Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jq328bVsQi3BnKGDon_hQjhcNek.roa
File: jq328bVsQi3BnKGDon_hQjhcNek.roa (raw, json)
Hash identifier: 2MUqNOvhG7w3gsK/83cvMDTXHBmWkyvQdDlAKT57h/4=
Subject key identifier: 8E:AD:F6:F1:B5:6C:42:2D:C1:9C:A1:83:A2:7F:E1:42:38:5C:35:E9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC5976CEE11A28F27B20285B07BB7C211
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jq328bVsQi3BnKGDon_hQjhcNek.roa
Signing time: Sun 12 Nov 2023 22:11:57 +0000
ROA not before: Sun 12 Nov 2023 22:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c5:97:6c:ee:11:a2:8f:27:b2:02:85:b0:7b:b7:c2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 22:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8eadf6f1b56c422dc19ca183a27fe142385c35e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:79:93:d8:d7:aa:4e:29:78:51:0a:01:77:
cf:07:29:55:d2:40:0b:93:7e:52:e0:ae:e9:12:86:
c6:3b:42:3d:9c:16:dc:04:8b:b7:ec:56:fb:e0:5f:
d3:8c:36:fe:0b:03:29:a9:2f:40:58:c8:8d:1e:a3:
c2:02:ec:5e:92:1f:ad:38:1f:01:51:61:3f:a1:73:
38:f5:63:59:f0:43:3d:80:86:37:92:98:d8:bc:ce:
fd:70:08:37:70:69:b0:a4:f4:da:d8:ae:c1:ff:14:
b5:a2:01:02:a2:5f:6d:ce:60:b8:aa:8f:e7:36:6e:
16:a7:3e:3b:47:24:4b:db:5c:bf:de:e0:d3:76:c3:
f9:bb:fa:b5:91:f1:d5:f0:88:fe:2b:5b:a2:24:af:
bb:1a:46:c4:0c:b5:7c:27:87:8f:06:e3:5e:05:76:
14:20:a1:49:ec:36:18:a4:40:5d:ef:fb:75:63:65:
e5:b9:63:9f:5f:31:70:c6:41:92:6a:4e:f4:ea:67:
f1:da:59:01:ef:9d:9c:f1:af:f6:de:58:e7:93:bc:
fc:22:31:94:cb:5c:86:1f:65:73:11:5b:6b:41:7f:
aa:43:ca:e4:30:e6:e2:19:fb:3d:7b:13:dd:c1:96:
df:4d:cd:1d:30:b6:40:d6:a4:c0:97:be:29:1a:89:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AD:F6:F1:B5:6C:42:2D:C1:9C:A1:83:A2:7F:E1:42:38:5C:35:E9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jq328bVsQi3BnKGDon_hQjhcNek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ce:1f:b5:b5:f9:2f:28:21:74:7c:db:97:90:45:5b:b3:84:96:
d9:f7:88:67:80:57:2d:b4:1e:19:c9:fd:95:a3:c3:09:f2:d9:
d4:0a:d2:98:6c:1b:b0:97:7f:32:49:fc:87:61:71:23:7c:e3:
7a:d3:5b:81:7d:d7:53:80:a7:1f:39:85:b8:1b:ce:6e:ed:b3:
8f:a7:83:ea:6c:84:f2:c7:79:d1:f1:1f:1c:ec:4b:e4:00:00:
05:5a:7f:2d:63:98:25:fa:6d:61:38:78:38:a2:66:1b:f9:28:
81:ed:6b:fc:0a:a9:e2:99:08:11:a1:95:3d:e3:7f:6d:e7:03:
20:6a:a0:13:26:b0:f0:3c:d3:42:80:07:0c:bd:34:dc:46:54:
82:77:b8:8d:0b:04:b8:02:ba:fe:13:aa:ae:d9:a7:88:dd:47:
b1:05:fa:ea:f7:8c:3c:f2:8d:0c:25:6a:8d:e7:47:c6:6d:08:
94:05:61:6c:77:ef:52:30:a0:1c:de:fc:37:83:3f:e4:51:51:
e0:75:07:8c:03:6e:1f:55:fc:91:6f:ef:08:c9:ab:78:d2:ea:
21:42:c2:c0:e1:6f:61:fc:d3:f4:c4:3b:ac:58:3a:d7:34:85:
e6:2d:11:4e:9b:53:4b:44:bc:94:1e:98:a3:8a:00:a3:9f:d4:
e2:b7:62:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:58:22 2025 by rpki-client