Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/r9ZXXlp0xuHhVZQc-Em3haklXME.roa
File: r9ZXXlp0xuHhVZQc-Em3haklXME.roa (raw, json)
Hash identifier: SKVJQTppoHFr2jPFDgL922IlDfbbHgi6IWQl0HOu0Uw=
Subject key identifier: AF:D6:57:5E:5A:74:C6:E1:E1:55:94:1C:F8:49:B7:85:A9:25:5C:C1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFA2E132C5034B5CD22D6EE3646DC506A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/r9ZXXlp0xuHhVZQc-Em3haklXME.roa
Signing time: Wed 04 Oct 2023 10:13:58 +0000
ROA not before: Wed 04 Oct 2023 10:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:2e:13:2c:50:34:b5:cd:22:d6:ee:36:46:dc:50:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 10:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afd6575e5a74c6e1e155941cf849b785a9255cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:64:c8:42:16:5d:59:03:1a:03:c7:9e:c5:
a9:3b:db:34:ac:71:f7:ab:61:b2:bc:c5:2c:b4:68:
db:d2:23:65:76:df:93:33:ec:63:27:e1:6c:52:8b:
4f:ab:7c:a4:bf:f0:de:6a:0e:7b:25:da:29:7e:00:
7d:80:bb:84:2f:ce:cc:01:39:01:80:96:2c:0f:16:
c2:3a:f9:c6:04:18:ed:9a:f9:3e:6c:d5:c7:03:de:
ae:c1:0d:8b:11:49:ec:ed:75:16:bf:a7:33:24:b3:
5b:aa:d7:d9:15:3a:83:5f:27:fd:f4:bf:b6:e6:40:
aa:c9:12:8f:53:49:7d:d4:15:a7:91:7c:8e:73:bd:
02:d3:22:a0:94:1c:1d:2b:4a:ed:d1:0d:23:69:7e:
ea:3d:ad:24:a9:80:a1:c6:cb:ef:0d:56:4b:dd:80:
e0:e6:21:e4:1c:c1:4a:11:ec:40:d0:b9:48:c8:ab:
95:36:7e:f2:9a:f7:68:05:6d:ab:5b:08:e9:7d:db:
1e:68:0a:39:e3:c3:07:91:27:e9:1e:24:22:79:a4:
c9:a8:fc:d8:82:69:ba:cf:31:c9:c5:5f:c4:ad:38:
d8:c6:03:5c:d7:3c:3b:64:fe:8e:85:f9:6d:10:1a:
04:71:80:40:a6:2f:40:09:7b:a8:26:9c:32:a1:4b:
8f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D6:57:5E:5A:74:C6:E1:E1:55:94:1C:F8:49:B7:85:A9:25:5C:C1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/r9ZXXlp0xuHhVZQc-Em3haklXME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:59:66:12:fe:56:a6:a7:9a:33:3f:75:91:83:50:3f:5e:e1:
03:27:ef:ed:c5:64:f6:56:88:94:51:e1:ca:28:fc:cd:33:ba:
80:22:dc:de:05:4f:75:d0:1c:cf:86:00:94:32:49:68:57:5a:
48:d7:33:68:90:a4:98:fc:28:65:4d:94:a0:a3:55:b6:f7:10:
d9:95:d0:71:f0:42:f8:26:26:4e:87:fe:6d:5a:9a:c9:1c:58:
44:12:d4:4f:b2:81:a6:7f:33:7b:f7:72:14:e1:40:56:34:cc:
36:e1:f2:56:c8:5f:15:8c:ed:e8:45:99:a0:c3:f0:2f:9f:39:
a7:01:79:5d:ec:6f:df:c2:95:09:5f:43:74:ae:51:d6:bf:d3:
2f:54:f5:2d:eb:a3:aa:ec:b1:1a:51:00:65:f3:a9:1c:9e:ed:
5a:65:a3:80:97:d0:0a:f8:4d:77:6f:29:5a:18:69:39:19:ed:
92:83:6a:65:c2:d0:4e:62:07:f8:82:cf:39:fe:8d:5f:79:c1:
f2:2d:f8:f6:45:f2:30:8f:c6:04:da:15:9e:2f:38:92:3e:c0:
22:7a:62:cc:14:09:de:a5:78:49:17:7e:b1:b2:cd:ed:ab:b4:
99:82:4e:17:d3:24:f8:02:da:40:aa:ce:78:0d:a8:c4:08:82:
e9:77:f5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:22 2025 by rpki-client