Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jhUdM6JHt8z9Pd-LclpM93sf1MQ.roa
File: jhUdM6JHt8z9Pd-LclpM93sf1MQ.roa (raw, json)
Hash identifier: 9Cv6w+71O0jbB7l37Rt97Tmz2/wHhP/kRzPDQeraxtI=
Subject key identifier: 8E:15:1D:33:A2:47:B7:CC:FD:3D:DF:8B:72:5A:4C:F7:7B:1F:D4:C4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B40CA5FD2D7EF41CDD2BBAFA85A4E4F21
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jhUdM6JHt8z9Pd-LclpM93sf1MQ.roa
Signing time: Wed 18 Oct 2023 03:18:06 +0000
ROA not before: Wed 18 Oct 2023 03:18:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:40:ca:5f:d2:d7:ef:41:cd:d2:bb:af:a8:5a:4e:4f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 03:18:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e151d33a247b7ccfd3ddf8b725a4cf77b1fd4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:4d:cb:35:05:23:62:c7:a1:03:ae:89:5f:
a2:cc:35:e8:98:69:5e:d5:0e:87:1c:d5:1d:8f:75:
a7:22:92:4f:2c:1a:d8:73:f2:6e:a4:10:ce:d3:13:
0b:fb:d1:d2:90:06:41:d9:f8:d6:61:a7:7e:aa:2c:
e1:f5:03:bc:a8:a1:4e:b7:90:03:f5:e9:c2:7a:c8:
f0:56:47:f8:82:c5:45:8f:98:5b:c8:51:46:e3:54:
ea:b5:08:1e:b7:d1:40:a2:92:fe:90:65:d6:f0:a0:
eb:6b:98:60:e0:5c:fa:4d:7a:8e:bd:99:85:88:2b:
37:30:34:0e:24:32:74:22:9b:d1:40:18:25:1a:ae:
2b:85:85:55:f1:f6:78:37:56:7c:ef:83:d4:7d:1f:
5c:07:2e:44:7d:28:75:5e:ba:8c:e2:e3:f7:c7:92:
d8:f0:43:57:3a:e3:04:8d:ff:17:98:30:6c:e5:4a:
18:b7:fe:25:10:6d:3c:2a:19:69:51:b7:72:8e:f6:
f7:6e:81:3c:93:ed:6b:2f:cb:79:cb:e8:73:79:21:
0e:56:16:59:e9:32:5d:97:30:84:80:3f:bf:ac:c8:
4b:5e:d4:50:dd:ef:30:fc:4f:8e:fd:a8:92:f9:77:
63:13:30:ea:29:40:23:da:41:56:ce:2b:4b:00:33:
61:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:15:1D:33:A2:47:B7:CC:FD:3D:DF:8B:72:5A:4C:F7:7B:1F:D4:C4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jhUdM6JHt8z9Pd-LclpM93sf1MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:31:cb:0c:f0:de:62:28:bf:a6:15:6f:a9:9d:ad:49:53:bf:
af:27:a8:fa:1b:58:e4:9c:2f:a9:d6:d5:51:b4:2b:55:f1:8b:
5d:68:b0:b6:4e:c5:a6:20:7d:f7:0c:92:c6:10:4a:56:0a:83:
fe:96:26:af:b6:fb:cd:62:18:04:6e:09:2f:11:f6:cc:37:37:
52:31:38:fc:54:3c:6d:3f:8d:71:87:01:70:86:91:9d:4e:9c:
64:5f:d6:27:09:d9:a0:e3:ad:34:b3:a9:00:b0:3f:a3:1c:2f:
02:f8:3d:e6:63:88:f0:35:a1:1b:50:5e:eb:84:66:45:69:9f:
cf:2b:33:31:70:2f:e5:3d:70:60:6e:2e:9f:16:c7:ce:4a:31:
4c:63:13:3b:40:65:3d:fa:c6:cb:c3:1d:32:42:05:c0:4a:df:
21:5c:21:61:7e:c7:87:d7:9f:dc:eb:19:b6:d5:a7:85:9a:45:
74:46:1c:20:ed:04:cb:a8:e4:b1:9f:94:be:96:4a:58:f5:5d:
68:c8:86:d2:58:b2:24:64:06:fa:aa:5d:6f:ed:a3:64:df:3e:
f6:bb:93:99:7e:ea:2f:85:7a:0c:13:cd:ca:d6:77:63:f9:be:
7b:09:be:73:4e:ce:e6:1a:6d:1b:37:ef:10:10:8f:ac:79:ad:
9b:3e:e3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:13:23 2025 by rpki-client