Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8LJxJLRYOR7hxFpVzsYIy1ll9P4.roa
File: 8LJxJLRYOR7hxFpVzsYIy1ll9P4.roa (raw, json)
Hash identifier: 8fn+qVosXj3Fra0SvGHVwbVpYCQfiYqr9spbZMc0Tl4=
Subject key identifier: F0:B2:71:24:B4:58:39:1E:E1:C4:5A:55:CE:C6:08:CB:59:65:F4:FE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C58AF359A3A1BFBE06D7CD40D0DCDF8C8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8LJxJLRYOR7hxFpVzsYIy1ll9P4.roa
Signing time: Mon 11 Dec 2023 11:42:06 +0000
ROA not before: Mon 11 Dec 2023 11:42:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:af:35:9a:3a:1b:fb:e0:6d:7c:d4:0d:0d:cd:f8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 11:42:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0b27124b458391ee1c45a55cec608cb5965f4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:7a:8e:e6:ce:0b:11:a1:0c:33:a4:cc:2a:
48:b7:14:cb:3a:8e:7a:86:61:22:f1:ba:ed:a6:ca:
f0:9a:43:92:ab:61:20:00:a3:b0:be:bd:32:07:67:
f3:8d:21:31:eb:15:e1:9c:4a:03:00:d4:8e:88:1c:
d7:59:45:24:a6:14:d7:54:95:df:ba:ab:53:1b:0a:
39:cd:5b:79:64:11:89:3a:2e:0c:8a:c3:6f:17:bc:
b8:3b:c1:54:8d:63:9d:3c:7e:b4:45:b7:d7:5e:a0:
98:d8:a7:1f:62:07:d3:53:31:ff:fe:f3:85:ea:c3:
dc:f3:68:1a:24:1c:b7:d6:de:06:47:eb:2f:10:0b:
b0:9a:d9:37:f3:68:e2:29:bb:85:8c:a7:29:29:57:
99:33:8a:ff:c4:8b:4d:42:12:78:00:17:16:58:7a:
98:f0:a9:07:a0:c3:23:be:a5:32:6d:71:07:ed:ff:
0e:56:da:d9:fb:05:fe:dd:a3:b5:2b:92:7b:97:e1:
17:01:69:0a:cf:de:70:07:f0:f2:ce:0d:f6:7b:98:
c8:a9:58:5e:6f:a8:76:92:ae:10:42:c9:ed:d7:3d:
93:ee:6d:1e:48:26:31:36:59:97:0a:ed:39:0e:30:
0e:fa:98:c7:29:f1:40:2f:2b:78:48:88:2d:98:9f:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B2:71:24:B4:58:39:1E:E1:C4:5A:55:CE:C6:08:CB:59:65:F4:FE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8LJxJLRYOR7hxFpVzsYIy1ll9P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:b8:b0:9f:9b:de:60:d5:7d:73:96:db:cd:43:d3:f4:0a:fb:
af:e5:59:79:e0:17:47:d2:05:d4:4f:0d:5e:33:e0:a2:50:09:
46:c9:74:bd:f7:11:8b:0a:3e:eb:c6:91:29:f9:77:0b:db:50:
9d:71:9e:59:0b:c3:9e:3d:d3:30:f1:e0:b4:de:23:b9:ae:0b:
56:f3:92:3a:8d:68:d6:b8:08:1a:1a:2c:f6:86:ae:90:06:50:
0a:b1:2d:73:38:ab:f5:af:d6:30:3e:d9:07:9c:1a:a1:8a:c0:
b0:c4:af:32:b9:a5:c4:3c:7b:58:08:d0:a1:fa:76:b8:30:9c:
ca:93:2b:90:55:b9:cb:95:2a:32:18:23:d1:24:b5:0c:14:fc:
04:91:0e:c2:48:90:b5:00:8b:b4:32:5e:d3:27:b5:07:78:56:
2a:03:a6:f0:00:46:c2:b7:b1:3f:47:13:ec:84:a1:48:1e:4b:
c5:b3:62:a8:25:c5:5f:1b:ac:11:a7:be:d7:0f:bd:18:64:16:
db:a3:93:42:1c:0a:0f:3e:82:b8:67:75:9f:b8:8e:3d:2c:e1:
44:5b:0f:b5:cc:a0:0e:65:8f:e6:23:20:9a:02:dd:0c:47:35:
89:6e:ea:2b:ac:b9:84:71:44:b1:27:a9:cd:d4:4e:1d:ce:ce:
39:c6:fb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:21 2025 by rpki-client