Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jSv466FErB687X94FQX2sNvO1A4.roa
File: jSv466FErB687X94FQX2sNvO1A4.roa (raw, json)
Hash identifier: Nrqej4slijbaxElE9wxXKCJUBq1JykDxrjTmkimQNNE=
Subject key identifier: 8D:2B:F8:EB:A1:44:AC:1E:BC:ED:7F:78:15:05:F6:B0:DB:CE:D4:0E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C10EB8DD34EECF522559C1B4AD736CB48
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jSv466FErB687X94FQX2sNvO1A4.roa
Signing time: Mon 27 Nov 2023 13:15:21 +0000
ROA not before: Mon 27 Nov 2023 13:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:10:eb:8d:d3:4e:ec:f5:22:55:9c:1b:4a:d7:36:cb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 13:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d2bf8eba144ac1ebced7f781505f6b0dbced40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:c9:57:77:12:d9:83:11:af:89:69:66:f6:
1e:f8:bf:d0:f9:07:f1:79:6b:29:75:fa:e6:e1:df:
dd:fa:0f:fb:54:51:bc:40:35:ca:ee:b8:2c:90:99:
41:ea:1f:90:58:ea:52:59:44:5c:f2:50:5f:24:d3:
7d:ec:ee:a2:78:b4:72:e8:a6:d3:31:f8:cb:34:4d:
aa:a2:26:57:6c:8f:aa:01:7c:02:6f:00:ef:e9:0d:
f7:07:c1:fc:a0:03:b3:17:cd:fe:ea:06:89:18:7b:
21:ce:0c:fa:10:df:a1:79:9d:69:19:86:14:e8:05:
57:d9:b4:2e:76:a0:83:2a:db:24:a7:ea:aa:05:d8:
64:2b:1d:ae:3a:cf:8a:53:6b:be:7f:45:f4:f3:ea:
5f:49:34:a6:a6:77:76:03:2f:3d:bb:d5:40:fa:ad:
8a:36:d8:df:c4:d7:a1:14:a6:14:c2:d9:0d:73:4f:
fa:d5:8b:d9:62:61:99:49:87:b5:08:f1:4c:d1:d8:
2b:83:cc:7f:2c:d5:b4:a3:4e:ae:2e:c2:f4:3d:e5:
3b:e0:7b:25:52:f2:17:49:eb:dd:01:bf:f5:d9:49:
cd:ff:79:6a:fd:64:9e:0a:d6:5b:b2:b7:47:74:d7:
32:5b:b1:2a:e1:0f:18:26:b8:41:0e:a0:73:79:51:
44:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2B:F8:EB:A1:44:AC:1E:BC:ED:7F:78:15:05:F6:B0:DB:CE:D4:0E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jSv466FErB687X94FQX2sNvO1A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
be:06:ba:6d:74:2f:6b:3f:4b:12:aa:b7:d0:e0:8c:c3:07:8a:
31:61:c9:c6:e3:e2:6e:d6:50:3c:20:5c:e3:70:09:74:90:fc:
fb:6a:2e:4a:99:74:b9:f5:6d:2e:05:3f:d5:0f:ec:a3:b7:ad:
07:4c:30:55:96:1b:2d:f6:57:33:69:94:aa:00:23:d1:d4:c2:
78:ee:dc:96:63:3b:3c:b0:d9:fd:7d:90:9d:32:24:10:a7:f4:
90:7e:f4:4b:5d:6a:cc:67:83:07:10:a5:82:ac:a9:99:e3:c6:
37:e7:1c:9c:80:b5:4c:19:b8:14:42:13:a6:4c:02:45:ed:fb:
1a:43:bc:ba:cf:99:3c:e8:87:3e:cb:61:bc:f5:d1:03:3a:fd:
8e:fa:e6:3e:fb:0c:91:2c:1f:33:5e:f3:53:8a:84:2d:7e:e7:
7f:7a:34:c0:18:92:ab:05:a5:e2:81:69:08:c7:4f:6b:e9:06:
26:4e:6b:96:dd:aa:7b:12:c1:91:74:c3:b1:df:a6:9c:3b:7f:
5e:04:46:f3:6a:9e:8f:e5:25:2a:1e:58:dd:20:ad:bd:5a:95:
06:c1:da:70:1f:3f:8a:94:0c:73:c5:54:3c:7c:06:dd:4b:32:
5d:a3:e5:9a:44:cc:54:85:00:25:73:75:c1:35:e4:50:be:00:
eb:0b:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:46:33 2025 by rpki-client