Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S9vpNxBjx_-nGZRIJo8oNk8Pn2o.roa
File: S9vpNxBjx_-nGZRIJo8oNk8Pn2o.roa (raw, json)
Hash identifier: CEHMokNu8ABv+7/fd+mLMwyfbzrTRL1OnbuAtiqXX20=
Subject key identifier: 4B:DB:E9:37:10:63:C7:FF:A7:19:94:48:26:8F:28:36:4F:0F:9F:6A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCE9C6532099EB8F425A781B4B997A788
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S9vpNxBjx_-nGZRIJo8oNk8Pn2o.roa
Signing time: Tue 14 Nov 2023 16:13:57 +0000
ROA not before: Tue 14 Nov 2023 16:13:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:9c:65:32:09:9e:b8:f4:25:a7:81:b4:b9:97:a7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 16:13:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bdbe9371063c7ffa7199448268f28364f0f9f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:75:94:50:1d:16:f8:75:17:0e:86:79:28:
3a:61:e0:b9:9d:45:3e:4e:b5:80:c6:0a:a8:78:ff:
50:2f:fe:0f:97:26:17:43:71:67:69:f7:48:35:5f:
c2:83:46:30:86:f1:af:ea:63:32:6a:c9:d6:4c:e9:
55:1f:b3:43:f9:d8:6c:4a:dd:eb:9d:ce:1c:0d:4e:
5f:c9:3b:68:27:22:81:e4:a6:39:d1:f1:cc:1b:32:
81:9e:9e:b7:d6:2c:d6:4d:aa:23:d3:79:9a:e9:02:
5f:60:45:60:92:cf:44:11:0a:57:44:c4:08:e8:6f:
90:c1:29:d1:35:77:f9:9f:45:ca:ad:54:4b:5d:92:
e4:ad:0b:66:d2:af:a2:3e:f6:51:81:c4:2e:68:f5:
f7:5c:93:15:7a:97:36:48:d5:fb:e9:9e:46:73:4a:
09:cf:99:67:59:20:75:6d:24:55:66:7d:8f:89:80:
3e:92:66:1b:14:88:45:29:a6:bf:25:93:8b:6b:3a:
7b:4c:e4:ad:c5:95:03:53:a4:0e:33:50:df:d0:c5:
f3:53:c2:55:4b:e4:ab:55:79:8d:5d:08:30:5d:77:
72:7c:8a:dd:66:9f:3f:5f:eb:6b:69:f0:b2:5d:d2:
a8:c0:9a:8e:14:1d:a3:a8:63:80:00:7e:3d:26:21:
09:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DB:E9:37:10:63:C7:FF:A7:19:94:48:26:8F:28:36:4F:0F:9F:6A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S9vpNxBjx_-nGZRIJo8oNk8Pn2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:67:21:b9:48:58:25:32:ce:e8:50:86:6e:2c:39:90:63:d7:
19:fe:b1:de:7e:8c:7c:46:5f:b6:ac:8c:06:9c:d8:58:07:28:
d5:98:6e:c2:8a:4b:ac:36:1a:aa:a9:a3:83:e9:6a:a2:b9:76:
62:d5:c6:f9:d4:30:2f:8d:a8:4b:40:94:fb:79:9c:93:16:59:
2c:92:61:75:ed:a4:86:25:12:49:cf:89:5b:11:8e:ed:c6:60:
a4:03:2e:f5:bc:c2:2d:df:8a:78:df:5e:06:90:fd:a5:f3:97:
91:6c:4b:4e:57:05:46:40:37:ea:29:b5:4a:5e:75:f5:99:85:
b3:2a:43:70:a7:ae:34:70:b0:93:9d:5e:47:fd:94:69:a5:c4:
eb:d1:9b:d1:36:af:49:70:9f:ba:44:c8:02:ec:da:3a:76:b3:
25:d3:7e:d5:0d:fd:17:9b:6d:92:94:e9:2f:55:0b:03:f5:3b:
fc:f5:7c:e3:51:eb:35:0c:dc:b4:0f:25:d6:ca:61:f7:67:1f:
61:50:5d:a9:d2:e1:43:bc:60:74:39:e9:16:28:f3:20:7a:c4:
44:cf:e9:92:a7:25:ed:61:da:1b:af:98:be:13:cb:c8:7a:d6:
dd:49:a0:4b:e3:48:f0:50:fc:30:ac:df:0f:46:9e:3c:4a:a5:
cd:f0:2a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:05:46 2025 by rpki-client