Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m9hkW-OjgoYO_y8HCp4op2tbE0A.roa
File: m9hkW-OjgoYO_y8HCp4op2tbE0A.roa (raw, json)
Hash identifier: Apiwv3mrpL7X63f6iQOgMnTO41G90vuQzVzEIADAjhk=
Subject key identifier: 9B:D8:64:5B:E3:A3:82:86:0E:FF:2F:07:0A:9E:28:A7:6B:5B:13:40
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B642BD572D7F2C987733ECE1334C01904
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m9hkW-OjgoYO_y8HCp4op2tbE0A.roa
Signing time: Wed 25 Oct 2023 00:11:16 +0000
ROA not before: Wed 25 Oct 2023 00:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:64:2b:d5:72:d7:f2:c9:87:73:3e:ce:13:34:c0:19:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 25 00:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bd8645be3a382860eff2f070a9e28a76b5b1340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:9d:23:7d:14:5d:56:40:fb:b9:b9:00:2e:
34:b9:9c:59:ea:24:f5:fb:d7:f0:50:f5:cd:08:bc:
8a:0f:53:43:22:4b:4f:37:ff:be:74:61:79:d3:29:
8a:57:79:c2:1d:21:fd:49:90:d0:27:a0:a9:a2:6e:
66:59:6c:bd:e1:bc:70:95:b9:32:89:8d:f7:77:29:
71:e2:9f:90:79:6c:bc:5a:6a:59:1b:d0:c9:40:88:
f8:72:24:05:0f:52:c3:02:f9:95:40:0a:2b:e1:80:
e4:28:db:d3:67:0e:3e:15:14:65:9f:58:c8:fa:9e:
6b:ec:bf:6c:77:1b:30:ec:94:d0:9d:24:c3:ba:b2:
75:fd:9d:ca:76:e7:27:d5:09:9f:0b:cb:02:76:87:
01:e0:75:f4:3e:00:18:a0:09:83:6c:97:2a:ca:20:
b6:33:d2:1b:2a:8f:fc:70:14:c3:e3:ad:9f:6a:66:
82:68:e6:46:7a:03:89:e6:8c:07:9b:f0:c8:f2:5b:
ba:1a:59:4f:fc:cb:ed:fc:d9:98:ee:bc:dd:f1:a9:
1d:de:3f:22:6f:26:33:02:74:ee:e4:41:52:cf:17:
36:42:18:b3:3e:7e:81:25:6d:99:66:3c:86:a5:9c:
ee:66:4e:1d:1e:2d:0d:33:6b:89:0e:2f:6e:ce:d5:
55:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D8:64:5B:E3:A3:82:86:0E:FF:2F:07:0A:9E:28:A7:6B:5B:13:40
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m9hkW-OjgoYO_y8HCp4op2tbE0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:4a:b0:26:e5:5d:f1:0c:b9:0b:3c:7f:20:1f:c3:46:55:62:
e5:72:11:60:4c:0d:bd:74:be:cb:2b:40:ea:48:5a:5d:9d:ba:
4c:0c:aa:20:14:21:85:60:50:dc:5f:62:dd:16:00:5c:73:be:
b7:d5:f4:e9:a4:17:1b:80:dc:91:40:7c:4c:9b:d1:11:32:27:
ee:94:2f:42:3d:02:84:2e:ab:bd:8b:c2:89:1d:fa:dc:b6:a2:
e9:cc:e6:23:53:1a:47:17:f6:05:63:bf:c0:9a:23:c7:3c:dc:
7f:a6:2d:fb:18:95:93:a1:38:f4:78:54:c6:43:c1:1d:4d:c3:
e7:7a:60:50:3b:9a:03:bc:37:26:4b:38:95:eb:cb:f0:9d:3f:
98:89:8b:ce:fe:d7:b3:87:f4:b7:18:70:ae:77:9f:58:f4:ae:
ea:a1:7a:85:d3:b5:b4:a6:02:04:f3:2e:11:8f:89:93:aa:b7:
9e:3f:a6:5d:9a:8a:e5:0f:c3:44:33:24:12:06:c6:70:15:c3:
62:dc:9e:00:74:8a:30:78:b9:b5:41:6a:dd:d9:e5:dc:f7:cd:
dd:5a:1c:c0:42:28:6a:f2:83:ee:d3:63:c2:db:5f:fb:e4:79:
41:b9:05:58:ce:52:13:82:99:12:ef:1d:d8:c7:87:e8:dd:be:
97:78:b1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:10:46 2025 by rpki-client