Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8yM76a6jRKtTE5By3LWYnSfA6Sg.roa
File: 8yM76a6jRKtTE5By3LWYnSfA6Sg.roa (raw, json)
Hash identifier: u9GQ2ie0XPxoWVwLk/L1s4fRNf4hCV4OZcz5+I4q694=
Subject key identifier: F3:23:3B:E9:AE:A3:44:AB:53:13:90:72:DC:B5:98:9D:27:C0:E9:28
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF2DF491FA9AE39DE07C5624700D93B2C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8yM76a6jRKtTE5By3LWYnSfA6Sg.roa
Signing time: Tue 21 Nov 2023 17:13:21 +0000
ROA not before: Tue 21 Nov 2023 17:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:df:49:1f:a9:ae:39:de:07:c5:62:47:00:d9:3b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 17:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3233be9aea344ab53139072dcb5989d27c0e928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:24:6d:70:38:b8:c1:95:af:da:41:64:8d:bb:
14:c1:6f:a5:3e:78:e1:71:5a:74:9f:d2:3a:1a:a3:
6d:a8:09:00:6b:a0:04:5b:18:4e:7a:49:0e:b1:25:
f4:2c:bf:9d:da:64:c9:cd:95:6a:c0:b7:c9:c6:6d:
c9:16:01:bf:74:a3:60:6f:41:6e:6b:d1:b0:a5:d0:
0c:d4:a9:02:28:b1:03:10:f3:04:af:27:b9:40:ff:
c7:24:84:07:47:52:f8:91:b9:c8:37:82:98:eb:0e:
96:3e:b3:b5:c4:08:3b:65:37:5c:43:0f:51:cb:2a:
58:09:78:a5:2d:c2:79:1f:3f:c5:ba:32:4a:9e:c8:
18:15:21:92:a6:66:ab:cb:33:a2:f2:8d:dc:24:0b:
d7:65:1f:6c:16:d6:cc:3a:b7:60:38:a7:8a:c2:c4:
89:bd:bf:4e:76:1d:9d:96:72:02:ec:53:6b:66:af:
6e:0c:b9:32:68:d0:9f:f2:57:4d:f3:ed:fb:5f:75:
a9:97:33:95:00:56:40:57:a3:bf:38:01:80:ac:a3:
84:84:48:31:39:41:d5:ca:ed:fc:40:66:8e:ee:4d:
bd:61:b0:93:18:01:32:69:77:34:b7:fb:4d:f4:01:
a6:b1:53:de:82:dd:fd:e3:66:43:95:6e:4c:d7:c8:
d9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:23:3B:E9:AE:A3:44:AB:53:13:90:72:DC:B5:98:9D:27:C0:E9:28
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8yM76a6jRKtTE5By3LWYnSfA6Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:6a:6f:bf:c6:62:0e:2a:a0:fe:40:1f:e4:fd:85:ea:1d:37:
8b:d3:96:1f:bd:17:e7:20:db:02:e4:01:92:20:6f:5e:e6:84:
28:aa:0d:9b:8f:18:30:76:91:ae:77:a5:cb:85:2a:be:40:4d:
68:f8:21:4c:d2:d4:19:02:f6:fa:1d:a4:40:d4:2f:31:5f:8c:
81:32:8d:af:f8:50:b4:3e:ce:ce:bd:d8:3d:38:64:5d:74:ed:
03:0d:4c:04:2a:6b:b6:28:14:45:0b:56:70:f3:22:a8:86:d7:
d0:df:26:4d:1d:ca:0e:29:b5:50:3e:75:1f:6c:73:a7:aa:91:
fb:e4:ba:88:eb:cc:17:19:46:ea:30:5f:ac:56:bd:fa:f4:c2:
3d:2f:87:f6:0b:59:4c:82:f1:14:71:5a:81:30:72:54:5b:a2:
47:a5:ed:c2:f9:98:ef:e5:d1:51:b1:b8:ef:5b:5e:fa:48:13:
74:34:d2:ef:ce:03:90:ec:6d:ed:65:35:82:8b:8d:1f:8b:08:
77:a4:a9:6e:0d:3b:ad:a0:21:e7:11:f6:3d:23:0f:1a:3c:f9:
4b:cd:10:e5:c9:44:ec:f9:8e:1b:4c:fa:20:1e:15:80:ad:3b:
8a:8c:02:eb:38:7a:28:d5:ef:1a:ed:26:7d:55:c4:5b:d7:fb:
29:b9:3a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:02:25 2025 by rpki-client