Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T9Yocl44P8CGobby8alBkCIFo2E.roa
File: T9Yocl44P8CGobby8alBkCIFo2E.roa (raw, json)
Hash identifier: N1uPPcdD+bntxiN2+/MArPVfbXEQk+Sxa/YS1M/NBG4=
Subject key identifier: 4F:D6:28:72:5E:38:3F:C0:86:A1:B6:F2:F1:A9:41:90:22:05:A3:61
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADC918919F77329CA5C286BB79765AF17
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T9Yocl44P8CGobby8alBkCIFo2E.roa
Signing time: Thu 28 Sep 2023 16:13:59 +0000
ROA not before: Thu 28 Sep 2023 16:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dc:91:89:19:f7:73:29:ca:5c:28:6b:b7:97:65:af:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 16:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fd628725e383fc086a1b6f2f1a941902205a361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7f:e5:5b:ef:5d:5d:cd:17:42:b0:f5:7b:55:
3a:a8:4b:f3:11:f2:e3:ee:c6:29:52:e3:e2:10:8f:
66:57:03:73:11:06:59:76:b6:ec:17:6e:5b:02:19:
da:23:8a:fe:c1:f6:17:48:94:37:13:86:8f:59:00:
e2:65:26:d3:1c:e2:f6:11:8b:3a:36:48:78:b2:4c:
cf:3a:85:92:f7:a9:16:90:32:c6:04:9c:c2:6d:5a:
fc:8e:43:fa:6c:67:bc:ce:8d:ca:2d:03:e1:27:16:
80:5a:cb:d4:31:5f:b9:2f:b2:57:75:4c:2c:eb:13:
a4:6e:25:51:f0:b5:a8:fc:1b:53:d3:be:6f:70:b3:
a7:36:3c:9b:ac:e3:82:23:80:cb:8f:24:30:34:d1:
ae:32:dc:b3:f1:5e:bb:e1:51:ee:63:e0:07:10:b3:
90:1f:f0:1c:6e:85:03:43:7f:1a:81:39:11:86:22:
f0:d2:6b:68:0e:57:02:1e:2b:5c:a8:1a:73:66:f4:
89:28:8d:c3:ed:41:4a:09:9a:67:cd:e3:76:51:a4:
ff:c4:b4:63:17:2e:a2:2e:6e:b2:fa:a8:4d:b9:7a:
43:af:66:bc:ba:9f:de:7d:ad:c9:18:9f:5b:c6:75:
98:84:4c:93:2b:3c:2e:f2:a5:aa:1d:fe:e4:81:2f:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D6:28:72:5E:38:3F:C0:86:A1:B6:F2:F1:A9:41:90:22:05:A3:61
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T9Yocl44P8CGobby8alBkCIFo2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:ab:49:79:f0:9f:5b:20:44:0d:17:96:46:51:9f:e8:7f:92:
c0:14:c9:2d:65:a5:de:84:83:9e:66:1c:4a:c4:eb:76:f8:38:
03:17:14:9f:ad:32:33:1e:bd:4f:ee:50:7e:69:7c:d5:7c:b7:
fe:96:cb:23:1e:98:60:ef:e3:82:55:23:a8:05:6b:18:92:f6:
9d:d6:de:6c:bd:a9:54:4d:dd:0e:cd:8e:62:df:31:ed:c5:a9:
d8:c7:4d:1b:96:59:08:75:8f:3d:63:41:c1:87:ed:61:fd:fb:
c7:ea:29:5c:5a:1f:2f:b8:43:e1:53:a8:04:07:ca:e0:f1:84:
97:e7:d0:46:41:86:be:1d:b7:2a:b0:54:cb:b3:bf:3d:1c:06:
c7:28:80:87:4b:6a:b9:48:3e:86:c0:05:d8:f9:a7:86:7d:58:
36:7b:11:0a:1f:5e:37:01:e5:29:ee:6e:30:36:c1:2f:9f:21:
63:5f:12:96:47:5f:87:a3:56:c2:46:bd:fa:c0:18:fc:17:6e:
50:92:f0:12:bb:58:c7:17:c5:c5:03:8e:ed:59:eb:89:10:bf:
b9:e4:ac:a1:f1:27:3e:2b:4f:fa:08:a0:96:69:c0:d8:0a:6a:
b9:0f:7a:0e:38:c4:12:2f:8e:bc:12:bb:12:54:f0:af:7e:65:
59:a5:4c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:23:08 2025 by rpki-client