Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nI-WwrWqbsn7FmHKPuW2oYHq5LY.roa
File: nI-WwrWqbsn7FmHKPuW2oYHq5LY.roa (raw, json)
Hash identifier: jykkUvQcwTIoiuYm/EXYeKa6xwUATdx0C5wC1pN/lWY=
Subject key identifier: 9C:8F:96:C2:B5:AA:6E:C9:FB:16:61:CA:3E:E5:B6:A1:81:EA:E4:B6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B37BEA10476F043BF95C32E1659A511DA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nI-WwrWqbsn7FmHKPuW2oYHq5LY.roa
Signing time: Mon 16 Oct 2023 09:08:41 +0000
ROA not before: Mon 16 Oct 2023 09:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:37ba:9368/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:be:a1:04:76:f0:43:bf:95:c3:2e:16:59:a5:11:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 16 09:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c8f96c2b5aa6ec9fb1661ca3ee5b6a181eae4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9e:be:bd:5e:0b:bb:65:3c:0f:86:ed:0a:6c:
f1:29:04:d0:47:92:0e:e5:11:a9:b9:de:44:bd:53:
d5:fb:91:55:71:7e:b8:3e:52:ae:7d:a7:38:94:d5:
48:38:2d:35:ff:91:30:51:39:b4:cd:a5:c1:98:0c:
0d:63:d9:e4:07:ab:e7:1e:61:46:2a:5f:1a:4d:db:
99:a0:da:69:6e:de:01:92:bc:91:01:6f:07:eb:05:
80:11:f4:e9:d8:fe:b6:7d:36:4a:ec:1a:c9:80:2b:
2a:02:a0:7e:52:10:0e:02:80:f9:5e:f2:0f:c0:f4:
ee:49:79:1c:0d:d8:07:ba:7b:b1:34:0e:1c:f7:44:
d3:69:35:09:49:de:75:43:a6:57:a8:b7:bd:a4:fe:
85:4e:b5:02:b0:8e:27:93:ea:86:60:49:2c:76:1c:
10:57:5c:83:42:cf:bb:a4:49:c7:f7:8b:b0:29:af:
ad:d5:f7:e8:33:d5:be:3d:78:30:e2:d8:40:b4:02:
fd:3f:8e:eb:67:0c:c2:42:ab:c3:85:26:61:24:d8:
87:fb:38:89:cb:e3:ca:e1:3e:15:f9:e9:c3:e9:f8:
8e:27:6d:cb:ef:7a:21:25:eb:5a:fb:64:e7:11:13:
48:34:73:f4:ef:41:28:b4:70:14:99:a9:53:17:28:
0c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8F:96:C2:B5:AA:6E:C9:FB:16:61:CA:3E:E5:B6:A1:81:EA:E4:B6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nI-WwrWqbsn7FmHKPuW2oYHq5LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c4:c3:b9:9c:1d:57:a5:49:00:06:44:64:f3:3c:76:36:ee:54:
43:64:9b:8d:68:ba:46:5e:0f:5e:34:01:c3:29:f0:91:79:ad:
58:f1:fe:d8:14:19:09:14:1d:fb:99:30:32:7e:d1:a6:58:3e:
a9:9e:3b:a5:47:15:9e:4f:7c:56:e1:81:b3:d9:37:db:a0:b2:
a9:6f:40:b3:b3:bc:90:7d:71:e0:3f:6a:2a:d1:b0:a5:5f:6a:
31:7b:17:18:f0:37:87:96:fb:9d:5d:56:95:51:93:07:0f:d1:
37:69:a5:46:96:43:ea:eb:33:4c:44:2a:c1:91:96:16:73:9c:
95:1a:a9:59:c0:0c:18:cf:bb:62:51:74:89:7e:3d:fb:db:70:
dd:22:c6:3c:91:71:d2:1b:48:04:8b:58:14:ed:30:cc:4a:bb:
33:3f:dd:7f:4c:6d:20:b7:72:f6:f6:71:fa:e2:69:f8:36:a8:
c4:71:b0:c6:3f:21:7d:3f:23:5c:8d:35:a8:34:d4:f1:30:bd:
3d:68:82:52:fb:f5:a2:8e:fc:03:a2:3b:36:c1:2e:cd:64:06:
4b:c8:25:f0:8a:62:32:16:d0:53:e8:aa:e7:49:df:99:68:47:
12:b3:16:a0:e6:7d:57:b5:6c:b8:25:c1:09:09:2b:ed:77:32:
93:66:e9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:50:23 2025 by rpki-client