Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R9Oe6Vz5vF9WjOsHtuVORcV_FZU.roa
File: R9Oe6Vz5vF9WjOsHtuVORcV_FZU.roa (raw, json)
Hash identifier: J1pCTreM8NlOzLHGlnune3HplkF7rIGM7R0Fs7Y3MGY=
Subject key identifier: 47:D3:9E:E9:5C:F9:BC:5F:56:8C:EB:07:B6:E5:4E:45:C5:7F:15:95
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF573625E92E77A3E59D5C88708911B20
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R9Oe6Vz5vF9WjOsHtuVORcV_FZU.roa
Signing time: Wed 22 Nov 2023 05:14:21 +0000
ROA not before: Wed 22 Nov 2023 05:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f5:73:62:5e:92:e7:7a:3e:59:d5:c8:87:08:91:1b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 05:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47d39ee95cf9bc5f568ceb07b6e54e45c57f1595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:8e:0b:2d:1e:b5:ef:2b:e2:1d:ea:93:50:
d3:f4:64:36:cf:9b:63:db:f0:ed:dd:59:73:0b:b9:
f5:ea:2e:41:f7:66:a9:53:2e:0b:18:9e:92:f9:0d:
f3:10:da:14:72:a4:5b:d1:41:95:28:68:98:2a:ca:
62:61:0f:05:2c:99:c6:20:99:de:27:88:5f:bf:44:
3a:0a:7d:3d:20:d9:15:50:e8:d0:3d:0f:f4:e4:59:
ca:50:0b:d5:ca:61:a6:aa:78:3f:6d:55:82:5f:b9:
8d:ca:70:ff:6b:ef:03:47:a5:4b:6f:a2:ef:2b:36:
9c:af:5d:f8:22:09:4b:12:62:cf:d7:ba:15:f7:59:
87:42:c8:e0:aa:bd:a6:26:d4:6c:37:0e:e9:65:6e:
5e:23:0d:68:34:5d:c9:d7:d1:7c:a8:85:bd:60:a4:
dd:83:b7:69:18:ad:10:e0:fd:b8:bc:f1:88:b5:03:
9e:a7:b1:15:54:61:73:ce:1d:b3:5e:87:70:46:5b:
ef:8b:f4:67:76:8b:ad:e6:c0:a0:3f:44:07:b0:4e:
9c:d8:4b:0a:df:fc:aa:f1:4f:46:e5:cb:2e:95:e7:
85:b0:4f:1a:e3:6c:bb:25:14:7e:80:89:87:55:f1:
7f:7a:1c:84:da:b3:49:48:4b:c8:3e:d3:7c:19:e1:
af:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D3:9E:E9:5C:F9:BC:5F:56:8C:EB:07:B6:E5:4E:45:C5:7F:15:95
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R9Oe6Vz5vF9WjOsHtuVORcV_FZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d0:55:c4:31:8d:f1:e6:3d:78:05:12:18:f9:e7:59:0e:3c:3b:
c2:e8:ce:12:56:1f:b9:9e:a4:bd:9e:22:27:0a:ae:d7:c9:1d:
39:3e:8a:c3:f4:f2:62:7a:cd:89:99:5e:49:72:27:2f:8b:0f:
8c:57:79:09:f4:72:58:61:26:b6:43:e4:61:7d:24:d5:d9:a1:
cb:60:df:5c:57:5a:6f:8a:2d:6b:1c:79:fc:6c:ec:e3:15:cc:
d4:03:cb:ae:c7:f8:a7:9f:d8:44:6b:42:a1:72:a8:22:b7:83:
fa:e1:7e:85:48:df:8b:c2:21:b3:18:18:07:1f:bb:83:2c:ea:
0e:9e:12:c6:b4:f1:ae:ab:e8:2f:41:3f:c0:05:99:06:67:85:
94:9d:c6:17:fd:4c:7c:2a:e3:02:2c:04:75:ea:3e:1d:14:5b:
f9:02:04:89:89:a2:be:b5:af:5d:86:88:53:c5:7f:cf:c4:1b:
09:b8:f2:cc:72:49:72:f0:bd:15:70:19:c9:b3:3d:01:94:eb:
c9:41:80:39:87:8c:88:1c:71:1c:63:6b:b9:1b:68:27:da:63:
61:0f:29:d8:52:5d:16:4a:b9:65:a6:51:5a:7d:ac:fa:8a:a6:
c4:68:d9:65:6f:63:42:e7:37:3b:bd:4e:3d:b3:ad:5c:ff:6c:
19:f5:3e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:33:10 2025 by rpki-client