Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/96_n10TRqrtBYn1pgnQDtbG3cZs.roa
File: 96_n10TRqrtBYn1pgnQDtbG3cZs.roa (raw, json)
Hash identifier: otHcgdmmp6BtSHmMLoxDbZL4L7Xiq1LnCvqI0LvPe6o=
Subject key identifier: F7:AF:E7:D7:44:D1:AA:BB:41:62:7D:69:82:74:03:B5:B1:B7:71:9B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5A86B29F6E212DA6B29CB8D076535025
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/96_n10TRqrtBYn1pgnQDtbG3cZs.roa
Signing time: Mon 11 Dec 2023 20:17:06 +0000
ROA not before: Mon 11 Dec 2023 20:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5a:86:b2:9f:6e:21:2d:a6:b2:9c:b8:d0:76:53:50:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 20:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7afe7d744d1aabb41627d69827403b5b1b7719b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:03:0f:e4:5d:80:09:06:cf:76:7f:54:e4:
32:a1:fe:94:16:f1:97:d5:64:64:bc:d6:72:f7:f4:
cc:8f:c8:b3:60:36:25:53:b2:7b:d6:7a:74:a0:79:
1e:18:e5:19:ce:f3:e9:57:51:de:2e:cf:ff:19:9d:
01:76:a6:9e:8b:43:dc:14:bf:a2:91:db:40:68:0b:
4a:10:8b:6f:43:ec:62:a1:3d:36:40:11:85:bb:ab:
0b:31:7f:45:53:29:41:92:17:56:2a:0b:af:56:b3:
27:b2:94:69:f8:07:05:82:57:d0:a4:22:6f:23:ba:
bb:92:1b:93:48:92:5c:c5:ae:7d:37:ad:fc:fc:9c:
26:25:a5:25:e6:5d:9f:26:7d:28:cf:36:ac:f1:12:
2b:57:41:cb:bc:15:68:69:5c:41:d6:63:16:7a:ef:
e1:ce:3d:c6:09:5b:32:f0:b5:d4:8e:2d:f6:60:dd:
19:77:74:5f:3e:9f:20:db:e4:46:a3:04:30:72:5e:
42:7f:00:40:1d:fb:56:7d:99:41:c5:30:3b:99:24:
49:f3:20:2a:ae:43:b6:1e:19:b6:bd:71:ab:4f:12:
9a:88:e7:1f:16:45:b7:f2:9f:b6:ec:7c:cd:90:de:
d6:0d:54:9b:9c:77:ad:aa:7f:50:57:42:ac:89:3f:
5e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AF:E7:D7:44:D1:AA:BB:41:62:7D:69:82:74:03:B5:B1:B7:71:9B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/96_n10TRqrtBYn1pgnQDtbG3cZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:52:b2:50:33:16:86:14:19:41:e6:b0:92:d4:9a:c3:5a:dd:
6b:b4:7b:ef:0e:51:33:19:f4:63:4d:8d:b5:b1:b2:fa:4f:39:
08:a6:7f:75:e7:66:0b:08:9b:1a:50:cf:8f:1c:ad:1a:cd:ae:
b8:53:00:c2:0a:6d:ca:1f:f5:87:ff:e4:20:01:4b:b7:1d:4a:
a9:05:38:33:f2:3b:00:0c:47:4b:42:64:6c:22:46:b6:9f:47:
14:fb:59:39:ec:c1:c1:5a:ac:03:31:a6:7c:88:4d:9e:02:8a:
77:a6:44:94:33:c7:95:97:29:c0:f7:ac:80:c4:ab:ed:e3:c3:
b0:8d:c8:59:95:c6:01:c5:ef:47:ce:38:8e:a5:55:af:33:3c:
fa:9e:08:2a:b0:df:2f:23:be:2b:b9:76:b1:1a:56:ed:33:af:
f5:ab:47:13:44:8e:1d:0c:31:c3:0a:28:3a:87:4f:a7:26:d6:
de:f5:54:2f:b8:31:36:a8:c2:17:9e:88:e1:87:3c:9b:98:78:
1b:f7:d4:57:ed:dc:50:02:27:83:c0:d4:23:d2:15:45:d4:a9:
56:bf:fb:30:72:68:c0:95:fb:c7:82:1f:c8:22:bb:7d:b7:1e:
70:67:00:b4:5d:49:80:5b:c5:4b:0a:23:34:46:ec:69:68:1e:
ec:d2:ce:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:21:31 2025 by rpki-client