Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jD5OWy41hIh4eS9alJmrQvqz_Zc.roa
File: jD5OWy41hIh4eS9alJmrQvqz_Zc.roa (raw, json)
Hash identifier: 7IQULKMak6QOV2h/N+zRdNrwJqxtEBqui8fL4ZxWXYs=
Subject key identifier: 8C:3E:4E:5B:2E:35:84:88:78:79:2F:5A:94:99:AB:42:FA:B3:FD:97
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB2B486641DC65E72F92E53E37903EAD5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jD5OWy41hIh4eS9alJmrQvqz_Zc.roa
Signing time: Thu 09 Nov 2023 06:10:57 +0000
ROA not before: Thu 09 Nov 2023 06:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b2:b4:86:64:1d:c6:5e:72:f9:2e:53:e3:79:03:ea:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 06:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c3e4e5b2e35848878792f5a9499ab42fab3fd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:21:fd:4b:b0:7a:82:5b:b3:a9:19:4a:74:85:
7d:af:84:9c:da:09:cb:74:2c:a9:2e:8b:b2:b7:cd:
f1:df:a6:17:ee:bc:29:31:c6:78:0d:16:26:4e:18:
40:43:50:ad:ef:d6:1a:17:cf:24:56:14:05:07:c7:
02:2a:e5:72:95:2f:1f:f7:55:86:41:a3:fe:72:93:
bc:6e:52:38:0e:ec:56:0f:90:72:05:e4:8c:6c:37:
f7:b0:10:e8:84:97:44:db:26:35:ca:5b:22:cd:49:
d1:62:81:ef:80:2f:c4:57:ef:15:0f:bf:b0:63:74:
0a:15:8a:79:08:e0:14:bb:77:5a:3f:eb:0a:32:1f:
b2:1c:a0:c9:a1:3f:11:a4:33:65:97:a9:af:f5:e8:
66:80:df:c4:ba:d7:23:3f:4f:33:7a:9e:b1:aa:4d:
a2:14:a9:8b:d5:1f:f5:1d:e3:a2:0f:90:05:ea:02:
85:d0:9a:39:cb:bb:c4:08:b7:41:09:5b:66:62:22:
f7:2f:8b:f2:eb:9d:96:25:5f:9a:85:01:07:90:9f:
e5:2f:84:fa:f2:86:de:e9:fb:55:b4:a0:dc:f7:eb:
00:5d:1f:54:74:63:6e:5c:51:01:0e:e5:d5:23:6c:
7c:88:3c:f2:69:92:26:20:2d:b3:a9:98:da:d3:49:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3E:4E:5B:2E:35:84:88:78:79:2F:5A:94:99:AB:42:FA:B3:FD:97
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jD5OWy41hIh4eS9alJmrQvqz_Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:e7:f4:c3:93:07:2c:b0:52:49:e4:9e:db:8c:07:77:dc:71:
9a:d5:64:b2:5e:70:5e:1d:3a:fe:e7:0a:ed:03:7e:4c:12:22:
30:c7:3d:19:37:0c:78:f2:c2:ff:9c:96:21:63:b6:09:91:31:
44:32:8b:25:03:5b:14:49:ba:99:a0:9c:27:02:40:30:ca:6b:
a1:a1:12:c1:7f:10:19:f9:4d:1e:b0:c3:17:8c:e1:e4:42:76:
af:c5:b8:93:9c:7d:8d:ab:fe:ad:12:09:de:bf:72:b4:a3:be:
8e:c7:41:de:57:9e:70:d7:73:ee:c1:60:35:b4:23:5e:19:a6:
ed:3b:ed:a7:24:5b:b8:bd:62:a2:f6:cf:0f:1c:32:23:d1:04:
bf:eb:7a:50:21:2a:33:79:d5:5f:23:dc:2f:31:c2:93:1b:dd:
29:f9:51:dd:de:5f:e1:2e:6e:47:d3:d9:60:3a:04:7f:e6:4e:
bf:b6:ce:8d:0d:d0:1a:81:60:d6:a9:09:b4:a7:a3:f5:25:7c:
98:ac:e2:d3:4e:f1:57:34:86:e7:63:97:3c:00:87:af:ef:03:
61:f3:7d:15:db:f2:09:11:58:e9:fc:d3:8a:28:95:64:f9:0e:
43:64:81:bb:9e:89:d9:9a:38:72:e6:81:5d:95:ca:f9:fd:08:
80:7f:3f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:31 2025 by rpki-client