Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JiYwQXPpOvoR8Vv8-8fmhR57hSs.roa
File: JiYwQXPpOvoR8Vv8-8fmhR57hSs.roa (raw, json)
Hash identifier: 4HzPcROYqwNq1APT5BIDDE1qBbwcf2KdMkO7tumUw2o=
Subject key identifier: 26:26:30:41:73:E9:3A:FA:11:F1:5B:FC:FB:C7:E6:85:1E:7B:85:2B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B66F5A61A0EA5F91D33D70479EE49D79E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JiYwQXPpOvoR8Vv8-8fmhR57hSs.roa
Signing time: Wed 25 Oct 2023 13:10:56 +0000
ROA not before: Wed 25 Oct 2023 13:10:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:66ef:98cf/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:f5:a6:1a:0e:a5:f9:1d:33:d7:04:79:ee:49:d7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 25 13:10:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2626304173e93afa11f15bfcfbc7e6851e7b852b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:58:06:63:28:d5:41:c1:c9:60:c2:c3:dc:
c3:c8:dc:84:9c:0d:b6:90:c0:df:89:9b:73:e6:4d:
b0:29:8d:58:43:0d:06:67:83:16:72:0a:7b:f1:a3:
21:50:a1:a1:d8:f0:79:ed:af:12:b2:2a:f9:d7:cd:
16:ca:79:51:99:f4:af:42:5c:ab:82:5c:3b:b7:97:
43:9d:21:75:08:c3:a5:48:f3:d6:02:80:5a:5a:8d:
27:2e:89:44:7c:36:2a:f3:f6:b6:fe:09:9e:bf:11:
45:54:63:7a:b9:38:c3:1a:34:5c:a5:10:5d:54:2c:
ee:a9:88:9c:9c:56:18:ca:7d:df:76:8e:fb:85:e1:
bb:2d:a6:cd:e7:04:04:6f:cb:5e:9b:76:fb:2b:b5:
3d:4b:e5:12:2d:ee:00:65:8d:76:61:46:dc:af:0d:
c3:df:94:e6:c9:27:2e:19:e9:44:1a:54:62:90:a6:
d8:5c:82:8c:8c:1c:36:c5:3b:70:41:bd:84:4c:33:
b1:3e:17:a5:41:40:9f:48:9b:b6:bd:14:63:35:eb:
a6:56:8b:b6:cd:83:be:c1:98:36:ec:15:d9:f3:63:
fc:9c:4a:6c:6f:64:32:c1:91:b9:93:1c:7b:77:df:
78:46:4e:d7:85:5b:a1:99:36:95:dc:6b:e4:68:06:
57:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:26:30:41:73:E9:3A:FA:11:F1:5B:FC:FB:C7:E6:85:1E:7B:85:2B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JiYwQXPpOvoR8Vv8-8fmhR57hSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:88:a5:43:de:7b:b1:36:17:9b:bd:36:33:c5:4e:a5:6b:e3:
30:15:27:bf:c2:33:bc:e1:04:02:84:0f:71:aa:00:a2:b9:b4:
7a:88:27:1f:9e:43:5c:fa:86:c0:32:70:c4:2a:d6:32:9b:76:
46:05:88:c0:b9:81:c3:f9:f2:86:fc:34:98:4f:6e:e9:f3:3f:
a6:79:ff:84:cf:18:63:fd:53:54:53:c5:4a:26:05:9a:35:4a:
af:7c:80:d6:3a:10:f2:09:d9:a9:da:c0:1a:25:3d:0a:7e:44:
8b:b4:5f:1c:7a:ee:98:91:10:e9:e6:db:63:e7:b2:d1:e5:31:
20:b0:0a:ec:94:49:7f:34:73:12:64:a8:2e:e5:4d:22:20:f7:
20:df:df:5d:1c:ac:fd:17:48:5e:57:9b:c4:f5:9e:98:e5:14:
99:a1:8a:a5:d3:23:bd:d3:34:cd:55:c3:7f:53:d7:ec:e0:24:
43:9a:85:61:af:5a:2a:d1:12:a5:28:53:11:f8:d5:a2:fd:3c:
10:fa:8c:94:00:96:4a:ab:af:86:9d:fc:5a:c7:ad:a2:c1:7e:
c2:42:28:f6:1c:14:b4:22:61:dc:2f:7e:9a:b2:e4:8c:7e:11:
3b:5f:51:d7:ae:bc:81:13:ec:81:e1:97:ff:ef:8f:de:63:1f:
38:eb:cd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:55:23 2025 by rpki-client