Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J3v-XS83mkXox1F4EVwU_Qdu2Zk.roa
File: J3v-XS83mkXox1F4EVwU_Qdu2Zk.roa (raw, json)
Hash identifier: BkXUIjrIT/9CVJNwuVGbm887XZwV3qsQnmasvDb+na8=
Subject key identifier: 27:7B:FE:5D:2F:37:9A:45:E8:C7:51:78:11:5C:14:FD:07:6E:D9:99
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCCAB4228A9F52E9840DDEF1534DD3BF4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J3v-XS83mkXox1F4EVwU_Qdu2Zk.roa
Signing time: Tue 14 Nov 2023 07:10:57 +0000
ROA not before: Tue 14 Nov 2023 07:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cc:ab:42:28:a9:f5:2e:98:40:dd:ef:15:34:dd:3b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 07:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=277bfe5d2f379a45e8c75178115c14fd076ed999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:08:83:af:ea:db:d1:a8:e4:07:43:25:3d:
f2:23:53:ad:c5:ce:c0:83:86:36:6c:4a:a2:e9:9e:
a9:15:5a:c0:36:d2:fd:a6:4c:4e:6c:6d:59:6e:f8:
fe:10:02:32:a9:be:3d:5d:c6:49:e3:e2:26:2e:79:
03:e6:95:18:6e:99:9c:7b:55:21:ee:3c:64:da:79:
17:b4:6c:c4:62:d6:f9:0c:c4:cd:1c:6f:46:24:ff:
7a:bc:fd:aa:ef:41:9d:3c:51:fb:8b:fa:53:41:d5:
ee:50:e9:3f:1b:ed:df:f4:c1:a8:c5:46:25:fe:3b:
63:b0:e2:76:94:db:88:6b:25:d0:61:96:5d:aa:53:
92:98:27:b6:ad:bd:15:3d:f8:46:40:12:a6:f2:1d:
1c:29:a8:dc:2d:e2:81:07:9d:f1:f7:8a:1a:82:eb:
1c:1e:d1:b5:7a:27:ee:26:cf:6b:5b:d2:84:f8:2e:
d2:6e:15:75:86:0d:34:7a:ef:39:87:5d:a7:d3:ff:
13:16:00:f2:65:3d:af:9a:87:ec:ca:d6:66:2e:94:
f4:55:18:9a:25:85:19:13:f7:5c:ec:cc:ee:de:2d:
06:b6:31:b3:dd:32:35:d0:f3:7d:5b:9f:fc:d9:4e:
52:fa:a0:ff:ef:d2:99:5b:44:5a:59:69:1c:e0:2f:
2c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7B:FE:5D:2F:37:9A:45:E8:C7:51:78:11:5C:14:FD:07:6E:D9:99
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J3v-XS83mkXox1F4EVwU_Qdu2Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:45:ba:d8:c6:60:1d:0d:6c:b3:44:5a:74:41:4d:86:c0:cf:
c2:b2:db:c6:09:b3:13:0a:10:39:de:9e:f9:d3:9e:f5:63:c0:
bf:2b:90:ff:16:c2:15:ab:3c:73:15:99:e0:03:74:65:90:44:
99:9b:6b:38:06:26:b7:56:9c:a7:bc:77:a6:b3:a2:20:97:fd:
bc:0e:58:50:dc:16:b9:4d:eb:94:aa:84:0f:4b:f2:65:ba:bb:
94:24:69:aa:95:30:ee:21:47:fd:50:9d:64:5b:18:9e:3a:52:
8d:0a:57:c9:f3:6a:05:72:5d:96:27:99:ac:f9:2d:3c:ff:d5:
9f:c7:df:d3:14:cc:d1:bd:80:bc:6a:60:4b:e7:e8:ba:75:db:
46:55:15:f6:05:65:f1:f4:bc:65:d7:b5:a0:9a:8b:f1:d0:c9:
9a:aa:29:91:b5:e1:4e:4f:f7:20:a1:b9:b0:bb:f0:51:74:40:
e4:41:2f:70:1c:ce:9b:d0:12:e1:5f:ad:f8:20:51:f7:38:24:
cc:ea:eb:66:d2:ea:24:f0:d9:81:05:8f:4c:83:f9:a9:05:b2:
09:2c:d9:e3:fa:55:04:0e:81:6e:c9:3b:dc:31:c7:89:c7:07:
10:2a:cf:bf:5f:12:bc:7d:f5:d1:d1:f7:c5:74:d9:ce:18:b1:
17:bc:bf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:02:14 2025 by rpki-client