Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/k8JDoqcJDQDStc7LWfMz6pyFlSM.roa
File: k8JDoqcJDQDStc7LWfMz6pyFlSM.roa (raw, json)
Hash identifier: Zu7wev3tdM2JtEADK75n6M/+dhm83VefB49duBduj9o=
Subject key identifier: 93:C2:43:A2:A7:09:0D:00:D2:B5:CE:CB:59:F3:33:EA:9C:85:95:23
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF72D96ACD4CC1680F6BEEF48A22AAE17
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/k8JDoqcJDQDStc7LWfMz6pyFlSM.roa
Signing time: Wed 22 Nov 2023 13:17:21 +0000
ROA not before: Wed 22 Nov 2023 13:17:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f7:2d:96:ac:d4:cc:16:80:f6:be:ef:48:a2:2a:ae:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 13:17:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93c243a2a7090d00d2b5cecb59f333ea9c859523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:83:1b:52:64:dd:5b:af:8a:75:35:ca:0c:
e8:30:61:8f:2b:fb:46:92:c3:0f:d4:0c:73:fd:ed:
9a:e2:09:12:c6:23:bd:ba:ac:71:fd:d0:0f:56:ae:
bd:6b:95:3e:fc:06:4a:dd:8c:70:6b:77:47:62:de:
21:c3:b9:0a:9d:c7:d4:99:06:fe:83:90:31:6d:c9:
3e:e5:0f:6f:1a:39:2f:9e:ab:c1:87:2e:5e:7e:76:
ea:20:f8:94:6e:7d:e3:f1:fe:b1:6e:86:b6:31:89:
03:d8:d5:f7:15:ba:4c:5c:67:30:55:4a:08:12:9f:
e7:93:15:4a:8d:b0:f2:8c:ec:48:b7:b9:b7:cc:44:
a0:88:43:8e:2a:35:46:19:61:98:42:c9:06:b5:a0:
5d:13:d1:e6:0f:9e:53:fc:eb:26:b0:a5:98:a4:ed:
86:1a:59:e3:45:67:a1:4f:ee:82:c9:62:26:6c:0e:
db:c5:b8:4b:dc:6c:0f:ed:a9:92:61:94:90:39:e5:
44:10:ff:83:a6:ad:f5:3f:af:81:b0:fb:16:e8:7b:
34:85:c9:04:bf:87:bb:ed:51:8b:df:15:df:72:63:
9c:fc:d6:4d:b6:b5:88:81:00:dd:f2:a7:45:50:31:
d2:f3:0c:09:7a:22:93:db:57:21:76:1a:30:c8:27:
8c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C2:43:A2:A7:09:0D:00:D2:B5:CE:CB:59:F3:33:EA:9C:85:95:23
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/k8JDoqcJDQDStc7LWfMz6pyFlSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:25:43:61:b7:c3:73:ee:d5:9e:7e:db:ed:4f:61:1a:cd:a4:
3a:86:57:c3:db:4c:96:43:7e:ae:8e:63:94:64:31:cc:06:a0:
8f:de:96:7e:63:b5:04:3d:84:25:72:48:d7:d6:19:7f:77:ae:
9b:45:d1:c8:82:10:80:06:9d:dc:cb:bd:d6:4c:20:96:78:6e:
f0:a0:b2:8b:e6:6c:2e:ea:80:28:ae:fe:47:29:5e:42:64:2a:
c2:77:21:e6:84:18:e0:50:0e:d2:fb:46:06:b2:b7:bf:a6:7f:
c1:55:c4:4c:95:15:c5:ac:6e:68:4a:14:44:c7:7e:21:c1:bb:
f3:36:70:77:98:0f:8c:1e:a1:4a:bf:dd:0a:d7:81:c8:d8:39:
4b:43:3b:aa:27:35:db:78:48:ed:57:66:05:b7:6f:eb:9b:0d:
02:2b:35:fd:1c:a1:b1:bf:1c:0c:4e:f4:b7:b4:45:86:98:ef:
61:0a:14:3d:41:59:1c:2e:ec:e5:e0:ab:e5:d2:36:0b:3a:20:
02:90:d0:8e:bc:f2:77:2a:9d:8b:cb:38:4e:19:67:95:29:92:
cf:a3:b9:3f:1c:dd:54:75:5e:c8:45:39:18:ce:28:19:21:4a:
86:6c:57:ad:52:6f:b5:20:11:08:61:a6:92:f1:32:d0:ed:08:
58:82:ca:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:15:00 2025 by rpki-client