Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/b9V-pciCiHi_-s-4Yuq4Vs1qX1U.roa
File: b9V-pciCiHi_-s-4Yuq4Vs1qX1U.roa (raw, json)
Hash identifier: XVjbC7BNZOEHuHjQ9W9UAYBkOZZa+Yb99zmez5wN4rk=
Subject key identifier: 6F:D5:7E:A5:C8:82:88:78:BF:FA:CF:B8:62:EA:B8:56:CD:6A:5F:55
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACA1ED96B1F4AA8009065237A8153390B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/b9V-pciCiHi_-s-4Yuq4Vs1qX1U.roa
Signing time: Mon 25 Sep 2023 02:15:33 +0000
ROA not before: Mon 25 Sep 2023 02:15:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ca:1e:d9:6b:1f:4a:a8:00:90:65:23:7a:81:53:39:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 25 02:15:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fd57ea5c8828878bffacfb862eab856cd6a5f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:92:d3:53:77:47:03:40:11:4f:c6:17:c2:65:
f1:6a:3c:a2:e1:63:f2:76:0e:c5:a0:db:75:1e:a4:
6c:2a:1f:62:96:66:bd:21:bd:91:68:c7:ab:7f:57:
f2:f6:d7:f9:84:86:49:7b:c5:40:dd:5b:19:64:99:
75:3f:cc:6e:b4:65:d3:47:4f:27:7c:2c:6a:c2:da:
68:53:c2:34:99:ba:40:05:ba:41:9e:d7:27:45:20:
3f:89:c7:81:e9:a2:02:11:e2:00:26:a8:47:0a:3e:
3c:4b:f9:e6:43:4f:05:c7:2e:f3:b9:77:2e:94:a5:
3f:f8:2b:8a:05:71:01:ee:57:c0:2e:9e:b3:70:14:
8c:98:d7:a7:69:12:b9:96:36:04:b6:68:56:7b:30:
e7:ad:b4:85:d4:23:61:bc:78:2c:32:e2:a9:3c:7b:
32:11:9d:cc:47:ca:5d:f2:45:a5:28:5d:8d:c4:ba:
b1:3d:19:2c:4e:cd:f3:55:00:cc:6e:a5:be:ad:4a:
29:55:7c:2b:3f:83:2c:c2:a7:99:33:e4:27:4c:8f:
77:bd:20:d9:19:be:db:de:f3:65:d8:6a:69:1f:9e:
3b:fc:c2:17:0c:15:fe:bc:4f:49:63:99:c2:fb:9d:
aa:80:e4:9d:b3:2e:22:90:80:20:e8:05:b1:0f:ae:
c7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D5:7E:A5:C8:82:88:78:BF:FA:CF:B8:62:EA:B8:56:CD:6A:5F:55
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/b9V-pciCiHi_-s-4Yuq4Vs1qX1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:3a:9a:3a:47:b7:61:f4:a6:54:bf:82:d8:3c:4b:1d:39:80:
90:64:cf:13:62:01:bb:1e:9e:9e:fb:ae:53:9b:56:55:31:9f:
d1:06:f6:bd:88:b2:80:9c:61:d3:33:97:af:ce:b0:5a:e9:1f:
c5:02:8f:be:67:30:dc:69:6b:36:cd:49:73:7c:c6:85:d2:65:
12:a1:13:3e:e0:5b:ce:78:d5:26:3c:53:1f:28:8b:96:b3:19:
a9:76:1f:bb:40:2c:91:24:62:f9:fa:f4:8f:1b:0d:71:38:54:
0b:e1:74:31:c3:b9:03:23:47:2b:0b:de:8d:d0:c6:5c:ae:ed:
f5:72:bd:a5:3e:74:8e:42:fc:90:a8:f8:df:74:c5:cc:0f:a1:
73:b5:a5:81:c0:af:cf:6d:58:22:d8:d8:37:c3:15:07:64:9e:
d8:fe:ce:63:86:cd:76:11:57:56:33:ed:76:df:e4:22:bd:4a:
65:fe:ec:4d:a7:32:0c:3d:47:a1:bf:c0:28:d4:aa:07:27:2e:
bd:e9:74:ec:6c:66:4f:88:1f:7f:1a:98:4a:bf:d1:29:07:a5:
58:b6:a4:a4:48:ab:be:1d:61:ff:88:6c:14:d3:cb:31:fe:20:
eb:9f:ec:c5:5a:da:a0:49:ec:69:45:28:30:22:9e:02:93:e8:
45:e1:6c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:29:01 2025 by rpki-client