Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t9l3Hugomx5dUVEIsblFSFqdhmI.roa
File: t9l3Hugomx5dUVEIsblFSFqdhmI.roa (raw, json)
Hash identifier: qcvq9Z9w5Yl1vijVrQUxhwt/xIUqwKM1+VcMTvIAMes=
Subject key identifier: B7:D9:77:1E:E8:28:9B:1E:5D:51:51:08:B1:B9:45:48:5A:9D:86:62
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE782F859D4849432415EB4AA671A9B00
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t9l3Hugomx5dUVEIsblFSFqdhmI.roa
Signing time: Sun 19 Nov 2023 12:16:41 +0000
ROA not before: Sun 19 Nov 2023 12:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e7:82:f8:59:d4:84:94:32:41:5e:b4:aa:67:1a:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 12:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7d9771ee8289b1e5d515108b1b945485a9d8662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:31:cc:58:cb:de:30:72:8b:ec:3d:64:e7:
4a:10:b2:6b:55:49:87:62:3b:07:01:c6:5f:72:7d:
3f:18:c0:12:11:0a:00:e6:65:36:be:a4:18:34:bc:
22:b7:19:d1:be:e7:f3:27:65:9b:6d:24:03:89:b1:
c0:ba:d6:14:99:72:91:7c:d9:82:24:dc:25:19:cd:
59:1e:1b:c2:86:38:2f:5e:f2:ab:48:57:ad:3b:e2:
29:5e:57:0b:e0:75:ac:fa:d2:1e:31:8e:6f:86:40:
a1:40:b0:83:d9:fa:28:b0:97:37:de:41:67:fd:0b:
41:d8:db:be:51:22:5c:50:ea:95:3d:1e:de:fc:b8:
d9:8c:72:d2:b7:e9:dd:26:74:fe:08:95:3d:5d:1d:
fc:32:19:f3:e1:a3:a3:a6:54:59:0a:77:65:67:75:
5e:60:2e:d3:e0:cc:f9:db:69:a1:e2:7c:4d:1f:3e:
eb:cd:ae:d2:de:2d:dc:ff:56:6d:33:20:46:e3:3d:
14:c1:19:81:fb:ad:95:f6:90:34:f2:27:55:06:a9:
b2:74:13:66:7f:73:4b:06:08:6e:b0:2c:43:3b:f2:
71:4e:bf:09:bf:f7:16:93:c2:76:0e:92:22:7d:83:
6a:c7:de:eb:c3:c0:7d:58:09:3e:dc:93:be:02:f9:
13:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D9:77:1E:E8:28:9B:1E:5D:51:51:08:B1:B9:45:48:5A:9D:86:62
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t9l3Hugomx5dUVEIsblFSFqdhmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:99:76:2b:d4:c2:0e:c1:65:fc:15:c3:42:ba:37:16:56:6d:
9c:12:93:1b:17:ad:44:1c:77:1d:05:af:4a:7c:7a:14:b3:8e:
8d:50:d3:ff:cc:55:b4:c5:26:44:90:43:28:66:4b:4d:e0:7b:
8d:4e:56:0c:e7:ae:50:44:66:76:00:d0:16:31:cb:cd:0c:55:
93:d0:ec:e6:50:12:de:4f:0c:cc:94:83:ad:90:ea:2b:75:42:
16:af:77:9f:95:a9:b0:3d:97:9d:63:0e:87:1f:56:c2:2b:44:
3e:af:d1:82:1c:62:4f:ae:34:94:75:3c:fe:91:6f:0f:de:a4:
95:12:be:b1:e6:64:25:4d:56:23:8a:22:6e:53:20:66:ec:e1:
77:72:69:af:93:db:20:2a:d2:46:05:42:9b:91:36:8e:90:24:
26:72:08:6d:22:57:4e:e5:0e:6b:2d:de:64:88:f3:8f:35:43:
97:2f:0e:2e:cb:58:68:b6:e1:af:a1:4a:4a:79:15:a7:ba:94:
9d:06:f0:6d:a0:e5:2f:70:4f:c9:51:c1:40:ab:b2:5a:0e:3c:
89:24:d2:66:26:21:e2:79:ed:f5:ca:b0:45:91:ab:4f:43:ff:
0d:fb:9e:4c:a8:f6:a1:9d:46:d0:0e:29:3b:af:1c:09:c3:6d:
df:13:83:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:47:46 2025 by rpki-client