Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-Iq9jotdP43kR7oUk9w6HXgaqJQ.roa
File: 1-Iq9jotdP43kR7oUk9w6HXgaqJQ.roa (raw, json)
Hash identifier: 1BO+2/ZPRV4/724PkALNSI91jdKgvvb0sRvNqtNoQJM=
Subject key identifier: F8:8A:BD:8E:8B:5D:3F:8D:E4:47:BA:14:93:DC:3A:1D:78:1A:A8:94
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B44D22CB70A060628FFD7B7DFE7F60E71
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-Iq9jotdP43kR7oUk9w6HXgaqJQ.roa
Signing time: Wed 18 Oct 2023 22:05:06 +0000
ROA not before: Wed 18 Oct 2023 22:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:44d1:805f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:44:d2:2c:b7:0a:06:06:28:ff:d7:b7:df:e7:f6:0e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 22:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f88abd8e8b5d3f8de447ba1493dc3a1d781aa894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:17:58:2e:6a:f6:43:27:d5:37:ae:6b:d3:
50:e3:50:c9:7f:a5:6e:c0:fd:75:ec:52:95:d4:9c:
41:98:97:08:e2:4c:0b:15:57:4e:a5:a5:20:da:06:
10:92:a5:eb:94:71:05:3c:50:89:ad:82:19:3a:40:
22:3e:83:f1:c7:84:b2:29:b9:23:bb:39:56:16:3b:
2d:90:aa:b7:10:ef:a9:40:e6:72:49:8f:d4:33:8d:
e2:6b:17:4e:3e:d6:11:a2:ea:15:69:d1:42:60:9e:
16:99:2d:b9:7d:19:15:f9:54:a3:8b:69:cf:50:32:
39:78:84:b6:b4:7b:48:2a:ab:10:4b:ae:30:7b:4e:
f6:3d:ba:7f:d4:05:92:29:20:b9:dc:89:94:46:99:
6a:dc:a6:9d:7d:fe:da:56:e4:3a:da:2d:9a:83:5b:
eb:08:3d:a5:f5:51:92:63:35:f3:5c:49:fe:14:3c:
0f:ad:e8:8b:3e:67:50:c0:e6:c2:53:fe:c2:4e:22:
d5:3e:09:92:c5:ab:82:72:35:50:61:14:d5:7d:d4:
81:21:30:49:dd:bf:00:83:91:12:a3:19:17:c9:4c:
7c:24:91:e6:b3:bf:66:bb:09:c4:49:8e:37:8c:e4:
4a:0f:1b:14:53:89:4b:0e:44:cc:7d:f5:97:77:20:
88:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8A:BD:8E:8B:5D:3F:8D:E4:47:BA:14:93:DC:3A:1D:78:1A:A8:94
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-Iq9jotdP43kR7oUk9w6HXgaqJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:8d:7d:00:ac:13:81:13:21:e6:b9:9e:64:88:f7:07:bc:e2:
de:dd:35:f2:4e:f8:92:d9:11:cf:ae:b7:d8:ee:12:7d:d1:f4:
f2:93:30:70:20:2c:58:5d:3f:d9:27:59:c9:bd:36:cf:d6:dc:
10:49:9f:d3:46:cb:98:6b:cf:2b:f1:c7:e9:86:49:d8:10:53:
c3:ad:e5:19:c7:86:23:91:60:49:71:47:c3:19:3e:b3:0a:22:
71:53:10:96:02:db:cf:a5:f5:2f:e3:62:04:60:7e:99:9d:95:
94:60:81:b7:e6:80:52:0b:a4:9f:cd:9d:9e:4f:8f:e9:d7:db:
61:c8:30:d4:6c:36:24:10:bb:0f:f8:22:41:91:a7:ef:37:7c:
4c:7a:6e:45:8e:61:50:e0:9b:6f:e1:83:78:4f:aa:fa:29:5b:
37:2c:4a:7f:4d:37:6d:9b:a5:d1:e4:f6:96:c8:1a:12:f7:39:
11:15:4a:fb:27:0b:ab:f5:21:93:99:3b:9f:ac:d3:c8:8d:b8:
c5:04:94:b5:95:db:c7:b7:bc:2b:40:20:1b:e4:af:62:a2:b7:
42:3c:ad:4a:05:90:d8:64:5c:96:bc:4c:a1:d8:fb:62:50:4c:
78:2a:c2:e6:67:82:5a:fe:c5:f1:a1:87:3e:bd:b1:40:c3:8b:
52:44:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:20:15 2025 by rpki-client