Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/r9tUsR14DjNMAtIwPPmhdKssoyk.roa
File: r9tUsR14DjNMAtIwPPmhdKssoyk.roa (raw, json)
Hash identifier: VVXJSknAuLQP5kAjdiFR7aExiNR81XaBbMj/c8msgZ4=
Subject key identifier: AF:DB:54:B1:1D:78:0E:33:4C:02:D2:30:3C:F9:A1:74:AB:2C:A3:29
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA03B332674DBCD2BBAE8CC4DDECEBF2A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/r9tUsR14DjNMAtIwPPmhdKssoyk.roa
Signing time: Sun 05 Nov 2023 16:05:16 +0000
ROA not before: Sun 05 Nov 2023 16:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:a03a:554a/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a0:3b:33:26:74:db:cd:2b:ba:e8:cc:4d:de:ce:bf:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 16:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afdb54b11d780e334c02d2303cf9a174ab2ca329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:2a:4a:83:d3:33:5b:5e:2d:45:7d:65:a4:
8b:73:83:93:ff:86:7a:7e:7a:d9:c4:53:82:20:93:
b4:60:fe:1e:d0:05:91:9d:47:6d:6e:50:bf:1a:7f:
d4:18:d7:82:84:0a:27:89:28:83:0d:01:69:04:cf:
1d:b5:ed:64:8b:05:ec:69:da:a1:04:50:d5:3c:6b:
59:ed:2b:68:f1:b4:0e:88:d0:40:c0:52:52:d2:1a:
65:af:ea:57:ca:5e:db:14:e6:65:19:2a:60:d8:16:
1b:17:32:40:fd:05:60:6d:a1:fe:7a:ed:61:31:ff:
7e:e9:28:1a:de:6b:c8:f6:2f:f5:83:8e:fd:06:49:
14:ec:1d:e9:c1:db:c2:95:38:7b:2a:84:34:6d:26:
0d:2b:91:60:3f:31:c4:4f:c1:02:f9:28:4d:6f:48:
c2:67:3a:64:71:39:1a:c2:f4:96:09:56:64:ed:58:
6c:45:aa:11:fb:02:3c:6a:8d:95:75:6c:d0:14:61:
d9:55:ea:99:9f:c7:ed:69:3e:80:7a:5d:77:94:83:
b2:89:92:9a:42:44:ae:b5:4c:8f:20:a5:2c:04:3e:
49:d4:b8:e0:12:26:3e:b5:60:66:3e:24:dc:ba:a1:
e0:85:9d:76:4e:a5:a0:1e:55:2a:c1:fc:d6:ef:76:
99:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DB:54:B1:1D:78:0E:33:4C:02:D2:30:3C:F9:A1:74:AB:2C:A3:29
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/r9tUsR14DjNMAtIwPPmhdKssoyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:56:5a:68:b0:6e:83:de:9e:31:43:63:c5:61:63:c6:ed:bf:
38:fd:b1:8f:a0:67:ea:5b:81:b1:89:d1:6a:ab:9d:3c:dd:36:
31:1e:24:d6:fc:cf:15:bf:c3:eb:da:c6:79:9b:63:74:2e:4f:
00:55:c6:70:8b:b2:af:ef:02:bb:9c:24:71:0f:d2:17:cd:0b:
21:46:d9:61:7f:86:60:1d:98:1f:aa:63:7e:59:a3:f8:ef:76:
83:2e:65:19:73:a4:23:eb:3d:b7:9b:22:d4:5a:ad:82:c9:3d:
9d:9f:5a:9c:40:38:67:17:3a:ef:d3:37:2f:bf:a1:dd:5b:2e:
0c:18:cb:27:bc:dd:d6:7a:f0:71:5b:34:49:ab:3c:a9:51:7e:
7b:06:a1:31:2a:cc:b9:4b:b0:7a:03:0e:c5:05:69:7e:5d:3c:
f6:2d:18:c3:ed:2b:ae:5f:d9:51:27:ae:9b:3f:15:05:ce:c9:
5d:9f:f9:1b:a3:4a:f6:60:16:62:31:61:9c:f4:8c:c4:e8:82:
26:d2:b5:4e:f2:13:ec:4c:9f:e2:00:95:8e:e7:ff:54:f3:75:
cf:21:38:e4:9d:1b:0c:d4:15:da:44:7c:1d:79:3e:ca:08:32:
37:81:97:f4:31:b3:08:16:68:c8:d1:fd:f1:e7:c0:e0:1d:ae:
eb:63:ed:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:52:23 2025 by rpki-client