Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K_h9l7ScErWytd9UjV8081-R9vE.roa
File: K_h9l7ScErWytd9UjV8081-R9vE.roa (raw, json)
Hash identifier: mOEMH09lrnbfS43n1hk6RgFWgFnGu8qXSYaHafokWa0=
Subject key identifier: 2B:F8:7D:97:B4:9C:12:B5:B2:B5:DF:54:8D:5F:34:F3:5F:91:F6:F1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDEE7E67F34AA7B86855DD64E3E5EDE37
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K_h9l7ScErWytd9UjV8081-R9vE.roa
Signing time: Fri 17 Nov 2023 20:10:21 +0000
ROA not before: Fri 17 Nov 2023 20:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:de:e7:e6:7f:34:aa:7b:86:85:5d:d6:4e:3e:5e:de:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 20:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bf87d97b49c12b5b2b5df548d5f34f35f91f6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ac:63:be:44:39:77:9c:93:65:d0:ff:95:b6:
1d:f9:ca:8b:7c:c7:2c:d3:e7:dc:9b:00:f0:34:13:
44:fc:b0:1f:95:69:12:24:e5:12:b5:ed:6c:6f:6b:
fc:b3:19:53:a1:08:f3:77:6e:af:6b:c6:ed:8d:f7:
62:8e:7c:99:ef:9a:38:f1:d6:a6:16:1c:b9:38:1c:
a5:cc:15:76:68:da:6b:c8:4c:9f:b5:82:61:10:8f:
2e:8a:81:3b:02:74:c3:78:f7:79:41:b3:09:47:a6:
36:c3:6d:6f:bd:6b:07:97:66:a2:1b:b0:16:96:e2:
09:8f:9e:37:32:66:87:45:0d:04:08:4c:95:f5:d5:
5b:f2:2f:97:ed:79:89:86:42:d1:af:b5:08:89:52:
4c:09:f3:d8:77:18:9e:da:8a:eb:f0:42:0e:cb:be:
f6:44:09:da:db:1d:30:f8:32:21:16:1b:9f:40:5b:
56:f5:1f:9d:fe:b8:ba:9c:6e:24:1f:f6:15:a1:1e:
3a:00:b3:63:7b:d1:87:84:00:85:34:ba:06:e9:e6:
49:5b:bb:5d:1f:1d:dd:c3:9b:95:f7:48:8e:3e:fb:
26:6b:8e:e7:fe:c3:03:da:3b:0f:98:c3:c0:5e:3b:
27:dc:69:90:5f:fe:73:e1:4a:55:1f:65:ef:db:46:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F8:7D:97:B4:9C:12:B5:B2:B5:DF:54:8D:5F:34:F3:5F:91:F6:F1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K_h9l7ScErWytd9UjV8081-R9vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:43:9e:11:45:50:1e:03:48:6e:34:9d:c9:3a:62:de:1a:84:
6c:b9:3d:ed:19:b8:e5:1d:75:d1:38:34:4d:5b:e2:3b:e2:04:
24:a7:57:bb:92:fa:f0:02:43:a5:bb:7f:e2:01:f2:bc:40:e2:
0c:24:24:16:3f:ad:44:58:bb:12:41:6f:75:8e:1d:5c:99:f4:
d2:58:8b:d0:27:12:1e:38:7f:17:39:5c:eb:fe:39:9e:0c:d0:
42:18:6d:cd:da:e2:9c:75:52:cf:10:92:24:e4:f0:cf:8f:6c:
7e:3a:03:ba:f9:40:49:52:ff:c5:85:12:57:1e:be:2c:03:2b:
22:77:46:ea:ac:4a:7f:ef:81:1f:30:25:1a:9d:d5:5e:c9:26:
97:5a:96:08:f2:0d:0e:93:7c:fa:8c:46:0d:de:71:7c:54:6c:
ee:3b:9a:0e:ad:2d:5b:23:38:db:81:8d:6e:cb:d3:c1:90:dc:
35:6d:6d:d5:4e:bb:65:7e:67:55:f7:d2:09:7a:71:5a:4b:f0:
8e:43:d0:64:ba:d7:45:64:55:da:7e:17:7c:97:ab:1e:59:02:
8b:f7:75:55:63:26:78:81:28:25:9e:f4:86:17:f3:27:c4:a9:
9a:fb:97:8d:9d:50:ba:35:44:21:aa:08:8a:1d:01:1b:24:28:
fd:7f:3e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:43 2025 by rpki-client