Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/f9zIrNxF-t467tHdoJtyKLymbok.roa
File: f9zIrNxF-t467tHdoJtyKLymbok.roa (raw, json)
Hash identifier: laavj8EhX9huEXNtzg5SbXmrc/bRfx329QZ+BZykBak=
Subject key identifier: 7F:DC:C8:AC:DC:45:FA:DE:3A:EE:D1:DD:A0:9B:72:28:BC:A6:6E:89
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B224E4158F07635E6CA14CC7548670CB6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/f9zIrNxF-t467tHdoJtyKLymbok.roa
Signing time: Thu 12 Oct 2023 05:13:55 +0000
ROA not before: Thu 12 Oct 2023 05:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:22:4e:41:58:f0:76:35:e6:ca:14:cc:75:48:67:0c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 12 05:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fdcc8acdc45fade3aeed1dda09b7228bca66e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:3d:6f:d9:6e:99:28:58:fe:87:6d:e1:1c:
2d:b4:9c:f5:89:6e:dd:d1:b7:12:4a:a2:04:8c:55:
ae:e8:aa:e8:e1:9d:a2:df:8d:3b:bd:7b:ca:85:8d:
53:75:ce:4f:00:2b:99:1b:4e:77:da:3a:76:ef:86:
18:ba:ef:cd:b5:56:24:cc:1d:3a:42:9b:8f:07:d7:
c3:f0:c3:49:2b:d6:57:8e:50:88:61:50:68:12:b0:
7d:43:79:c7:c5:50:a4:4e:1c:11:a2:3b:2e:e3:9e:
df:9d:1a:b0:54:96:28:0a:38:3e:7a:dc:93:7f:ae:
07:31:30:3f:88:08:7f:44:6c:3f:8d:f3:b8:69:d9:
79:ff:9a:e7:4f:96:9e:ec:c5:cb:f1:5f:6b:12:c9:
0e:e5:8f:11:fe:0d:9a:25:4c:3e:1d:3c:df:7d:43:
6e:e4:56:c4:f7:a3:b3:36:d0:33:ad:14:5b:95:66:
eb:2d:90:99:30:0a:01:86:61:0d:1c:0b:09:32:05:
77:84:3e:25:2a:cb:17:c5:90:df:88:28:fe:c2:b2:
c7:a5:8c:ec:33:72:29:9f:eb:4a:02:39:5b:76:af:
99:fa:f6:19:37:16:fd:64:4e:05:56:65:12:96:26:
0f:35:f6:c4:1a:3a:15:6c:1a:1a:15:73:52:74:a6:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DC:C8:AC:DC:45:FA:DE:3A:EE:D1:DD:A0:9B:72:28:BC:A6:6E:89
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/f9zIrNxF-t467tHdoJtyKLymbok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:9e:ce:c9:77:ef:64:c5:12:fc:e7:c2:42:c0:21:65:3b:0e:
1a:c0:77:5e:c7:9c:b8:57:c8:e8:50:25:50:80:66:14:02:7e:
d9:28:bc:c4:97:b5:3a:5c:0b:8c:2a:c0:bd:36:ca:24:0c:a8:
f2:32:58:39:bd:bc:e6:97:26:f2:f7:c6:8f:8c:b3:f4:9b:e6:
87:40:7f:ee:32:fe:8b:6a:9b:06:34:ad:a2:d3:c8:08:46:0a:
15:1d:f6:23:9d:d9:ac:75:28:b8:49:69:88:f6:51:e5:bc:58:
f9:d3:c1:f1:3a:6f:8a:7f:83:ae:bb:04:89:31:37:65:8e:a0:
de:be:02:f8:b1:76:43:aa:c2:24:6d:a6:d1:a3:71:f0:f9:5b:
36:76:b5:23:9d:2f:3f:e6:99:ef:9a:b4:5f:e1:23:23:b9:22:
1f:7a:dc:93:17:e5:94:97:eb:bf:e4:a7:80:9a:c4:fa:63:fd:
3f:9b:ed:b8:8a:96:f4:64:84:89:82:90:db:7c:60:f8:db:e5:
9a:07:51:bf:db:5f:64:81:02:48:33:85:e4:92:cf:d1:95:11:
19:ea:57:50:d2:4c:88:ed:96:4a:a1:64:5f:4b:8e:9e:03:f0:
69:3d:92:59:0a:d6:bb:04:d2:81:8f:9d:c1:fd:32:b5:87:35:
27:ce:28:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:44 2025 by rpki-client