Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kJjumyYaHV9xO0oLeLUs_RJHbbI.roa
File: kJjumyYaHV9xO0oLeLUs_RJHbbI.roa (raw, json)
Hash identifier: 0Pn8BtBBR+K2MKTb6XJ0ZB0JHHRjVBBQqOryNcPtGQw=
Subject key identifier: 90:98:EE:9B:26:1A:1D:5F:71:3B:4A:0B:78:B5:2C:FD:12:47:6D:B2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5BCCA0DB06EA764473009622C809BC15
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kJjumyYaHV9xO0oLeLUs_RJHbbI.roa
Signing time: Tue 12 Dec 2023 02:13:06 +0000
ROA not before: Tue 12 Dec 2023 02:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5b:cc:a0:db:06:ea:76:44:73:00:96:22:c8:09:bc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 02:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9098ee9b261a1d5f713b4a0b78b52cfd12476db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:ad:fd:99:98:0a:e7:b9:67:f3:09:84:fa:
f0:9d:72:4e:63:e8:bf:50:f4:d0:c2:bd:d3:9e:15:
31:51:38:93:73:e3:ba:af:2c:72:93:98:17:ac:d6:
73:81:0e:f6:f3:7a:de:c4:10:fa:b0:57:32:6f:e1:
fd:19:0a:5a:49:34:c2:16:3c:bb:37:c9:5f:55:d8:
e6:be:e3:fc:d9:88:d3:34:ad:8f:d6:a8:b8:67:83:
bf:4d:60:63:5f:ad:f4:cc:bc:96:6d:a2:c1:a9:1a:
c3:69:d0:c0:1a:79:48:c1:9c:36:ee:bc:f6:7e:c1:
9e:17:a6:c9:95:df:b7:0f:bb:b2:06:30:29:79:34:
50:01:a8:5b:13:8e:db:52:51:46:68:d2:ea:5c:85:
81:ef:6f:61:f3:ce:c0:5f:9d:69:05:a7:16:b5:3d:
84:99:0d:f3:c8:0f:fc:78:0b:63:cf:32:2d:01:e6:
8a:d4:64:5e:f0:ee:cb:0d:90:0d:65:8a:ba:79:50:
ae:c4:3e:9c:c9:75:5f:03:dd:7f:ee:3e:df:3e:b1:
4a:aa:b3:4e:c6:ee:4f:2e:f2:60:3c:72:52:2f:88:
38:f3:07:2a:b1:e9:a7:42:8f:44:79:48:41:a6:4a:
9c:b5:1f:21:c7:c3:69:20:ee:02:22:96:20:1d:de:
53:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:98:EE:9B:26:1A:1D:5F:71:3B:4A:0B:78:B5:2C:FD:12:47:6D:B2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kJjumyYaHV9xO0oLeLUs_RJHbbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d3:a3:00:4f:d6:d5:d9:7a:a9:e6:bf:02:5b:1c:40:19:1e:08:
34:d2:83:29:ae:dc:b1:c8:81:ff:64:4f:be:39:da:e9:e7:81:
f5:a3:37:78:92:8d:fc:2a:75:7a:40:e7:90:96:28:92:e2:cf:
cf:57:84:85:74:0f:e3:3e:45:24:c5:f3:17:41:64:67:ed:79:
3e:f8:e2:22:ef:7e:d7:a3:e0:89:ac:fc:e5:27:d5:30:0a:4b:
b0:7c:24:92:a6:6a:11:2a:9e:d4:d1:09:b3:0d:82:8f:78:e3:
5b:1d:ad:a5:f9:7f:ad:ee:e2:e6:0c:0d:84:2e:fb:21:76:fb:
db:37:91:df:0d:33:1f:05:2b:9a:ed:4c:91:4e:c7:4e:78:61:
ea:51:ed:1d:eb:31:3e:89:35:46:40:3f:ed:46:e9:ba:7b:ee:
62:58:9f:7f:d5:ab:1e:ca:80:4c:c3:6f:b4:dd:46:da:0a:e3:
b1:99:2f:85:bb:66:34:49:83:56:23:0f:81:55:97:60:cf:36:
f9:10:be:00:d8:ed:08:26:fe:c7:2a:e0:9f:46:4f:77:3d:65:
4a:36:de:f3:2a:4b:a3:a7:8a:97:e3:94:8a:2d:97:48:75:b7:
d0:8b:24:92:a9:0c:87:b8:4e:2b:be:66:c2:e1:d3:18:6c:a5:
82:fb:dc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:50:37 2025 by rpki-client