Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P9EAeIRhLuK-1vmOhIGrbus6yCA.roa
File: P9EAeIRhLuK-1vmOhIGrbus6yCA.roa (raw, json)
Hash identifier: Ev2ePedATTIRtxnMo0BfquBmGRZ+HsIg9rJJOGnDS5U=
Subject key identifier: 3F:D1:00:78:84:61:2E:E2:BE:D6:F9:8E:84:81:AB:6E:EB:3A:C8:20
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C75FB345D6496C97A1D7303E8FBFC65EF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P9EAeIRhLuK-1vmOhIGrbus6yCA.roa
Signing time: Sun 17 Dec 2023 04:14:06 +0000
ROA not before: Sun 17 Dec 2023 04:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:75:fb:34:5d:64:96:c9:7a:1d:73:03:e8:fb:fc:65:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 17 04:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fd1007884612ee2bed6f98e8481ab6eeb3ac820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:c6:60:d7:08:83:c9:6f:7b:43:ce:f1:19:
2a:4f:fe:bc:32:8a:7e:db:4e:16:96:68:6b:8f:1c:
ed:c0:6d:cf:a8:43:72:fd:d9:4d:0a:c1:1a:40:89:
11:f6:7c:c0:51:63:27:66:c5:70:4b:0c:ea:88:b4:
67:df:29:72:3a:ed:4f:ee:e4:08:68:6a:7f:68:0d:
5d:3b:61:d2:96:1f:c9:f6:26:2b:38:31:d5:10:d0:
bb:00:35:9a:36:53:9e:83:2d:b2:a3:1b:67:94:a2:
dd:50:f2:a9:42:cc:40:67:91:c5:82:3c:1c:ab:7d:
52:55:eb:a6:27:76:7f:99:1e:58:f9:97:88:04:05:
11:6d:37:75:3f:43:77:e7:3b:4d:66:82:dc:a1:bc:
c3:e2:d5:0e:0e:70:ce:e4:53:57:8b:20:44:bc:94:
1b:bc:f6:15:f4:82:4e:ab:76:1a:ec:00:a6:bb:b9:
f8:1e:40:77:c4:ea:f7:c3:f4:47:ca:0b:e9:56:88:
87:8e:ea:92:19:35:08:8e:8a:ca:20:2d:6f:a8:8e:
70:d1:dd:a1:8f:87:03:3e:68:b7:cf:30:a9:92:0e:
8e:b9:7d:86:64:1f:f9:56:c4:30:26:86:1b:39:be:
6e:fb:cc:4d:dd:52:66:bc:9e:c9:ed:3a:60:62:48:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D1:00:78:84:61:2E:E2:BE:D6:F9:8E:84:81:AB:6E:EB:3A:C8:20
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P9EAeIRhLuK-1vmOhIGrbus6yCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:cd:72:cf:e2:54:af:d2:25:96:a1:11:85:80:34:51:ff:32:
d8:47:f9:fd:58:7c:37:39:4f:76:f3:ee:77:b2:13:01:d0:95:
2d:e2:b0:56:38:e2:3b:9b:7d:9b:2b:80:c7:bc:ac:a8:c7:9c:
ab:f8:68:09:aa:87:0c:f8:41:9d:0b:49:95:7d:12:eb:6b:27:
17:96:75:19:de:50:08:cd:09:dc:89:af:5a:b6:31:ef:43:cd:
8a:cb:4d:94:d4:e6:e6:4e:21:7e:50:a0:1e:e0:00:17:4d:30:
78:ec:cd:a1:7d:38:ae:30:bb:62:e7:aa:ad:15:ed:29:68:3a:
ee:01:ae:13:f0:ae:3f:9b:01:4c:69:05:f7:17:fc:56:e0:5c:
e6:f2:5b:e2:22:34:c9:6f:4b:8a:56:6e:9e:74:d8:e5:60:46:
94:15:fc:1c:2c:23:d5:bc:83:f1:ad:c0:5a:c6:da:84:b2:c3:
89:26:a7:1a:73:9e:34:48:e9:ac:dc:e3:d9:36:64:43:74:a6:
ae:bf:df:27:d0:3f:90:ec:40:d5:ce:32:f5:be:e5:b5:f6:d4:
e8:7e:66:69:c5:2a:89:00:18:2e:5e:c8:1e:b7:f3:90:6c:e9:
a9:a8:3c:3e:e1:e4:df:46:0e:aa:e9:63:87:23:d1:1b:d1:78:
55:fd:0c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:20:49 2025 by rpki-client