Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rJFZjo-_Y5zhRMzNTPHtAuZnmBI.roa
File: rJFZjo-_Y5zhRMzNTPHtAuZnmBI.roa (raw, json)
Hash identifier: Pxt99DzFus3c7ho/pftOJ5rSMMQkhSg99Wr2mySA1Yw=
Subject key identifier: AC:91:59:8E:8F:BF:63:9C:E1:44:CC:CD:4C:F1:ED:02:E6:67:98:12
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7A7CC3E3337FB63753C385E57EC9E833
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rJFZjo-_Y5zhRMzNTPHtAuZnmBI.roa
Signing time: Mon 18 Dec 2023 01:14:06 +0000
ROA not before: Mon 18 Dec 2023 01:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7a:7c:c3:e3:33:7f:b6:37:53:c3:85:e5:7e:c9:e8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 18 01:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac91598e8fbf639ce144cccd4cf1ed02e6679812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:07:f8:ad:86:5e:40:ac:77:52:b7:c4:96:
ad:54:78:41:19:de:84:40:00:aa:9e:b9:06:cb:7f:
ca:54:28:15:0b:c1:f2:86:26:cb:8d:77:5a:a0:61:
ce:68:e8:80:e7:0e:0d:f7:22:e1:36:a7:1a:22:0c:
53:76:ea:14:f3:c7:e3:5a:e0:2a:99:bb:c7:54:47:
5e:4c:bd:cc:b1:0c:a2:b3:60:28:34:98:e3:17:8a:
34:f1:70:54:f0:20:89:b0:1e:0e:d8:ce:ca:3c:66:
a2:c1:80:d3:87:51:40:d4:47:54:56:5b:e4:6a:c9:
95:38:16:8f:38:5d:79:54:7d:03:2f:26:32:0b:9f:
88:b3:15:e5:63:95:3b:73:0d:e9:30:72:eb:25:9d:
78:ed:f1:8e:a5:a1:f2:13:1a:e9:a4:f8:32:74:68:
e0:a0:9b:a5:c4:ba:cc:0e:19:fd:05:8a:f6:fb:11:
d5:27:e4:7e:88:20:ed:6b:c6:c8:c6:85:9c:d2:41:
64:a6:72:0e:fd:74:ab:c5:37:67:58:46:b8:cf:3c:
cf:71:0f:b4:16:3f:6f:8e:ae:2a:98:49:33:b0:ee:
a6:1e:19:73:b4:94:22:f5:0d:e6:ca:89:f9:c2:d0:
65:04:c8:32:da:a9:ee:f0:e0:ad:6f:bc:3a:c1:f1:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:91:59:8E:8F:BF:63:9C:E1:44:CC:CD:4C:F1:ED:02:E6:67:98:12
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rJFZjo-_Y5zhRMzNTPHtAuZnmBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:b6:2b:51:c8:7d:80:06:ac:e7:80:e5:3a:ea:37:41:97:ab:
66:3a:c1:2d:2b:15:c3:22:c9:aa:61:7d:d0:87:0d:a2:59:a3:
7b:73:da:29:48:53:99:2f:4d:50:3d:8b:74:59:99:ee:19:01:
17:6c:ee:c3:01:63:96:28:fa:1f:a5:52:fa:4d:0e:b3:fa:99:
f0:8a:e0:53:99:f8:2b:bf:4f:4a:25:a7:8a:e3:fb:e4:23:26:
d6:3e:33:37:30:f5:59:c9:66:dd:21:d9:c1:e9:75:de:2a:59:
4b:f7:ea:d3:05:3d:7f:11:f3:7b:fd:35:d5:2c:9b:fe:43:07:
e5:f1:00:a7:f8:2f:f9:a4:62:86:92:0f:51:9c:22:21:fe:0f:
a5:af:bd:d1:20:d2:6b:c7:ed:b4:dd:71:29:ec:0d:06:49:8f:
da:a4:c6:01:a1:6f:c1:fe:77:3c:21:df:63:1a:95:4a:c5:0c:
ce:32:f2:42:53:b8:64:04:e4:81:a5:1b:f8:64:dd:46:11:6b:
4c:ba:19:ff:d3:ae:9c:65:84:96:ac:a2:fd:e4:e1:ba:b4:0d:
52:d8:0c:5c:58:9d:7e:95:74:83:fe:67:5e:b6:8e:87:c4:cf:
65:59:6c:1a:a9:7a:21:56:ff:25:19:98:71:fb:3f:cf:7d:43:
e0:ff:61:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:33:39 2025 by rpki-client