Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9luXP-OGRXrIOdwDsFCiKLPdvvw.roa
File: 9luXP-OGRXrIOdwDsFCiKLPdvvw.roa (raw, json)
Hash identifier: BChrNVj3UoBbBTEZPVFsq1luy568azdnF4QsC9K7zFI=
Subject key identifier: F6:5B:97:3F:E3:86:45:7A:C8:39:DC:03:B0:50:A2:28:B3:DD:BE:FC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFD91A18D036A1A7180B11DDC21E08A12
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9luXP-OGRXrIOdwDsFCiKLPdvvw.roa
Signing time: Thu 23 Nov 2023 19:04:21 +0000
ROA not before: Thu 23 Nov 2023 19:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:fd91:48a3/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fd:91:a1:8d:03:6a:1a:71:80:b1:1d:dc:21:e0:8a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 19:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f65b973fe386457ac839dc03b050a228b3ddbefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:35:80:13:35:d5:70:d4:36:1f:2d:2e:38:b1:
9f:76:52:ff:7d:1c:83:36:86:b9:53:58:9d:37:94:
39:d2:4d:12:93:9e:88:ef:fc:5e:66:6c:c7:f9:d7:
dd:89:a9:04:54:b0:20:4e:26:b2:44:0a:5c:dc:4e:
36:5e:5c:6c:f8:1c:aa:bf:69:42:38:bb:fe:25:2b:
28:81:53:64:45:1b:2b:b7:c8:31:a5:84:ec:bc:bc:
f5:41:e1:76:1e:b8:fb:a0:29:23:c7:5e:1c:85:f7:
40:f0:b9:c7:89:6c:ed:60:a3:e5:8a:bd:51:02:5d:
bf:7d:be:21:5b:fa:7d:0b:0e:26:92:5d:38:10:8c:
41:90:d5:ee:97:3e:71:38:f5:b5:fd:4d:b1:bf:89:
20:8e:b2:4c:49:47:f9:2b:29:06:99:70:3e:f4:ac:
af:9e:b1:11:90:a8:76:08:ce:70:4a:cb:a0:03:e4:
44:43:e5:5f:c6:4d:ab:f6:b7:24:6c:b9:61:81:4e:
bf:13:ba:ee:1b:97:2b:0f:b8:a2:67:da:24:a9:28:
bf:13:38:94:25:71:a0:74:8c:67:5e:5d:a2:74:25:
27:1f:13:a0:5f:73:9f:f0:23:d0:de:dd:b2:40:98:
ba:e4:55:c0:5a:27:18:09:8a:1e:d6:52:53:bd:70:
ed:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5B:97:3F:E3:86:45:7A:C8:39:DC:03:B0:50:A2:28:B3:DD:BE:FC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9luXP-OGRXrIOdwDsFCiKLPdvvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:c2:cf:15:11:59:7c:99:36:23:f3:a4:13:35:d3:1e:23:c3:
9e:4c:aa:fb:97:8a:4e:3c:12:c6:4e:96:21:8e:71:e6:b0:06:
84:b0:bd:41:86:ac:3d:26:1d:b4:ea:31:69:de:5a:10:00:c0:
c9:d4:7f:4a:76:58:2f:85:6a:41:d9:61:68:67:14:c0:10:c6:
59:da:2f:e8:c5:c6:05:3d:39:e5:4c:06:02:20:bc:dc:66:0f:
4a:d1:95:3c:dd:ac:46:99:1c:71:44:5b:77:41:df:5a:f7:dd:
b3:89:17:be:dc:0b:a2:5a:53:73:00:68:e7:fd:22:ce:47:65:
8a:6f:b5:07:3f:8c:94:6b:80:0d:97:e8:ee:25:f0:d9:fb:86:
9c:32:b9:eb:68:31:cb:0c:f8:a7:eb:2e:a9:86:81:46:86:6d:
5d:8b:92:61:30:76:52:a4:f7:3f:cd:80:b7:18:4d:79:87:1c:
a4:6d:3b:f2:ab:c5:e6:22:cf:39:62:71:c7:b0:fa:dd:99:74:
cd:61:fc:a8:09:8a:af:f5:02:ae:0b:82:0d:18:5c:ef:d9:dd:
ff:51:23:58:0c:a0:df:57:5d:2a:76:a6:e8:5a:d3:4c:f7:85:
8a:a6:d7:93:ae:8a:d2:3b:9c:b8:66:0b:bf:4a:68:9e:fc:72:
98:39:b1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:37:52 2025 by rpki-client