Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jSQ20W3BxCI7KLygShfIUkXhq30.roa
File: jSQ20W3BxCI7KLygShfIUkXhq30.roa (raw, json)
Hash identifier: rYBPtCmsslG0Q/cX0G3H3b46JoMukWRSu/RmGxTMCzw=
Subject key identifier: 8D:24:36:D1:6D:C1:C4:22:3B:28:BC:A0:4A:17:C8:52:45:E1:AB:7D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3009F57B02D5C4F4E3C57D09B56B82D8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jSQ20W3BxCI7KLygShfIUkXhq30.roa
Signing time: Sun 03 Dec 2023 14:16:48 +0000
ROA not before: Sun 03 Dec 2023 14:16:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:30:09:f5:7b:02:d5:c4:f4:e3:c5:7d:09:b5:6b:82:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 14:16:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d2436d16dc1c4223b28bca04a17c85245e1ab7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a5:a4:ff:6b:69:de:fa:04:38:28:8a:3e:c7:
65:af:ea:f7:ac:95:b9:a6:0c:66:2b:a7:89:28:b8:
41:90:c8:c5:14:c0:c9:d5:e3:04:23:28:76:55:66:
04:a0:f0:20:c6:b3:b1:cf:71:20:22:58:66:2d:2e:
49:77:44:0c:b9:1e:4b:9a:0a:37:ac:3d:5a:e7:5f:
10:07:50:53:6b:0a:60:b2:6c:9f:eb:3f:e9:e1:28:
c6:a7:01:84:91:e5:46:0e:30:20:3b:a5:73:4f:e8:
e1:4e:00:0c:5a:27:e5:07:dd:82:d5:ec:4e:22:f5:
c6:7b:04:69:23:5b:34:47:6d:85:a8:b5:69:7f:8e:
8d:d6:01:1b:d8:da:ba:bd:e1:c5:2c:65:a1:7e:3a:
a0:b4:54:43:fa:78:11:b8:bf:34:85:03:7e:f7:24:
af:cb:28:ff:6c:7b:f0:5e:cb:14:39:41:c9:cf:c9:
1b:90:29:7c:85:36:3b:1a:b5:7a:90:46:6f:b1:2a:
f2:5a:51:d7:af:91:7c:89:a6:ae:0c:98:65:12:33:
a6:60:48:5b:b1:9f:83:72:71:52:fb:7c:e1:0d:81:
88:cd:31:28:ea:67:81:86:b0:ed:97:74:92:6a:48:
8d:69:94:39:fe:85:e5:79:2d:c8:2f:e4:43:ca:68:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:24:36:D1:6D:C1:C4:22:3B:28:BC:A0:4A:17:C8:52:45:E1:AB:7D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jSQ20W3BxCI7KLygShfIUkXhq30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:a0:b6:ba:ea:83:91:9a:d5:4b:f6:54:37:7e:c8:58:97:2c:
72:e0:6d:6a:8d:13:5f:7d:79:28:f5:bf:22:6d:6a:bf:a3:3d:
50:2f:06:ec:e4:15:da:1b:83:30:1c:e8:00:33:05:b9:b6:e6:
a0:65:67:20:c7:2d:fc:ed:7f:e2:66:48:76:c1:db:32:7b:a7:
a8:be:85:6a:a0:2d:a8:fb:47:cd:e8:d7:56:cc:40:59:5c:78:
ea:0f:94:37:c8:4e:bd:51:a5:1a:72:e4:06:05:49:72:e1:49:
7d:fd:93:99:8e:b4:8e:3b:bb:0c:7e:ba:87:37:79:b3:d5:92:
64:92:e2:91:79:75:ba:cd:21:c6:96:ca:b9:23:67:15:24:a1:
3f:a0:c0:5d:af:24:0c:96:7c:c7:4d:56:73:ff:66:ab:4c:65:
ab:d7:95:5c:0c:b3:dc:80:5a:c2:d0:c9:8c:65:3f:9f:41:14:
cb:9e:67:ae:01:9e:39:59:46:ff:ab:ee:61:16:de:df:87:2f:
a5:43:37:ed:7b:ae:c9:10:d5:76:7c:9b:af:3c:06:19:bd:9e:
d0:3b:6c:76:9a:ff:41:f5:0f:8b:b7:36:72:db:ab:1f:75:db:
30:ee:48:7a:36:7c:12:71:3b:63:e2:41:22:bf:56:b0:a0:35:
c1:9e:e1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:59:31 2025 by rpki-client