Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-b05nBofVZDkvcx8-SOK26ssTSM.roa
File: 1-b05nBofVZDkvcx8-SOK26ssTSM.roa (raw, json)
Hash identifier: gpo3vB2N7iNeTaopDa7yweUX80GpB2/7rku7HHc3FuY=
Subject key identifier: F9:BD:39:9C:1A:1F:55:90:E4:BD:CC:7C:F9:23:8A:DB:AB:2C:4D:23
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0CD92A8263EDC9E9CA15574D3DCA78BE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-b05nBofVZDkvcx8-SOK26ssTSM.roa
Signing time: Sun 26 Nov 2023 18:16:47 +0000
ROA not before: Sun 26 Nov 2023 18:16:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0c:d9:2a:82:63:ed:c9:e9:ca:15:57:4d:3d:ca:78:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 18:16:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9bd399c1a1f5590e4bdcc7cf9238adbab2c4d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:dd:0a:42:24:02:dc:c7:a1:34:fb:76:f1:
fc:b9:cc:82:21:c0:2f:ea:6a:c3:1c:6c:51:c4:c9:
73:01:a2:39:aa:fd:da:78:0c:e1:2a:59:a5:01:b7:
e2:d0:a7:f5:08:3e:6b:4a:c9:cd:0c:6a:4b:7a:66:
aa:c7:8a:0a:5d:5b:66:01:86:15:a3:4d:47:a8:d8:
84:81:8e:55:c5:e9:cd:89:98:74:a8:a8:4d:80:a5:
ff:68:3e:0a:e2:d6:0f:66:ea:06:15:28:0f:b6:bd:
e2:e0:0d:92:66:10:60:70:29:2f:23:ce:1e:9f:c5:
94:27:b5:2a:3a:8a:03:d1:7e:85:85:76:69:5d:75:
02:21:83:d8:8a:37:96:84:f8:75:1d:d3:98:02:04:
78:a4:ad:c6:ea:e7:18:eb:2a:80:93:ef:61:88:79:
b6:05:b9:eb:b0:72:5e:94:ba:3d:09:03:89:41:72:
7e:b1:1d:0f:32:59:e0:a6:5b:94:3c:bf:2e:b3:3d:
1d:51:15:8f:08:14:11:36:9a:bd:5f:d9:fb:0e:6a:
dc:90:f2:7f:f8:3d:f5:21:7c:0f:15:ee:fa:99:43:
2b:31:9a:8a:58:c6:b9:84:1a:03:01:72:b9:2e:07:
13:2f:12:d6:91:d2:4d:6c:ad:37:0c:79:98:bc:d9:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BD:39:9C:1A:1F:55:90:E4:BD:CC:7C:F9:23:8A:DB:AB:2C:4D:23
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-b05nBofVZDkvcx8-SOK26ssTSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:83:30:60:e6:f3:29:95:65:bd:00:bf:b1:6b:d8:8f:bc:32:
20:96:87:cd:68:54:22:7e:9c:fc:6e:45:23:cd:ae:82:a2:21:
36:50:a0:44:3e:4c:6c:00:29:b2:36:a6:22:4b:0a:f4:57:57:
28:fc:04:15:18:3f:68:5f:fe:14:1a:2e:36:78:d5:74:a6:21:
e2:d2:84:ce:dd:68:8b:cd:19:99:55:67:55:c1:9b:12:94:1d:
c1:fb:de:d0:5c:96:4a:0c:29:43:85:69:7c:a4:e6:90:78:c0:
25:1a:0b:8f:22:5e:bc:ce:4d:d9:07:3d:db:fd:7c:ed:21:f8:
ef:92:98:07:45:2b:e3:09:a3:7c:b9:ad:15:68:d3:bd:6a:2e:
dd:75:40:b7:33:5a:52:aa:3e:c3:cd:d8:0e:ae:fa:72:b6:d8:
53:40:68:1c:4c:42:57:5c:4d:76:b4:61:fb:a2:3a:89:ef:39:
d9:ad:55:ca:50:a8:fc:96:ba:46:34:79:f5:50:58:04:4e:5d:
1c:ec:87:3b:7f:e4:18:70:62:b2:5d:cf:ce:83:86:9b:30:5a:
df:ed:7b:3d:b3:2d:88:df:9e:82:72:8c:ed:18:97:5d:18:3a:
dd:69:f1:5f:ae:cc:a6:c8:8b:7e:af:12:9d:e0:f8:d3:cb:58:
3e:49:07:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:48:26 2025 by rpki-client