Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_s9iPlx1Uk8Iksw8pU8n0ArDlo0.roa
File: _s9iPlx1Uk8Iksw8pU8n0ArDlo0.roa (raw, json)
Hash identifier: KkPt89Q2MSNCbJ0z6Nz/2+KnWg/DCDpnb6llC5N2PVg=
Subject key identifier: FE:CF:62:3E:5C:75:52:4F:08:92:CC:3C:A5:4F:27:D0:0A:C3:96:8D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6046DDDEC94AC60879A0E638A922051F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_s9iPlx1Uk8Iksw8pU8n0ArDlo0.roa
Signing time: Tue 12 Dec 2023 23:05:06 +0000
ROA not before: Tue 12 Dec 2023 23:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:6046:548d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:60:46:dd:de:c9:4a:c6:08:79:a0:e6:38:a9:22:05:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 23:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fecf623e5c75524f0892cc3ca54f27d00ac3968d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:70:7b:cc:41:98:d2:49:71:ef:40:b7:27:67:
8e:0f:e1:58:50:1f:b5:13:a2:a9:1e:77:4e:3c:cc:
6f:98:fa:66:7e:1d:a1:c4:80:b1:a0:d0:bd:18:10:
12:6e:c0:cd:aa:0a:88:09:00:84:2d:30:ea:c0:1f:
a0:20:76:b4:57:bb:18:a9:a5:f7:67:7b:b6:fe:98:
8a:e3:ac:f9:93:14:df:f3:88:fb:d5:93:98:7b:f1:
44:03:05:45:45:bd:fa:aa:5f:65:b9:7b:f4:a6:f9:
55:d3:46:18:3a:fa:8d:6d:c8:3b:64:71:fd:be:23:
21:be:f8:db:29:15:b0:24:1e:cb:06:47:1d:f1:ca:
0c:a4:d3:19:cd:7b:e5:07:4f:46:b6:b7:08:0f:65:
24:2b:df:8c:f3:14:7e:87:d4:ac:f5:9e:f6:9b:11:
4a:51:79:97:8c:b3:80:23:0e:c0:8b:d2:a5:b7:6c:
26:a3:4f:87:5b:e9:cf:fe:ff:fd:f5:c1:3d:11:cd:
81:ee:e0:55:01:2d:f8:69:58:fc:05:ed:2a:f6:72:
a6:8c:07:58:90:0a:7c:18:4a:09:7a:6f:5c:05:e6:
0b:41:65:4e:af:8e:35:63:e6:29:a0:ce:a3:15:fa:
41:d4:b5:19:9f:ca:3a:b2:3c:b8:46:fd:12:7c:d1:
c1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CF:62:3E:5C:75:52:4F:08:92:CC:3C:A5:4F:27:D0:0A:C3:96:8D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_s9iPlx1Uk8Iksw8pU8n0ArDlo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:17:8f:81:20:df:12:11:ef:61:c9:3b:7c:1e:36:5e:c6:04:
20:2c:cb:8c:e7:a1:0d:16:6d:04:b4:1b:bb:eb:d2:48:83:50:
a0:aa:86:a9:55:d7:97:6b:18:6d:dd:3e:0a:3c:fc:a9:49:ef:
87:7e:b4:03:ce:b6:84:d2:5f:d3:d9:7b:1c:a8:23:99:3d:25:
12:23:25:33:a5:d1:56:78:83:ad:8a:94:71:a0:5c:d2:a5:e5:
3a:8f:ff:e4:a1:3b:fd:b5:77:ca:63:93:e3:b8:d5:74:47:a3:
a4:a3:2d:92:6f:e6:07:8e:ff:f7:63:68:b8:79:e9:82:fa:2b:
2b:b7:81:9d:1f:1e:1b:df:3c:fb:55:bc:77:95:30:95:79:ca:
fa:6a:6c:29:9b:d7:4b:b2:3d:41:38:a9:aa:6c:af:b5:e8:98:
bd:36:7b:3e:08:6f:5a:4d:16:c7:6a:02:c3:7d:b4:03:26:9f:
6b:26:dd:59:d8:f3:71:26:5e:58:1a:46:30:e6:b9:02:84:8e:
fa:60:7c:86:90:c8:d5:e0:e7:41:7f:eb:ea:e2:97:12:c3:31:
f5:94:e7:67:74:bb:b1:9c:92:0e:55:2e:e2:09:92:89:9c:b2:
0a:8d:2c:37:55:13:7c:d8:93:8b:15:3d:1f:35:5a:3e:82:4a:
65:02:5b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:46:23 2025 by rpki-client