Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lPJy9YAAKQAeWFAOwYd_INmuOd8.roa
File: lPJy9YAAKQAeWFAOwYd_INmuOd8.roa (raw, json)
Hash identifier: V7tI8VWViUb14Nhj1oH4YlXAsGqrsEiI8V2KrODvg/E=
Subject key identifier: 94:F2:72:F5:80:00:29:00:1E:58:50:0E:C1:87:7F:20:D9:AE:39:DF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4E77281FC0506F98815981B4775C3085
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lPJy9YAAKQAeWFAOwYd_INmuOd8.roa
Signing time: Sat 09 Dec 2023 12:04:41 +0000
ROA not before: Sat 09 Dec 2023 12:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:4e76:ab96/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4e:77:28:1f:c0:50:6f:98:81:59:81:b4:77:5c:30:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 12:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94f272f5800029001e58500ec1877f20d9ae39df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1d:22:93:3f:10:b9:dc:d8:4e:e7:84:ef:d9:
78:a2:3c:20:8d:94:70:28:35:49:55:dd:45:6d:6e:
a0:31:89:d3:88:98:76:8b:46:b4:73:57:ff:69:78:
8f:b4:65:86:8b:02:0b:69:57:57:f2:ff:2d:10:23:
3b:66:2e:fd:f3:bd:51:d2:76:52:4b:3e:fd:02:1d:
52:a1:b0:d9:59:b5:9c:82:32:ae:93:9d:af:91:0b:
47:0e:da:9b:06:17:90:0f:b8:b7:d5:69:8e:3a:6a:
79:ad:12:bb:67:c7:74:ae:a1:37:12:16:70:aa:af:
37:92:c9:e6:5b:61:42:80:e0:d3:89:16:de:13:83:
6f:e4:2e:27:4e:1f:b8:64:f8:3f:68:0e:cf:ba:6e:
22:2b:28:be:84:b0:3c:4b:b7:d4:80:fc:2b:4d:b3:
0a:45:d7:71:9a:9e:f3:de:11:54:ea:97:81:aa:0f:
d1:55:29:0c:39:09:5a:17:fe:6d:a5:f5:a9:c9:5d:
62:ad:fb:e5:24:b3:06:25:51:63:4b:a4:ba:1c:cc:
57:ca:4f:0e:1e:40:8c:25:02:04:35:58:aa:60:44:
ff:49:a7:67:85:56:1b:b3:87:27:58:cb:c4:f7:09:
f6:2b:4f:1f:f2:4f:62:97:81:ab:fe:23:ad:a8:97:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F2:72:F5:80:00:29:00:1E:58:50:0E:C1:87:7F:20:D9:AE:39:DF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lPJy9YAAKQAeWFAOwYd_INmuOd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:41:60:46:7a:02:a0:be:ef:f1:84:64:47:18:f3:76:90:7f:
45:33:17:74:fb:91:a8:af:92:ae:e4:cf:00:66:66:4e:4d:7c:
c2:07:65:0a:2e:ae:08:f3:0e:c1:3e:82:d6:36:b3:b7:5e:45:
ac:fb:18:40:59:e3:43:85:f8:36:ce:59:bd:55:56:e4:2e:a8:
e8:ff:64:7b:ec:0f:9d:ba:2d:06:6a:7f:94:75:ca:30:99:06:
1b:c6:b1:f2:56:c4:49:f3:6b:c8:6c:54:36:78:81:45:d4:da:
b1:25:66:06:02:99:3d:d6:b1:a1:59:25:2f:bb:be:97:dd:21:
f0:06:f1:06:fc:c3:ae:e0:66:c0:6e:51:a1:6d:12:bd:6e:42:
76:f6:9e:25:d3:ca:64:50:98:fe:71:7c:83:55:04:8f:03:b5:
61:90:2d:e7:49:7c:41:31:0a:3b:38:ae:16:fb:33:6c:02:8a:
ef:05:4e:df:b8:ba:01:2f:f6:49:79:00:5d:42:49:08:0c:10:
29:5c:cc:e6:e6:74:d8:79:bc:b0:ae:dd:75:da:39:21:df:3a:
12:dd:a9:df:7a:ab:5b:e3:d0:b6:a6:ef:36:75:4a:f8:c6:8a:
2b:20:b1:9d:f4:b1:38:77:fa:e9:af:4a:11:95:32:7a:a7:ea:
98:6b:8a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:09:42 2025 by rpki-client