Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/j0yTnvKQ87q7FtgmiMunXOxaF4o.roa
File: j0yTnvKQ87q7FtgmiMunXOxaF4o.roa (raw, json)
Hash identifier: PxgVMZCi9nEGKp24dPXfpmFZoO6CoHWciBoJcURgpAA=
Subject key identifier: 8F:4C:93:9E:F2:90:F3:BA:BB:16:D8:26:88:CB:A7:5C:EC:5A:17:8A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC296629D826518999AA9F243093D1734
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/j0yTnvKQ87q7FtgmiMunXOxaF4o.roa
Signing time: Sun 12 Nov 2023 08:11:57 +0000
ROA not before: Sun 12 Nov 2023 08:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c2:96:62:9d:82:65:18:99:9a:a9:f2:43:09:3d:17:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 08:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f4c939ef290f3babb16d82688cba75cec5a178a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:30:0b:f9:26:9f:b3:48:d1:c9:f0:10:e9:
87:62:80:31:db:7b:25:bd:c9:9a:77:7e:e8:e4:c6:
0e:b1:e8:4b:73:7c:38:e4:6c:79:28:e1:4e:26:11:
d7:f8:70:22:38:30:4f:96:6c:6c:04:66:8a:a9:c5:
d3:a2:bc:88:50:9c:22:73:4e:27:f4:8d:88:f7:80:
a7:71:4f:fb:fb:26:ba:a7:82:45:12:af:a1:28:07:
68:22:8c:f2:96:73:72:a4:0c:47:fe:b9:67:63:9f:
72:fe:8b:d7:ed:28:1a:e2:76:d8:99:07:66:87:32:
27:0a:31:b7:02:57:d7:6d:8b:1a:6c:e7:af:89:fe:
4c:1b:52:f5:01:a8:cb:a9:99:0c:6d:67:91:9d:a7:
fe:75:37:3d:fb:35:52:d4:8a:be:cf:bd:8e:48:4e:
1c:ac:da:62:74:1c:30:a9:9d:9f:c5:0c:d9:bd:f9:
52:a8:96:44:7b:2f:69:a5:89:39:4b:df:6b:03:bf:
dd:01:72:1d:09:eb:f6:4e:bb:33:2c:d9:65:b9:b1:
37:1a:f0:32:c1:af:15:5b:96:73:c2:18:25:46:88:
8b:c2:97:d5:ee:04:3c:e1:fe:57:70:f0:3e:a5:a9:
7c:9c:29:0a:3e:79:33:92:89:f7:77:82:42:6c:12:
98:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4C:93:9E:F2:90:F3:BA:BB:16:D8:26:88:CB:A7:5C:EC:5A:17:8A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/j0yTnvKQ87q7FtgmiMunXOxaF4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:18:dd:f1:75:f7:50:d7:d5:33:cd:e4:b0:ea:03:72:a6:e9:
db:0a:b2:82:52:0c:be:08:f2:82:d1:a3:b5:d6:13:f6:52:b0:
5e:e9:05:79:eb:ed:4b:9f:5b:33:cb:9f:e1:bb:83:c1:ec:cb:
de:24:7b:2d:97:85:06:ac:bc:3e:8a:b5:74:30:4f:a8:c4:3b:
47:6c:2a:b1:4d:93:fa:be:91:1b:be:f2:45:7d:02:bd:45:39:
5e:11:31:85:60:05:08:59:e9:92:c5:50:8a:87:dc:cf:92:03:
9e:d8:9f:4d:07:12:95:ec:db:b0:ae:53:70:2c:b1:6b:ee:53:
cd:5c:23:6f:c7:03:f7:87:17:d9:3f:df:4c:7f:30:2a:ef:4d:
fa:87:11:4b:14:c4:c0:04:e1:77:6a:dd:9a:72:0e:a7:3d:d6:
da:1d:fc:91:0f:75:b5:bd:a5:ac:19:6a:3d:3b:09:93:23:f3:
f6:7a:4d:63:55:b0:27:83:d5:60:b4:cd:3c:22:0d:98:ac:10:
0f:8a:ae:86:05:06:3f:ab:98:fc:f6:63:5c:f6:49:05:36:9e:
d9:5c:83:1c:ef:0c:de:bd:99:d9:fa:0e:88:63:9c:74:81:36:
c2:c7:38:32:5d:4e:b2:7f:b2:33:d2:c9:84:2f:09:88:32:33:
d9:3e:58:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:02:17 2025 by rpki-client