Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jbyw18Mre_LdFRoAeHuLa2Q4KMk.roa
File: jbyw18Mre_LdFRoAeHuLa2Q4KMk.roa (raw, json)
Hash identifier: 8l0o9+/agSUgazGKRRR1ysfkKhXQg/4BUbe930ybUhI=
Subject key identifier: 8D:BC:B0:D7:C3:2B:7B:F2:DD:15:1A:00:78:7B:8B:6B:64:38:28:C9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7FD6661821B0E5EFBCBE12E9CAF86FDC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jbyw18Mre_LdFRoAeHuLa2Q4KMk.roa
Signing time: Tue 19 Dec 2023 02:10:06 +0000
ROA not before: Tue 19 Dec 2023 02:10:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7f:d6:66:18:21:b0:e5:ef:bc:be:12:e9:ca:f8:6f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 19 02:10:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dbcb0d7c32b7bf2dd151a00787b8b6b643828c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:91:a5:dd:b3:f5:65:8e:63:8e:13:44:3d:
bc:a5:fd:79:06:64:81:23:eb:ba:9f:06:09:5e:63:
5d:6d:30:88:e6:6e:3e:df:05:29:6b:eb:be:22:33:
03:89:10:80:21:58:4f:0b:3a:6d:a8:a9:41:eb:10:
e0:8d:b3:eb:08:df:04:46:65:3e:b2:21:9a:7f:ce:
f0:b1:a1:e2:86:b3:ce:5a:e7:ff:a6:3f:cd:7b:f0:
d1:d6:91:ef:5e:29:2f:ff:48:41:16:f0:f5:49:6a:
2b:e8:e1:4e:bf:45:74:06:cb:49:2d:f2:15:3c:3a:
49:18:f9:40:54:5f:54:a6:a9:18:ca:cc:c4:94:d0:
35:c6:a5:5b:ce:ef:38:4b:2c:eb:f4:e8:1f:51:5e:
61:9d:eb:c1:5a:e4:5d:9c:23:12:51:a1:3e:7d:4d:
0a:5b:aa:52:46:35:37:e8:d4:a4:d0:6c:bd:ad:8a:
0c:b9:8e:92:1a:73:29:b8:e6:25:9a:7c:d5:c0:2b:
f9:3f:ce:e9:84:29:6a:8c:2b:10:5f:07:ae:f6:df:
f7:35:55:a6:db:27:d3:d8:a6:a0:cd:ec:2a:94:17:
53:85:a1:e5:6f:de:fc:46:fa:4a:33:1d:f8:42:60:
ab:8c:80:cf:a1:12:88:a5:77:7d:39:0b:b3:65:b2:
dc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BC:B0:D7:C3:2B:7B:F2:DD:15:1A:00:78:7B:8B:6B:64:38:28:C9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jbyw18Mre_LdFRoAeHuLa2Q4KMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:3b:53:31:e2:e9:3c:45:7a:b6:01:45:83:5b:bc:f7:6c:a2:
9b:48:26:cd:00:7c:49:d7:cb:56:31:fe:5d:b6:8c:3e:0a:88:
b0:de:d6:fe:ba:2c:38:71:a9:c1:39:5c:c4:a2:95:1a:01:a1:
be:a7:8d:68:a8:78:08:52:ee:3b:b0:b4:2e:b0:33:0e:28:f1:
f7:ab:76:98:e7:08:4f:94:fb:03:c7:a3:b9:a7:9f:17:e7:98:
d8:90:dc:48:f6:47:ca:65:a7:6a:e8:c4:c2:94:fa:98:75:55:
73:27:7e:c6:61:1c:45:79:43:d0:f8:92:aa:ee:3c:67:e0:d9:
af:38:4c:e9:c2:d0:27:bc:30:7b:e1:4c:c5:a7:f1:4f:60:85:
31:1e:fa:45:d1:62:e8:72:4a:35:ef:10:70:5c:51:a6:80:d2:
5c:8f:26:ab:db:96:15:38:c2:e1:c9:84:f0:8e:81:72:21:75:
7f:20:50:54:40:02:17:90:48:a8:fc:73:cf:4d:95:3f:95:94:
f3:48:ab:05:9b:34:ad:ad:9e:07:93:42:31:4d:b4:d6:97:28:
7f:e1:1b:53:b6:b1:67:b2:1c:b6:ee:ff:47:e8:0a:5a:fd:c3:
76:7b:6c:01:83:c5:b8:da:e0:5f:1f:e8:da:7f:30:8c:0b:ec:
5b:ad:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:17:16 2025 by rpki-client