Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9D9LW42kvy0BiVDqU9xnfkjs-n0.roa
File: 9D9LW42kvy0BiVDqU9xnfkjs-n0.roa (raw, json)
Hash identifier: VfDOt99Nm/uwuIolJT0R9B4qqKQOwT6Cz5095MSGCII=
Subject key identifier: F4:3F:4B:5B:8D:A4:BF:2D:01:89:50:EA:53:DC:67:7E:48:EC:FA:7D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0F2CEAD02763498DD2BF9382D610FAB7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9D9LW42kvy0BiVDqU9xnfkjs-n0.roa
Signing time: Sun 08 Oct 2023 12:04:43 +0000
ROA not before: Sun 08 Oct 2023 12:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:f2c:9104/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0f:2c:ea:d0:27:63:49:8d:d2:bf:93:82:d6:10:fa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 12:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f43f4b5b8da4bf2d018950ea53dc677e48ecfa7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:44:e0:cf:20:99:49:8c:d0:5f:10:3f:ab:
52:4b:6a:5c:a7:19:ad:04:91:5c:02:d5:24:83:e5:
17:da:40:11:93:9a:0f:20:f7:61:c4:c1:6a:cc:33:
ce:8d:4a:e2:c2:8b:96:7b:9b:14:63:08:c1:c3:8c:
b3:40:00:3a:8c:d3:b4:59:7c:7c:2d:ec:4f:8a:61:
8c:e4:d4:5a:8b:9e:79:ca:2d:38:08:f7:79:f9:13:
ae:5a:4c:64:ee:a8:1d:16:12:7e:73:fc:8e:1c:1a:
38:91:12:9c:cc:a4:fb:08:46:3d:10:4b:ec:2a:10:
59:02:c7:e4:15:d3:03:bb:7d:a9:75:99:4d:49:81:
d2:92:df:11:f3:f7:6d:88:7b:1a:49:fa:2c:59:ea:
a1:b7:f2:be:a2:e4:2c:84:9e:ee:95:b9:f4:39:8f:
61:66:19:1c:91:26:67:bd:f0:ce:0d:14:73:db:f5:
a9:5a:65:0a:b0:62:33:f4:bf:bb:9e:a2:a2:17:5c:
9d:0b:cb:6f:ac:29:e8:35:9d:eb:5f:06:96:bc:0c:
2c:89:3d:c9:64:3b:e7:0c:b8:2b:87:b6:e0:db:67:
03:a7:d5:47:7a:58:0b:f3:a4:01:00:c1:38:c6:ee:
57:ff:81:9a:39:44:57:09:c6:9a:72:c8:95:b5:43:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3F:4B:5B:8D:A4:BF:2D:01:89:50:EA:53:DC:67:7E:48:EC:FA:7D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9D9LW42kvy0BiVDqU9xnfkjs-n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:9f:0b:12:da:f9:1b:41:a7:b4:e6:07:40:07:56:dd:8a:2b:
a2:7d:00:fe:82:e5:79:99:87:5b:fa:b1:ec:0e:e9:2f:46:48:
87:a2:9a:bb:14:b2:c5:3c:cc:f9:8a:d9:5f:28:15:13:2d:f0:
a9:20:5f:46:4d:37:c0:be:ba:21:3f:2a:8e:00:5a:9b:a7:b5:
a2:78:3f:e1:0d:ab:89:3b:51:23:47:3a:a0:0d:0a:35:0d:3f:
2c:a3:44:ab:2b:7f:ea:d5:b2:d3:60:7a:b7:0f:f4:53:ff:85:
b2:37:27:58:e2:63:1c:32:a6:a3:09:a6:6d:b1:65:cd:28:e2:
a0:06:b0:92:9a:f3:87:eb:09:29:76:26:a0:30:d3:f9:c9:b4:
32:2d:60:fe:29:a5:1b:6f:55:c2:25:6c:c3:7f:9e:07:58:3b:
e5:35:f2:73:0d:f2:f3:dc:3f:23:86:5b:eb:aa:31:a3:3e:3d:
6d:c8:8e:94:7f:4f:61:ac:33:46:2d:d6:3a:c3:95:03:f2:6a:
ac:92:79:07:03:a4:61:a0:80:c2:bb:7b:96:a1:1f:0b:46:fa:
00:e0:d1:0b:c1:e6:af:75:77:16:d2:a8:e0:ce:2c:b8:1e:92:
a8:28:a9:1d:5e:4d:68:23:5c:5a:5c:ba:91:02:42:b9:63:51:
f3:ab:dd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:35:55 2025 by rpki-client