Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JTGRDHKLKCSSGm8Y1UkwrjLdW9k.roa
File: JTGRDHKLKCSSGm8Y1UkwrjLdW9k.roa (raw, json)
Hash identifier: mohFV8XDxm3D/tduILLhW8Oqt1pMNEPUdkP8n3eyOU0=
Subject key identifier: 25:31:91:0C:72:8B:28:24:92:1A:6F:18:D5:49:30:AE:32:DD:5B:D9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B89BE5C1934C2EA860FD1C121F60C2565
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JTGRDHKLKCSSGm8Y1UkwrjLdW9k.roa
Signing time: Wed 01 Nov 2023 07:17:15 +0000
ROA not before: Wed 01 Nov 2023 07:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:be:5c:19:34:c2:ea:86:0f:d1:c1:21:f6:0c:25:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 07:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2531910c728b2824921a6f18d54930ae32dd5bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c9:d4:49:c5:4b:90:a2:60:1a:e6:39:16:f7:
c2:38:83:85:3f:7e:ec:22:20:a2:6e:fe:7c:ce:0e:
55:3b:98:01:99:40:b7:cd:82:6c:dc:c9:b9:e4:c7:
2f:19:7a:36:fa:50:98:20:65:eb:26:40:2d:7f:06:
ad:3f:63:fc:c0:e3:03:7f:0a:c4:32:3f:d0:f8:b8:
5a:4e:ae:f4:91:86:64:aa:e2:2b:34:c1:56:b5:67:
4f:61:d8:36:dd:74:9c:47:c2:61:dc:d3:b2:b6:11:
bf:47:f6:37:d4:8a:cb:58:e5:0f:cb:c5:c3:8f:07:
61:f2:ab:c3:d1:74:e5:f0:5e:98:08:93:78:3c:39:
58:17:5d:bb:a9:2b:f0:91:da:af:65:b4:d7:e4:79:
80:b2:0c:d0:f5:08:20:d6:96:b3:c0:ba:3b:cf:ab:
06:ca:e1:13:f8:3d:ce:88:31:e5:ff:90:c2:11:0c:
26:92:b0:de:88:dc:13:7c:57:7f:86:cf:99:83:87:
da:b9:72:2f:c4:b5:6f:e6:cd:8d:92:4f:11:e1:8a:
23:5f:f4:9c:9c:80:01:eb:fe:44:d9:e1:3b:ff:dd:
fd:26:df:2e:bf:7c:fe:8c:8f:c1:1e:a2:ef:4c:67:
03:ec:31:4a:d2:05:41:4b:da:c6:0d:2b:6b:9f:d7:
61:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:31:91:0C:72:8B:28:24:92:1A:6F:18:D5:49:30:AE:32:DD:5B:D9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JTGRDHKLKCSSGm8Y1UkwrjLdW9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:2f:88:ef:bd:06:4b:2e:ca:66:81:73:fc:cc:30:b0:eb:b3:
2d:90:a8:da:c0:2c:06:a6:5a:19:c4:0a:0e:0a:4c:c8:42:2a:
d9:00:a0:f0:4d:dc:21:c4:52:67:f0:00:c3:65:5b:3f:a6:ea:
e0:c2:f6:c2:37:1b:fe:28:6b:52:04:f1:f8:55:d6:ac:1a:cd:
98:09:e4:64:36:87:0a:f8:0b:5a:3b:25:59:92:f8:00:58:24:
8f:02:66:65:b6:00:1f:8f:de:8f:c8:13:6a:e3:cb:40:3d:92:
d2:3b:96:87:2d:36:0b:de:bb:3b:fe:e8:da:38:e9:27:81:8b:
02:b6:a6:5d:d6:7f:31:38:81:99:8b:9c:e4:ad:9c:0f:f3:14:
7f:91:70:74:7c:d7:1f:7a:17:a4:d5:5f:e4:ef:95:ea:1a:30:
d0:7e:6a:46:15:24:d0:af:c3:26:80:b0:0f:8f:78:28:e2:6e:
e6:56:7c:2f:8a:4b:e2:92:b4:fb:46:12:e8:aa:31:70:ee:5d:
b3:ec:4f:cf:75:20:e2:27:a2:7e:72:47:a0:5c:db:8d:82:43:
00:d2:b0:14:08:a1:aa:0e:25:8b:e1:2a:17:35:82:64:ea:b8:
b6:8e:b2:14:f0:af:bb:9b:32:06:7a:e2:cd:7c:20:4f:5b:33:
21:19:93:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:48:42 2025 by rpki-client