Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9-98SEkIg-ICEMINk3BKvRGmyKc.roa
File: 9-98SEkIg-ICEMINk3BKvRGmyKc.roa (raw, json)
Hash identifier: 4SnKFTSXENvQqIZBDLEVGKCB+4QlsZxg4TgAeQ9Pm0U=
Subject key identifier: F7:EF:7C:48:49:08:83:E2:02:10:C2:0D:93:70:4A:BD:11:A6:C8:A7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB811D1E65FBD6616EEAC0DF62A073EFB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9-98SEkIg-ICEMINk3BKvRGmyKc.roa
Signing time: Fri 10 Nov 2023 07:10:57 +0000
ROA not before: Fri 10 Nov 2023 07:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:11:d1:e6:5f:bd:66:16:ee:ac:0d:f6:2a:07:3e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 07:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7ef7c48490883e20210c20d93704abd11a6c8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:5e:11:fe:08:52:65:8d:26:c8:96:c6:e5:
10:a2:a2:4a:b7:59:ee:b4:b7:24:40:8d:51:86:a6:
94:be:b0:a3:b4:1b:2a:39:6d:b9:71:44:7a:f6:87:
78:09:68:c3:dc:99:1f:1b:93:44:20:c3:5f:0e:6c:
76:6a:d4:15:2e:0a:36:b5:e0:3c:e2:d8:d0:af:82:
33:b5:1f:08:5c:bb:0d:ee:d0:d4:b5:83:3f:d1:5f:
ba:3b:49:a6:8b:0e:72:d3:f0:a9:9c:33:da:6d:1f:
28:b7:27:d7:1b:6c:19:9f:aa:a9:44:e6:c7:31:56:
14:0c:fb:16:0a:01:c2:eb:90:ba:5c:1f:d4:98:fa:
8b:6f:68:5d:c3:87:96:59:2c:b6:3d:3f:fe:48:36:
56:81:ae:9f:cd:e3:b0:33:d2:2a:91:0c:77:17:bb:
86:13:1e:a6:f4:e1:26:58:d2:8d:1a:cc:81:d3:6b:
e5:73:32:4b:9c:65:3e:04:08:cc:e0:5e:89:db:f8:
f7:a7:08:97:25:2b:3b:5b:ec:3b:7d:10:61:a9:2c:
83:65:c1:35:00:1c:a3:dc:8c:63:1a:d1:4a:bc:ac:
e2:63:e6:61:59:e5:4e:b4:62:29:b1:6d:7e:c5:45:
af:09:27:36:a8:04:43:ac:ac:dc:9f:d7:9f:46:75:
ad:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EF:7C:48:49:08:83:E2:02:10:C2:0D:93:70:4A:BD:11:A6:C8:A7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9-98SEkIg-ICEMINk3BKvRGmyKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:50:f1:88:8c:56:5f:29:72:32:e9:30:b6:4a:0c:eb:16:1d:
77:5e:dc:61:01:ab:85:5d:b5:72:57:6e:4f:20:d4:d6:e8:f6:
6f:ed:96:82:6f:81:03:4b:d6:a9:a6:5d:95:75:c0:4d:5f:96:
17:a8:42:93:3b:a1:3e:75:96:7f:4b:5a:bf:83:30:8d:3e:75:
6d:fd:d0:f3:0c:c2:f1:33:7a:8a:c5:e3:41:de:15:94:40:59:
99:35:c1:7f:c7:db:f2:5c:2b:92:2b:98:ae:8d:40:7a:4c:d0:
fd:c5:33:d5:fb:bb:da:df:10:73:e0:5c:5b:43:f7:35:97:46:
6a:07:66:70:04:c9:19:d5:2f:b9:81:3f:f1:30:15:5d:cc:7f:
12:37:51:8d:37:3b:81:3a:30:76:1a:db:a1:a4:a6:84:96:ed:
53:86:75:8c:a2:4c:20:9a:c2:63:2e:7a:60:b2:4d:bb:75:09:
fc:51:d9:b3:ae:41:f3:1d:2a:b4:42:cf:d8:72:8d:fa:2a:10:
31:1e:0b:f4:68:09:46:fb:4f:41:c9:2b:15:6f:e4:37:eb:36:
e4:9c:ff:44:b4:e9:69:24:21:c8:03:eb:22:cc:68:3b:d8:46:
ea:17:8d:94:29:50:c7:25:a8:df:09:64:39:c1:1c:77:6a:00:
d7:22:b0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:54:16 2025 by rpki-client