Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-kRo3wqQzrYE4enNiYXoEo1dqGU.roa
File: 1-kRo3wqQzrYE4enNiYXoEo1dqGU.roa (raw, json)
Hash identifier: 2ydouy6Cc8FEvtLBRWT0+mI+8Kgeg97ScO3Pk8AUHoM=
Subject key identifier: FA:44:68:DF:0A:90:CE:B6:04:E1:E9:CD:89:85:E8:12:8D:5D:A8:65
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BABD61E4258B6E317B482E98118A0F6D8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-kRo3wqQzrYE4enNiYXoEo1dqGU.roa
Signing time: Tue 07 Nov 2023 22:10:18 +0000
ROA not before: Tue 07 Nov 2023 22:10:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ab:d6:1e:42:58:b6:e3:17:b4:82:e9:81:18:a0:f6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 7 22:10:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa4468df0a90ceb604e1e9cd8985e8128d5da865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:04:23:58:5f:08:a0:22:12:cf:62:3a:a6:aa:
77:ba:55:0b:7a:57:4c:69:07:e1:11:9f:52:20:d9:
97:2a:51:ae:1c:d1:2c:53:4d:b0:20:c1:a4:38:c0:
10:21:3b:44:bc:91:89:65:4d:81:1a:6e:3b:62:2f:
4b:40:23:12:3a:0f:7f:c3:f1:1f:0b:59:a2:ca:1d:
32:02:42:a3:43:ab:83:da:4a:79:de:38:2e:dc:4f:
99:b7:c9:85:6b:b0:08:03:25:03:d4:3f:ea:56:6e:
29:a2:d3:88:d2:2e:e0:15:53:cc:96:b5:2f:5f:a2:
16:3b:2d:54:0d:ea:b1:f3:a0:44:13:2c:67:08:63:
59:27:ee:78:55:b6:d5:ef:3d:3b:db:05:c0:6b:3d:
c2:af:fb:5c:0f:92:d8:5f:30:78:4d:55:2a:4f:b4:
1a:6a:3b:4b:ab:f6:98:7a:c2:ff:8b:25:76:df:04:
c9:33:e3:21:32:7c:fa:9c:55:f4:10:ac:99:3f:f0:
5d:ea:d0:7d:e0:d7:7f:47:79:ac:de:80:db:72:75:
fb:b1:ea:0e:c5:02:1b:d8:2f:2b:2d:fb:85:7e:fe:
35:6d:a7:fe:ae:e9:c6:66:04:52:08:0c:4a:51:b8:
83:d1:e7:88:22:8f:41:69:96:3b:4b:e0:88:68:d2:
d7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:44:68:DF:0A:90:CE:B6:04:E1:E9:CD:89:85:E8:12:8D:5D:A8:65
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-kRo3wqQzrYE4enNiYXoEo1dqGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:7b:52:6d:8b:90:10:f6:a1:98:2a:88:e5:a0:44:80:41:fa:
d2:7b:f5:d9:98:2d:26:8f:e6:0b:cd:3b:3b:1e:1c:ad:33:6f:
56:72:95:45:a8:bd:6c:8f:8f:58:1c:04:cd:9d:9f:47:53:f9:
e8:09:52:40:d2:d4:bf:4a:cc:78:9e:4c:aa:81:97:e4:d6:c3:
44:78:06:39:d9:63:98:ea:12:5c:24:b6:f4:09:46:08:39:95:
b2:67:f2:d6:d5:f3:ff:a1:fd:05:e9:10:49:43:fa:91:e6:a4:
8f:19:2a:11:4f:48:1d:48:db:0b:c8:a9:0a:6e:e4:cb:0b:13:
2e:84:d0:bd:39:21:a9:9b:93:7e:0d:71:94:54:2a:50:66:59:
ec:05:19:6a:9e:b6:90:1d:6e:49:4d:65:83:3a:a6:a0:a2:d6:
68:c0:65:5b:f2:33:a4:f5:75:83:ca:69:81:07:32:b0:79:2f:
bd:7c:9c:bd:1f:8c:31:ce:24:85:67:fa:42:3b:fd:d4:d7:b2:
1e:79:41:f3:99:ee:d6:6d:46:6f:c5:de:59:aa:b3:2a:43:e2:
bc:45:d4:c3:ac:89:f5:02:1b:6e:83:bf:32:74:0b:dc:74:96:
2a:07:70:08:f7:db:5b:f3:aa:9c:95:d6:54:c6:13:57:a3:36:
48:8a:c9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:43:22 2025 by rpki-client