Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9T7ChY6cj4MtNXT2PPwfmjSRhEA.roa
File: 9T7ChY6cj4MtNXT2PPwfmjSRhEA.roa (raw, json)
Hash identifier: LxUysJ8cO8WEWIEFHZm4zaJF6lzN3bk27uNq95/mXFc=
Subject key identifier: F5:3E:C2:85:8E:9C:8F:83:2D:35:74:F6:3C:FC:1F:9A:34:91:84:40
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4927BA750A138307BC6DB7F9AE3785F6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9T7ChY6cj4MtNXT2PPwfmjSRhEA.roa
Signing time: Fri 08 Dec 2023 11:19:49 +0000
ROA not before: Fri 08 Dec 2023 11:19:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:27:ba:75:0a:13:83:07:bc:6d:b7:f9:ae:37:85:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 11:19:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f53ec2858e9c8f832d3574f63cfc1f9a34918440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:24:16:b1:bc:fc:a0:cb:85:e7:32:18:e7:
5c:8b:3e:1a:ea:c2:ed:15:52:3e:4d:91:a0:f2:ef:
f8:8f:13:c1:c6:7b:ea:7d:ae:27:29:67:bb:8e:12:
e3:a9:a2:5f:06:3d:34:a5:25:e6:3a:99:75:be:79:
b3:78:c3:50:4d:92:3b:e2:91:f3:7e:81:f1:43:57:
1b:99:3b:c8:49:a7:bf:2f:a6:c4:ea:c4:72:fb:bb:
9b:5f:da:50:99:62:44:e8:65:b7:51:e8:66:da:ed:
d2:af:ca:b0:39:d4:a2:a2:ca:54:6c:c7:59:73:b9:
c8:76:84:b5:f2:d3:e1:bf:d5:f2:41:d0:1b:c8:14:
43:f7:08:69:b8:64:f4:29:b2:06:2c:22:f9:78:f3:
6a:9e:c3:a9:1e:9e:50:5c:85:da:61:a0:c9:1b:1c:
b5:5b:fb:6c:52:76:a0:7a:53:32:9a:f6:95:73:e0:
24:ee:52:47:a5:0f:74:a0:52:f2:9b:7e:4f:44:2d:
c4:f6:43:c7:b2:48:68:35:55:27:ca:77:76:a2:15:
d7:48:b3:d2:b5:6e:45:66:63:3f:a1:fe:d5:78:b9:
91:d4:63:cb:78:7b:13:5d:e5:f4:92:13:e3:7d:08:
c2:52:2b:0a:cf:bc:81:80:22:33:87:06:85:ec:d9:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3E:C2:85:8E:9C:8F:83:2D:35:74:F6:3C:FC:1F:9A:34:91:84:40
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9T7ChY6cj4MtNXT2PPwfmjSRhEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:83:7c:ea:60:cc:12:f5:a9:d1:dc:8b:47:26:41:dd:c0:cc:
60:1c:3b:76:af:55:35:96:7f:76:5b:1f:09:dd:c5:c2:f3:7e:
2a:17:b0:8c:26:c0:15:32:d1:e6:2d:95:07:a3:f3:70:cb:3a:
d6:28:05:54:59:92:40:7d:4b:c6:c7:87:0a:63:a2:f8:8c:77:
fe:86:5e:4f:7a:15:2c:71:e7:9a:eb:0b:69:01:07:31:6c:3b:
09:c5:22:5b:b2:a1:46:6e:14:cb:6d:c9:ef:1c:e4:18:3b:d6:
66:33:54:5b:e3:b3:e5:74:c7:fe:04:a7:a3:b0:43:92:38:9f:
1e:6e:48:d4:1f:26:2e:5c:c1:c2:c8:d2:3e:ae:85:32:6f:7a:
36:fe:f4:dc:ea:07:51:c4:e5:61:89:f6:f8:d0:8e:56:b9:8c:
b6:e0:ed:3e:92:d7:ef:14:e0:3b:1b:cb:bf:76:5c:94:93:f9:
2c:63:40:ff:81:10:f4:f6:d5:db:13:23:29:66:59:20:12:1d:
9c:be:4a:08:a0:69:e5:54:5c:47:d6:7c:81:2f:7a:11:9f:e6:
cb:67:3e:ec:47:13:24:9a:70:25:ee:0e:be:88:ec:c0:67:d5:
16:a2:e7:5f:a3:c8:70:5f:5c:f9:2e:b9:c1:9e:7f:9b:d0:18:
63:b8:5f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:31:25 2025 by rpki-client