4tr1RX+0iXfKa5dMW331Fvfdd+P9778wRSd+zs=
Subject key identifier: 26:D4:23:EF:D9:5A:3D:47:F5:E4:7C:39:7C:06:BE:D9:D0:31:B2:89
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2096DE22F79CE3891F2C9EB1E3B31D48
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JtQj79laPUf15Hw5fAa-2dAxsok.roa
Signing time: Thu 30 Nov 2023 14:16:47 +0000
ROA not before: Thu 30 Nov 2023 14:16:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:96:de:22:f7:9c:e3:89:1f:2c:9e:b1:e3:b3:1d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 14:16:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26d423efd95a3d47f5e47c397c06bed9d031b289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:89:b2:c8:73:29:8b:f2:5c:84:5f:33:9b:
5c:df:bc:72:74:12:96:a0:06:83:a8:3d:6f:79:a0:
13:43:4e:c8:c0:a4:3f:08:d3:41:d8:f5:18:7c:22:
54:56:38:a0:4c:de:8a:ad:9f:1d:1c:cb:61:59:8a:
db:91:e9:d1:a7:03:9a:eb:52:dd:d0:b6:4b:50:c1:
f6:63:7f:26:eb:ec:6d:fc:36:b5:ba:75:f2:4f:81:
22:23:1d:96:94:a5:0d:b3:6c:9f:7e:b5:dc:79:dd:
75:f1:52:c5:7f:6f:13:b5:df:54:0e:6c:7c:47:40:
46:91:33:07:e1:e8:46:af:7a:9b:ac:0e:3b:ea:70:
cf:69:6c:a5:82:b4:fd:70:ce:d8:eb:ee:27:bc:61:
3a:50:84:f9:74:5d:5b:43:1e:91:8d:bc:cc:78:89:
25:7d:4a:14:3c:e1:82:8e:5e:da:fd:fe:fd:31:e5:
4f:37:1c:c1:3c:f7:c5:aa:ae:65:c9:c5:f3:97:d2:
b9:fc:12:a4:48:76:4b:86:d9:5c:ae:2c:92:e4:15:
33:49:8f:63:cd:ba:58:bc:21:7f:48:73:13:60:de:
35:e4:2c:c5:3a:0e:1c:7c:f6:c8:d9:1b:7b:b4:6f:
71:4f:5e:b0:3b:29:1e:e9:d8:33:f3:3a:08:d8:e1:
63:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D4:23:EF:D9:5A:3D:47:F5:E4:7C:39:7C:06:BE:D9:D0:31:B2:89
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JtQj79laPUf15Hw5fAa-2dAxsok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:14:89:ee:3b:5d:27:06:a7:da:ad:fa:06:d9:ea:93:2b:02:
49:70:30:09:9e:f2:74:94:e1:18:99:e4:db:6a:a3:de:8c:2a:
86:a4:39:22:23:d1:03:b9:72:c7:de:ce:5a:27:1d:e0:fb:60:
92:ca:cb:e0:08:82:7d:a7:70:be:9e:9e:25:19:ea:4b:b5:52:
ce:1b:dc:b7:a3:7b:46:68:58:f5:84:a4:32:f2:c9:22:b2:fd:
ec:95:2c:e2:c0:ed:0d:12:64:ca:8a:f0:34:9e:cf:e2:2e:94:
21:41:72:2b:da:9f:79:b4:fc:be:c9:71:ac:01:f4:d5:7a:cd:
22:56:99:51:d1:a4:a1:79:5f:03:07:26:a0:7f:fc:e6:49:7a:
50:fb:5d:36:f6:27:93:2e:61:ee:f5:e3:1e:93:1d:7a:28:03:
19:d9:ac:dd:33:dd:57:3b:3f:60:20:12:1c:a7:db:33:ef:60:
b7:6f:cd:9d:c9:f2:77:34:2d:eb:87:b6:24:f1:3c:ac:9f:50:
a7:26:f0:28:6d:3f:bd:c4:12:2f:98:68:a5:fc:5f:1f:79:cb:
09:4b:19:72:f1:9c:d1:c2:48:4d:4c:0a:17:0d:79:82:8a:65:
fd:ff:3d:da:1c:e3:4f:bf:94:ce:50:5b:25:d0:57:8f:2a:bb:
d8:78:06:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:45 2025 by rpki-client