Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fJ7rpdWgWhS54ynQGxS0KGSUN6o.roa
File: fJ7rpdWgWhS54ynQGxS0KGSUN6o.roa (raw, json)
Hash identifier: zpOS2Z9rTKwso57tz0S7z24vqqA3uF2VupcbRG13DrM=
Subject key identifier: 7C:9E:EB:A5:D5:A0:5A:14:B9:E3:29:D0:1B:14:B4:28:64:94:37:AA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C254F3F2E20CFBC97A2583610DD5E7AD3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fJ7rpdWgWhS54ynQGxS0KGSUN6o.roa
Signing time: Fri 01 Dec 2023 12:16:39 +0000
ROA not before: Fri 01 Dec 2023 12:16:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:4f:3f:2e:20:cf:bc:97:a2:58:36:10:dd:5e:7a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 12:16:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c9eeba5d5a05a14b9e329d01b14b428649437aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:d2:29:a5:9e:c2:a6:d8:25:fc:9e:dc:db:
a1:a7:69:a4:41:09:15:d6:28:97:cf:72:67:e5:ab:
72:11:ea:ca:9e:96:05:b2:6b:3d:ce:c8:b4:30:a1:
2e:af:f0:ca:39:09:55:e7:6b:2f:f6:42:10:12:f1:
59:c8:5f:05:bc:1e:dd:3b:fc:f3:24:2a:2a:87:2b:
e0:72:30:4a:ef:1c:ae:d4:81:6a:17:85:6c:ac:74:
07:43:43:b6:b1:8e:8c:7d:26:f9:fc:a6:b2:96:17:
19:b5:de:82:6e:43:e6:a5:05:1b:6b:91:51:3a:4a:
e2:33:95:1a:59:17:aa:5b:27:29:be:a3:fa:90:87:
8b:97:50:80:4c:d3:ef:95:7b:5f:95:6f:28:98:f7:
74:a6:50:c1:02:15:cd:ed:c8:59:3c:b9:da:e3:53:
08:1d:3a:89:28:08:50:2f:49:6d:a1:fb:84:76:1a:
47:e5:94:10:99:8c:41:e9:00:28:08:2c:39:32:bc:
a1:91:b1:34:4d:0c:01:c6:da:ee:8c:f8:97:45:c1:
2e:7c:38:79:2c:93:47:a3:33:29:8c:99:04:fc:b2:
de:a2:ee:8f:a6:d0:8b:03:7a:d9:b3:cc:26:2c:09:
6e:53:cf:9a:2b:e0:71:b6:6a:c0:54:e6:42:a6:24:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9E:EB:A5:D5:A0:5A:14:B9:E3:29:D0:1B:14:B4:28:64:94:37:AA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fJ7rpdWgWhS54ynQGxS0KGSUN6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c0:23:00:c2:c2:e9:1c:99:bb:9b:df:6b:77:21:e1:39:85:9d:
83:53:dc:d2:53:b9:de:99:49:56:e8:ce:8a:92:85:8c:fa:b5:
ee:ea:0c:b2:11:ed:55:6c:20:7a:42:ab:05:47:1f:f5:b6:17:
07:83:64:ea:80:8e:a6:d0:0c:fd:09:35:22:bf:0b:a1:2e:70:
e5:00:cc:f2:4c:f2:55:d9:cc:eb:68:64:18:16:4a:b4:b3:a0:
a0:8c:fb:8d:3e:26:73:74:e7:4d:37:fe:a2:d9:1e:b0:60:c2:
1b:a5:0d:10:81:31:bf:c7:73:8c:1a:67:a5:a8:e2:08:df:ec:
46:dd:7f:81:cf:1b:e9:c2:86:81:3c:dd:4e:6c:58:06:f4:eb:
1c:8b:0d:7c:b2:e4:0c:26:db:0b:44:96:eb:f9:b5:ee:c3:b6:
ce:c3:44:35:15:f7:11:e4:6a:d6:20:6d:86:35:71:66:07:e7:
95:2d:96:15:7c:f8:2b:a1:9e:bc:c6:e0:62:2d:17:23:fa:74:
9d:7d:2b:5e:8c:ec:02:05:e7:f4:eb:66:f6:1e:eb:85:fd:3e:
a7:64:91:0e:c2:cc:24:40:f8:6a:d1:81:d3:a6:7c:6d:31:0d:
e0:cc:b5:cd:6b:2c:9a:8a:cc:0b:b7:2f:d3:78:a3:99:54:58:
98:1e:4d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:52:19 2025 by rpki-client