Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SsV9KjPYSmGeERymaAOPA7xXzIY.roa
File: SsV9KjPYSmGeERymaAOPA7xXzIY.roa (raw, json)
Hash identifier: IpPUMjUh7q3EEY+06Nrx+jp0JvNL/Z3pzjCc+T1Pk/k=
Subject key identifier: 4A:C5:7D:2A:33:D8:4A:61:9E:11:1C:A6:68:03:8F:03:BC:57:CC:86
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C462132590C3A55FC1BADAFCC79F621CE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SsV9KjPYSmGeERymaAOPA7xXzIY.roa
Signing time: Thu 07 Dec 2023 21:13:49 +0000
ROA not before: Thu 07 Dec 2023 21:13:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:46:21:32:59:0c:3a:55:fc:1b:ad:af:cc:79:f6:21:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 21:13:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ac57d2a33d84a619e111ca668038f03bc57cc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:fe:9d:24:2b:78:a1:36:d5:dc:68:33:1f:
68:f2:ce:7d:30:6d:91:d7:5a:86:c7:70:77:94:ef:
07:8d:88:b5:08:fa:41:d9:63:37:81:d8:14:bc:a5:
82:96:88:7a:19:41:cf:68:3e:b5:ee:00:16:ff:25:
2b:e3:b5:7b:64:e7:9e:48:8f:ff:fa:78:52:60:ad:
68:f4:d7:98:c4:11:ec:b2:c4:d2:67:d1:91:56:3c:
09:79:8d:09:51:dc:3a:3b:ea:ba:1e:28:4d:08:0c:
36:61:c7:0a:c0:b3:a8:c9:d4:8b:b3:01:ad:3c:94:
fd:44:80:d3:d3:f6:9c:73:28:e5:dc:33:4e:4e:13:
32:fd:c9:72:d5:4e:fd:ec:5f:7b:26:7e:cd:32:fb:
5a:aa:8e:c6:8d:57:19:30:a4:3c:3d:59:b4:24:51:
17:9b:09:f1:81:bb:d5:5f:be:83:d4:1c:54:66:64:
01:33:8a:08:47:71:e2:4e:b2:63:62:c4:9c:c5:0b:
27:9a:ed:31:0f:b9:e4:e6:5e:f4:7c:e3:41:bc:4d:
da:a5:04:37:4a:21:03:11:3d:58:ef:92:e7:0c:65:
0f:2e:4c:af:3b:ca:36:76:ba:a9:ea:af:58:e6:57:
ba:86:9a:d5:77:80:ba:3a:c9:5b:cb:6c:a0:30:59:
87:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C5:7D:2A:33:D8:4A:61:9E:11:1C:A6:68:03:8F:03:BC:57:CC:86
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SsV9KjPYSmGeERymaAOPA7xXzIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:07:2c:ae:7c:53:98:af:19:6c:bb:ba:66:e0:41:01:88:74:
01:af:39:74:dd:f9:d7:f0:3f:5d:13:27:a8:c9:95:26:55:41:
1b:d9:fc:9c:da:e6:e3:bf:43:a0:e7:08:ce:9a:92:9f:11:64:
12:c8:c0:cf:63:26:60:ba:a0:f2:60:c3:11:23:6b:48:ef:d0:
39:88:71:93:9f:48:26:df:cc:6b:70:c0:3d:b7:1b:ef:8d:c8:
f7:41:56:0d:d3:d9:7b:0f:20:5d:bc:0c:73:fd:8d:91:3b:0e:
7e:dc:c2:7c:1b:cc:25:20:4d:c7:68:1a:56:d9:aa:77:cc:48:
a7:3c:25:ec:ea:51:b4:39:43:66:da:26:a9:29:e9:e6:39:87:
e6:65:f2:0a:c3:90:6a:33:5e:6e:15:93:66:ec:de:d0:90:03:
36:46:29:52:71:0a:85:97:4c:96:2c:22:a5:af:97:37:c5:3f:
e8:a5:8f:a6:c1:dd:13:20:3d:af:cf:a1:b1:d9:e4:63:85:db:
a0:af:ee:38:62:84:6e:ed:e8:b1:7c:ff:95:33:a1:d3:e3:5b:
f5:d1:d8:bc:13:7b:a8:4c:ab:a9:71:7c:a3:40:87:f8:38:87:
5c:bd:5d:0c:26:82:3c:3f:d0:d5:15:46:5e:87:5d:bb:63:63:
85:78:22:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:34 2025 by rpki-client