Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S9cZq8Eg8Id_fm_zQz2XCdBqyGo.roa
File: S9cZq8Eg8Id_fm_zQz2XCdBqyGo.roa (raw, json)
Hash identifier: hegLD50GQHSTNrmVfvcEscIbKODjHvt4Rc1dvg//5I8=
Subject key identifier: 4B:D7:19:AB:C1:20:F0:87:7F:7E:6F:F3:43:3D:97:09:D0:6A:C8:6A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9360CB9E2CCBC1DAA75EB618776490CE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S9cZq8Eg8Id_fm_zQz2XCdBqyGo.roa
Signing time: Fri 03 Nov 2023 04:11:16 +0000
ROA not before: Fri 03 Nov 2023 04:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:60:cb:9e:2c:cb:c1:da:a7:5e:b6:18:77:64:90:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 04:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bd719abc120f0877f7e6ff3433d9709d06ac86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:20:b2:4e:ac:bf:5e:f4:1b:20:d7:9f:3a:
b8:a8:93:07:59:8c:6d:04:0d:05:f8:f4:c7:53:95:
8a:6f:f7:aa:3f:af:1b:2e:af:59:05:a4:f4:a5:8d:
b8:25:a0:6d:2e:dd:f8:ec:53:0e:97:53:a7:d4:a4:
5e:ef:55:e7:47:02:99:98:8e:51:86:95:d5:2b:3e:
6f:06:70:6b:6d:34:68:00:60:4c:c0:ec:07:ef:14:
8e:22:34:7c:b5:a0:17:70:bf:75:06:08:ad:3b:1d:
06:85:9c:af:dc:d4:4f:f9:0a:93:d3:95:e7:bd:a8:
32:ba:6d:f8:db:2a:2c:33:9b:7d:d0:f2:39:76:db:
c0:2f:87:da:74:8d:c1:43:88:b8:12:1c:0e:f0:86:
65:f5:9a:e7:74:0a:73:d6:61:e7:c3:13:17:07:84:
41:27:f6:bf:90:04:df:87:de:75:b4:2b:cd:29:5f:
49:61:cc:85:16:e5:2a:7c:e5:ab:e7:7d:14:51:6f:
ce:00:61:0b:5e:a4:c5:4c:5a:ba:75:f4:f8:8d:55:
6b:fb:1f:f7:7d:7b:86:c5:57:bf:a3:c6:d6:d7:90:
3b:33:f0:1c:1b:a8:20:3a:35:0e:03:de:81:2c:a7:
23:52:ae:c9:ae:3f:5c:f8:69:a7:5d:11:e6:74:e3:
28:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D7:19:AB:C1:20:F0:87:7F:7E:6F:F3:43:3D:97:09:D0:6A:C8:6A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S9cZq8Eg8Id_fm_zQz2XCdBqyGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:14:bb:2e:b6:9b:3b:d5:f0:47:68:c0:b8:17:05:f5:b1:16:
5c:d6:6c:e9:2c:cc:1e:98:82:43:7f:8f:b9:f6:7e:2b:8a:2c:
a7:69:27:39:4d:34:f9:bd:d2:ae:ec:ce:4e:22:35:4d:91:47:
eb:1b:53:5f:b3:87:7c:dc:a5:3a:bb:a9:fa:2f:86:7a:06:18:
65:46:cb:0c:02:06:05:cf:66:32:f5:b8:48:29:4c:ee:bd:38:
b1:cb:81:cb:a0:5b:d7:86:8b:79:3a:96:92:bf:27:f9:57:6d:
88:e1:66:cb:55:14:2c:6a:55:46:11:5f:e3:f6:cf:cf:e0:ba:
c0:cd:c6:69:25:2f:ff:4e:49:4b:82:f9:e3:be:06:de:b5:4b:
e6:b9:4b:36:8f:7d:7a:30:19:dd:c2:ad:6d:ed:ed:b7:d2:ea:
90:93:b6:65:ac:36:53:e2:0f:80:8b:3c:47:ba:5c:65:56:85:
f7:00:6e:eb:40:47:40:58:fe:9d:2a:0b:7c:4a:be:da:94:b7:
1e:48:ec:4b:98:e4:57:1e:86:bb:3e:cb:16:e9:da:66:17:50:
03:68:5c:44:c6:dd:c0:d3:7e:13:cd:b6:16:27:a9:8e:a0:ff:
0f:dc:c0:b4:0d:e0:1a:0c:88:21:88:86:81:c1:f8:f2:b6:9b:
ae:0e:0a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:39:40 2025 by rpki-client