Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/n8ws0LyT5ZpV3UuER3hcrMjnb4Y.roa
File: n8ws0LyT5ZpV3UuER3hcrMjnb4Y.roa (raw, json)
Hash identifier: e8ZoeKRdmti0iUUzZDAvBba2nFlrtvEqoVpQwKdqtfM=
Subject key identifier: 9F:CC:2C:D0:BC:93:E5:9A:55:DD:4B:84:47:78:5C:AC:C8:E7:6F:86
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1A6485E5CB0C521BE91373417E840C09
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/n8ws0LyT5ZpV3UuER3hcrMjnb4Y.roa
Signing time: Tue 10 Oct 2023 16:21:17 +0000
ROA not before: Tue 10 Oct 2023 16:21:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1a:64:85:e5:cb:0c:52:1b:e9:13:73:41:7e:84:0c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 16:21:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fcc2cd0bc93e59a55dd4b8447785cacc8e76f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f8:5d:2a:70:9f:84:2d:c1:c9:c2:15:2b:29:
34:26:df:cf:49:05:13:0a:ca:e5:0f:57:73:4d:81:
30:6a:84:75:2e:f9:3a:e7:8a:12:d1:69:21:33:7e:
e6:5b:24:2e:33:c4:5f:87:5e:45:3a:6d:f1:63:f7:
9a:bd:6a:29:4a:c7:67:2f:7a:9e:27:2c:94:c7:f9:
b1:1d:c5:2b:3f:5c:a3:bd:02:3b:e1:0d:09:4c:00:
4f:8c:07:be:8e:86:98:21:2e:34:50:fe:88:06:18:
51:71:8b:42:2d:5a:14:7b:9f:b9:42:88:55:4b:c7:
a1:8e:aa:bd:53:bb:23:27:6f:65:b0:72:8d:8c:e6:
40:7b:83:81:3b:44:1d:2e:b5:8b:0e:d6:d1:a5:08:
96:97:e3:a8:af:64:12:0e:e6:7f:7e:04:b4:6e:08:
09:ee:c2:bb:d0:d5:d7:c1:eb:28:dc:6a:e7:58:cb:
0f:74:36:00:2b:8e:b7:48:6b:67:9b:98:80:3e:f2:
1f:4e:4f:34:53:9d:65:c5:59:e7:81:2b:f6:b4:d0:
4d:99:fe:03:1a:1b:d2:5a:f0:79:3d:cd:18:fe:01:
1d:f8:4d:33:8a:56:c4:03:3f:82:97:16:ce:de:de:
7a:97:da:b5:01:bb:d6:b2:7e:66:a9:d2:3c:99:c0:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CC:2C:D0:BC:93:E5:9A:55:DD:4B:84:47:78:5C:AC:C8:E7:6F:86
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/n8ws0LyT5ZpV3UuER3hcrMjnb4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:1d:a8:89:fd:dd:91:f9:3d:ad:e6:44:af:b0:94:2d:b7:3a:
c6:2c:51:86:de:72:0a:8a:1e:eb:e5:72:c6:eb:e1:d8:0c:ec:
4e:7d:a6:80:da:d5:0f:02:16:25:54:21:d3:cf:d6:cc:49:a9:
a5:70:60:0c:cf:07:a3:69:c2:30:36:92:0a:22:9e:7c:af:7b:
c2:87:de:bc:94:82:16:33:47:06:4a:c9:41:f9:aa:b5:67:01:
9f:5e:ed:04:6b:8a:ee:68:32:72:25:56:6b:ac:32:40:24:99:
2c:82:d9:9e:ef:54:a8:c4:c1:5b:78:b2:86:cc:97:9e:41:1d:
ec:d9:5d:90:2e:6e:87:86:f9:61:a8:8a:49:08:f6:4b:80:a3:
11:b4:9a:01:ce:9d:18:d3:f2:c3:58:4d:1c:4c:5b:c1:94:dd:
27:ea:73:29:d0:bc:8c:97:fd:1b:50:40:05:dc:94:45:99:27:
6d:05:1e:f2:45:72:e2:47:c1:80:45:93:80:c5:26:68:42:fc:
9f:fa:dd:c6:e0:25:6e:ba:23:34:97:0e:67:1f:67:e1:93:d2:
35:5b:87:92:5c:32:3b:1c:91:5c:29:46:79:60:fc:58:cc:06:
02:1c:e4:70:2e:4a:89:08:84:32:80:a2:22:03:a8:f0:64:65:
a2:51:ea:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:28:31 2025 by rpki-client