Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/j8D7c96CfjImJdGp-m5mMGkuAWs.roa
File: j8D7c96CfjImJdGp-m5mMGkuAWs.roa (raw, json)
Hash identifier: bApj1DEGke5GtmDDfY28xGRw/S/MvM7poSMETh6Wgww=
Subject key identifier: 8F:C0:FB:73:DE:82:7E:32:26:25:D1:A9:FA:6E:66:30:69:2E:01:6B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB6CEF02B7BFC985899B72CCA56008235
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/j8D7c96CfjImJdGp-m5mMGkuAWs.roa
Signing time: Thu 21 Sep 2023 08:15:29 +0000
ROA not before: Thu 21 Sep 2023 08:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:ce:f0:2b:7b:fc:98:58:99:b7:2c:ca:56:00:82:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 08:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fc0fb73de827e322625d1a9fa6e6630692e016b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:82:68:35:7d:32:a0:22:fc:78:07:81:6d:a0:
9c:27:0b:70:17:c1:cc:40:c0:e7:d6:85:0e:55:17:
69:3d:55:90:83:2a:9f:09:47:bb:19:27:6e:22:3e:
2c:b9:56:c5:e8:87:d5:28:5c:2a:11:7a:a1:3e:1f:
ad:06:a6:6a:5d:b8:81:bf:f0:a9:28:15:8c:05:d9:
6c:63:03:ec:c1:be:69:70:e7:6d:b2:63:8c:cf:2c:
58:17:a7:80:3c:ef:1e:cf:c7:4e:bb:58:89:9d:5c:
df:8b:79:2d:44:f5:04:da:81:21:4a:f5:1a:0f:f7:
91:10:36:1a:87:8c:ff:a9:ae:11:41:57:00:c9:34:
7e:1c:17:a2:c0:e4:f6:17:1f:c9:47:3d:fb:dd:71:
85:8c:e4:18:d7:42:b5:ae:f3:a9:2d:32:91:2a:d2:
93:32:42:8a:fe:2f:2e:95:97:64:e7:92:ac:da:18:
e6:f5:52:f7:e0:7a:f5:64:b8:db:22:02:25:a6:a1:
4e:c9:41:ec:30:ed:31:fe:a2:75:49:07:fa:a3:2d:
06:df:08:3b:48:2e:94:e9:e3:1c:71:53:57:0c:7b:
dc:50:c9:c9:1f:d9:ee:9a:b4:07:ed:49:a2:e1:4c:
0b:b2:4d:4a:97:6d:b6:7c:e8:13:47:5d:7c:e1:29:
6d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C0:FB:73:DE:82:7E:32:26:25:D1:A9:FA:6E:66:30:69:2E:01:6B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/j8D7c96CfjImJdGp-m5mMGkuAWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:44:b6:00:5c:09:8f:2d:c3:4c:d9:ae:34:91:85:3b:8b:15:
d8:82:33:86:40:e2:78:0f:43:60:0d:49:bf:1d:ce:4a:8c:7a:
f5:db:dc:2a:eb:95:46:d5:64:75:58:b6:23:3a:75:1e:0b:a3:
4a:d9:84:c9:b0:b8:5c:e6:f6:e4:08:a1:84:f6:2d:f7:f8:ef:
84:d6:14:46:5b:52:a4:33:96:4f:8c:e2:fb:3d:e5:76:36:cb:
ab:9c:d3:92:f7:78:a9:aa:2a:34:26:74:a6:d1:9b:ce:01:1f:
8d:d1:71:14:d2:40:40:2b:75:56:29:78:fe:05:74:9c:ec:21:
66:da:ba:61:87:7c:ae:9f:d5:2c:cd:ab:d4:cb:56:de:71:9c:
f4:94:11:7d:2a:29:b4:91:83:fa:e6:09:de:41:f8:03:29:5f:
cd:73:9e:08:df:12:64:35:06:9e:b2:b6:76:7b:d8:ba:99:d9:
f3:e3:fc:3e:72:14:47:8c:8f:14:69:c2:5a:ab:68:6a:5e:51:
6d:fc:f3:7e:3b:3f:f5:73:ac:ca:0a:5c:eb:2f:d6:1f:20:ce:
6c:6e:09:1a:16:93:a1:af:16:d8:b9:49:3a:44:5e:96:1f:4f:
8d:03:35:55:ac:4f:fb:88:14:9f:b5:fc:d2:3b:f1:18:f0:00:
d5:88:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:16 2025 by rpki-client