Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L9OohN9F5YwluoLuG1-m_KjxjZs.roa
File: L9OohN9F5YwluoLuG1-m_KjxjZs.roa (raw, json)
Hash identifier: gK5J5gS0VlROOyn1TKj0XuZzqWeD4lfFpJ4++p9+WZw=
Subject key identifier: 2F:D3:A8:84:DF:45:E5:8C:25:BA:82:EE:1B:5F:A6:FC:A8:F1:8D:9B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C691310B49B4D4988138B8AB26F95825D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L9OohN9F5YwluoLuG1-m_KjxjZs.roa
Signing time: Thu 14 Dec 2023 16:05:06 +0000
ROA not before: Thu 14 Dec 2023 16:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:6912:7c1e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:69:13:10:b4:9b:4d:49:88:13:8b:8a:b2:6f:95:82:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 16:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fd3a884df45e58c25ba82ee1b5fa6fca8f18d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0b:26:97:f4:6b:68:76:3d:bd:b7:5c:02:15:
8e:ff:aa:30:ef:68:3e:7e:3a:14:48:2e:69:70:06:
cb:f5:2e:5b:e4:64:03:84:08:c1:2c:07:c8:55:4a:
b4:2f:3a:08:d2:9b:88:ad:e3:62:86:c5:eb:51:93:
4a:aa:be:2e:1a:04:02:7a:ff:97:17:aa:3c:b6:ae:
de:5a:47:a6:58:96:08:f6:57:7f:0f:f7:4c:ff:48:
c0:c6:99:2c:fb:76:13:1c:95:a9:64:74:a0:e6:47:
17:a2:33:b8:81:08:a1:9c:7d:0e:8b:41:7b:51:62:
12:62:68:1c:99:75:12:7f:0c:e6:cd:09:43:44:fe:
28:16:68:f1:ad:fa:c3:c5:ae:ce:00:fa:e7:6c:36:
31:ba:9e:eb:b4:3c:7a:ff:6f:9d:d5:5d:9d:ad:f3:
d4:0c:c2:0f:b8:cb:00:4f:5a:e9:1e:6b:8e:16:6a:
4a:1f:28:90:80:cd:07:4b:8f:3e:0a:8b:a9:5e:93:
54:5f:82:8f:a8:ce:64:68:ef:1d:7c:da:8b:53:c6:
ab:d5:5b:51:b2:99:b6:71:a3:b7:6e:ca:b3:5a:25:
78:03:7a:06:f4:5f:e8:c4:49:36:71:cc:14:87:aa:
3f:ab:ce:76:01:7e:ef:bf:66:de:0e:5b:38:a5:f2:
b4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D3:A8:84:DF:45:E5:8C:25:BA:82:EE:1B:5F:A6:FC:A8:F1:8D:9B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L9OohN9F5YwluoLuG1-m_KjxjZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:16:3d:75:d1:8c:b2:71:a7:d5:9a:bc:8e:c8:11:ce:b5:09:
05:d0:01:0a:af:57:ea:ca:24:32:fd:2a:8a:57:ad:82:02:f4:
a8:2f:ff:39:00:f0:15:c6:99:c7:40:03:4f:55:8a:3f:b1:d9:
dd:3c:7d:94:03:27:2d:35:22:b0:1d:59:95:44:62:e4:eb:d5:
a2:6f:d8:17:af:a1:a0:23:40:3c:77:83:48:f8:51:4f:79:1f:
53:2c:45:5f:d0:f6:92:59:b0:c9:3e:2d:8e:84:99:ba:89:7c:
92:25:de:35:75:8b:4f:95:51:6e:b5:87:f7:b5:e4:a6:8a:4f:
d9:ce:45:4d:5c:78:72:62:a9:1f:ee:ea:ed:c1:6a:19:20:b9:
ff:82:06:42:f1:35:5e:ef:10:67:f6:34:46:13:88:0f:fa:d4:
f2:cc:af:9a:29:10:15:21:a5:b9:31:b4:be:16:a4:ee:38:d0:
d7:c1:c5:36:18:81:3e:4f:1b:63:17:24:79:9b:a8:d8:27:e4:
c2:98:69:7f:31:6a:7e:c0:fc:01:b3:0b:f1:64:7e:42:11:0c:
dc:61:2a:a0:bf:6d:fc:12:0d:e2:4d:00:2d:eb:61:b0:dd:1f:
52:56:6b:82:eb:ce:e0:bb:4c:50:ac:16:91:db:af:99:07:69:
f4:22:a1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 01:11:36 2025 by rpki-client