Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jyRo4xFtQiJptUe3Zw7m_2mpiCM.roa
File: jyRo4xFtQiJptUe3Zw7m_2mpiCM.roa (raw, json)
Hash identifier: F7lN3oIgC2ewTCSeuVe/qLvAFklY/f/W+kHNZqpFNsk=
Subject key identifier: 8F:24:68:E3:11:6D:42:22:69:B5:47:B7:67:0E:E6:FF:69:A9:88:23
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C141A5EF9D0C54B3144EB1C83F1CDC1BB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jyRo4xFtQiJptUe3Zw7m_2mpiCM.roa
Signing time: Tue 28 Nov 2023 04:05:21 +0000
ROA not before: Tue 28 Nov 2023 04:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:1419:9fa3/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:14:1a:5e:f9:d0:c5:4b:31:44:eb:1c:83:f1:cd:c1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 04:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f2468e3116d422269b547b7670ee6ff69a98823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:bb:05:16:e2:6e:22:f4:b7:7a:35:c4:2a:
a6:c9:48:dd:37:ea:59:02:12:45:c0:d6:44:50:2f:
ff:10:8d:03:4e:05:2f:c7:71:0a:76:8e:bd:ea:5b:
f7:a3:ea:5a:ba:97:cc:f8:68:ed:e5:ef:04:3b:61:
63:0f:ce:65:11:a6:d9:09:16:77:bd:22:78:cf:3c:
93:c6:f3:26:ab:98:ba:51:6c:ca:f4:45:cb:d4:44:
12:43:2e:c7:8a:d5:a8:86:df:96:c0:7b:4d:18:f4:
1f:bb:12:e1:c2:ed:b1:e4:b3:ff:0a:c1:50:6e:b5:
44:f2:02:f4:d6:d1:da:8f:0f:b1:df:d6:a8:c0:09:
01:cf:22:e9:ba:19:f6:c1:18:47:56:ba:42:48:35:
8e:f4:8f:0b:cf:37:41:74:ba:c4:7c:88:8d:29:8c:
5c:19:57:93:56:f4:e1:00:84:31:67:eb:af:42:30:
18:dd:07:cf:75:ef:88:96:dc:a2:17:53:3b:00:37:
68:3d:f8:e6:bb:60:ca:36:09:d9:62:d4:e1:b2:07:
7f:be:f2:f1:08:24:be:a7:e7:83:8d:19:2d:11:f4:
eb:e2:da:34:4b:19:62:b3:26:cb:af:f7:fa:37:3f:
45:ee:a7:f4:65:fb:1b:09:41:c5:92:87:bb:c4:c6:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:24:68:E3:11:6D:42:22:69:B5:47:B7:67:0E:E6:FF:69:A9:88:23
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jyRo4xFtQiJptUe3Zw7m_2mpiCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:98:09:d8:92:fe:b1:5e:f5:d2:24:f7:9b:b7:e6:62:23:25:
81:5e:2f:9f:ee:14:99:9f:81:e1:67:2d:69:b6:9b:2e:0d:86:
50:b9:3f:e0:01:00:aa:a4:72:be:e3:35:9d:2c:c5:b1:a0:75:
4b:21:ce:d1:7f:9d:92:e4:66:8c:29:cb:c8:cd:09:83:06:32:
f5:12:15:39:99:c0:0b:36:79:aa:d3:4a:c0:b1:49:91:bf:b3:
46:7c:c9:fc:0e:a6:ee:52:0e:f2:cc:8a:14:b9:a5:91:af:6a:
4f:23:22:d0:fa:f0:2f:66:97:d2:af:38:45:da:e3:54:95:0c:
f2:18:9d:60:17:cf:e4:19:bc:9e:31:39:d9:67:69:71:64:60:
a4:3b:72:c5:28:db:13:5c:00:69:b9:92:ef:ed:eb:a6:bf:4e:
df:06:6c:27:0c:fb:6f:ab:f6:0c:d0:33:e4:30:fe:c2:3f:e4:
ea:d1:a4:02:fc:d4:9e:a5:d0:a2:d7:7a:68:9b:d1:31:fb:00:
1a:01:1e:dc:fc:7a:e9:0f:3d:5b:9c:5b:fb:c1:14:2c:c6:37:
2a:39:ae:22:59:9f:c9:88:c7:d0:d4:d6:6d:76:69:11:83:82:
51:d2:94:65:c9:5d:54:97:80:50:3b:56:f1:05:1e:08:81:8e:
b0:47:17:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:13 2025 by rpki-client