Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J47FL_tcmyYEbkQ3N-tafbVQJ10.roa
File: J47FL_tcmyYEbkQ3N-tafbVQJ10.roa (raw, json)
Hash identifier: fDp3SHvhngqarnMIZGs5mX9z0xnVcxEAQoInP5+OuM8=
Subject key identifier: 27:8E:C5:2F:FB:5C:9B:26:04:6E:44:37:37:EB:5A:7D:B5:50:27:5D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4BE3FA593739347979287FA3D63C676E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J47FL_tcmyYEbkQ3N-tafbVQJ10.roa
Signing time: Sat 09 Dec 2023 00:04:41 +0000
ROA not before: Sat 09 Dec 2023 00:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:4be3:94ab/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4b:e3:fa:59:37:39:34:79:79:28:7f:a3:d6:3c:67:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 00:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=278ec52ffb5c9b26046e443737eb5a7db550275d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:61:bf:9a:bc:d1:0a:2d:bf:5b:0f:8e:4d:33:
d6:df:80:63:45:c7:6c:87:5c:aa:71:c0:f8:3b:1a:
d9:d3:4e:ba:34:c3:db:25:e0:32:8e:2f:56:db:6b:
c7:38:43:88:f7:e0:23:06:15:11:e0:9f:2a:7b:3f:
e2:21:c0:12:ac:3e:9a:f6:9f:eb:dc:80:f4:0c:e9:
12:49:b5:6d:a2:21:89:8a:e3:77:0c:ea:83:fb:f3:
25:f7:3a:f4:fd:bb:0c:05:00:62:ae:88:a8:ac:d7:
23:1c:fe:7f:f5:ca:0d:d6:a3:cf:2c:6a:42:6b:4f:
26:3a:ba:f1:0a:fc:1a:3d:d7:83:50:cf:3a:8b:b4:
8c:58:8e:20:43:27:3f:15:06:a4:1b:b4:3c:ba:6f:
8b:f0:52:58:dc:5d:66:aa:db:6a:9f:40:01:ee:11:
00:d7:33:b1:a3:6b:5c:e1:81:d3:f9:30:e5:80:da:
b3:07:d1:4e:55:93:15:8c:60:c7:5c:0c:bb:00:60:
3f:f7:4b:cc:6c:66:52:85:7d:3f:ea:5e:34:8b:be:
67:0d:e6:a4:f9:26:42:fc:16:fd:19:37:77:38:47:
37:6c:6f:4f:56:bf:32:ff:b5:f4:c4:f1:3a:6a:9c:
40:ef:08:cb:aa:c8:fe:86:38:ec:de:81:f3:2b:07:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8E:C5:2F:FB:5C:9B:26:04:6E:44:37:37:EB:5A:7D:B5:50:27:5D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J47FL_tcmyYEbkQ3N-tafbVQJ10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c7:4c:ba:f3:8c:9f:e7:1d:03:bc:93:a4:c9:91:96:43:e8:f7:
c0:77:ac:bb:9a:d1:cc:ba:78:8d:fa:e4:9a:cb:e1:72:30:54:
b0:34:00:db:72:35:a3:36:9f:8c:be:82:3a:9f:a0:2c:dd:48:
bb:06:71:9c:50:99:77:38:f6:ef:9c:00:ed:e7:8b:68:11:e7:
94:0d:eb:2f:d7:5f:68:a6:4f:aa:2d:3b:40:4a:1b:43:8b:a2:
c3:da:da:2d:99:1c:3e:ae:02:1a:bf:72:ce:52:18:e1:2a:44:
96:a1:65:2e:51:8a:6b:bd:7a:c1:b9:df:3c:72:fc:02:ed:1e:
8a:02:a4:d9:e3:2f:06:a7:23:dc:e6:42:92:99:de:ee:01:fe:
0d:f7:d6:6a:5c:78:96:71:ab:7e:4b:d3:c8:ae:73:36:76:3c:
c1:9a:fe:4f:e5:2d:76:82:26:98:58:cc:da:d1:f5:18:de:a6:
db:97:a0:ad:3f:52:4b:2a:27:95:ae:03:42:5e:09:cd:e1:36:
5d:c4:25:b8:a9:8e:9e:88:8c:00:72:e1:82:10:ae:8e:6f:af:
4c:ba:e9:02:ec:04:70:49:27:7c:8f:4b:6b:56:28:07:11:26:
f5:62:5b:f9:41:8f:06:d3:16:71:0e:c4:3b:1d:6f:73:57:2a:
f2:01:2a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:45:42 2025 by rpki-client