Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J9niBzRzd0aIEyfy4GscEgmwny0.roa
File: J9niBzRzd0aIEyfy4GscEgmwny0.roa (raw, json)
Hash identifier: n7QJhCAIjXg5WKV66JO9g55Dhwv17XvJ9viOXcF1hvw=
Subject key identifier: 27:D9:E2:07:34:73:77:46:88:13:27:F2:E0:6B:1C:12:09:B0:9F:2D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C37FB726A7BB6D91E3D3DCED33A39505B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J9niBzRzd0aIEyfy4GscEgmwny0.roa
Signing time: Tue 05 Dec 2023 03:17:54 +0000
ROA not before: Tue 05 Dec 2023 03:17:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:37:fb:72:6a:7b:b6:d9:1e:3d:3d:ce:d3:3a:39:50:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 03:17:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27d9e20734737746881327f2e06b1c1209b09f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:69:d0:2f:44:6f:97:9f:2d:b2:c2:94:7d:
12:01:5e:8d:a4:04:58:4e:d1:bc:25:4f:86:ef:a7:
97:0a:1d:56:90:bb:bb:8c:a4:04:21:98:1d:60:d3:
3c:2c:f5:87:51:11:ad:cd:a2:ad:73:96:82:6b:9f:
5a:df:43:09:41:6c:35:d1:f9:b2:1e:5c:43:02:67:
ea:1d:32:f6:9a:7f:23:2a:4d:fc:6a:42:8f:7a:bc:
64:74:8c:6f:d7:e0:17:2e:37:c3:8a:4f:93:d5:e2:
78:37:52:35:00:b9:69:e3:10:fe:8f:70:67:25:e0:
d7:ad:53:3d:e7:55:81:de:08:59:a6:12:b2:9e:b7:
29:a9:03:47:eb:22:d4:c4:0c:c8:0c:f8:bb:50:07:
f2:6a:79:23:89:63:29:67:bb:87:42:13:0d:c6:30:
09:33:79:e2:4a:ec:1a:0e:fb:ca:0a:b5:5b:57:68:
84:72:f5:eb:c5:8f:a7:5d:47:d4:21:5b:97:e4:2f:
7f:65:f0:d0:25:00:22:96:be:dc:6b:7e:3e:6d:d0:
f3:fc:75:52:60:98:ea:62:d9:6a:fc:b2:a6:29:46:
7b:7a:cd:bb:9a:9e:a2:57:20:01:fc:1d:71:ab:a8:
26:eb:47:8d:22:34:57:3b:79:7d:53:85:68:c6:d0:
6e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D9:E2:07:34:73:77:46:88:13:27:F2:E0:6B:1C:12:09:B0:9F:2D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/J9niBzRzd0aIEyfy4GscEgmwny0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:85:e3:97:e2:1d:dc:05:7c:8a:cf:c3:8f:a9:05:73:1a:1d:
cf:0e:b3:d8:1a:78:45:3a:63:41:92:89:b8:19:ad:45:8f:c7:
59:f0:8e:26:a6:10:3f:fc:1f:06:b5:dc:20:b8:66:29:b8:78:
8c:03:90:42:9f:37:9d:9d:7c:1e:32:4b:bc:14:5f:c9:2f:6e:
70:25:46:2b:03:9f:ed:84:7b:56:0a:36:6c:09:de:94:e6:a3:
d3:e7:a5:ed:c2:ee:0e:f9:c2:fb:f2:27:2e:5d:c4:30:9f:02:
95:2a:78:2b:98:df:c0:e7:bd:3e:b3:09:99:ae:ad:74:a0:f9:
a0:e1:ac:a8:88:63:db:5b:f1:98:06:60:d6:e1:6e:99:a4:ae:
ee:80:cf:05:4d:e1:c0:b5:ad:80:c5:33:7b:6e:10:be:7d:16:
e6:04:72:1f:b9:bc:36:5c:15:a6:2d:f4:f5:16:0c:bf:56:46:
95:57:0a:9b:fd:26:b4:05:a3:1f:a4:16:b2:0c:8a:7b:e7:b0:
78:c9:50:7b:53:fa:09:70:bc:ac:a4:38:d0:04:67:bf:09:5c:
b8:56:18:18:f0:cd:29:f1:f3:e1:1b:4c:74:57:24:b4:0d:dd:
77:77:1f:31:0f:3c:7f:94:6c:4d:06:b4:b4:43:a1:bf:7f:09:
50:a2:e1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:03:02 2025 by rpki-client