Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8Mg9QprBDWkTTvKWPUBBjcyNgTA.roa
File: 8Mg9QprBDWkTTvKWPUBBjcyNgTA.roa (raw, json)
Hash identifier: FWS5LiHVww8YoZBNKwiLNa9QEKUhPStJCEkfRLu/DIg=
Subject key identifier: F0:C8:3D:42:9A:C1:0D:69:13:4E:F2:96:3D:40:41:8D:CC:8D:81:30
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF23DC1CFF4BE4BA0C86071435BD7CE2B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8Mg9QprBDWkTTvKWPUBBjcyNgTA.roa
Signing time: Tue 21 Nov 2023 14:16:55 +0000
ROA not before: Tue 21 Nov 2023 14:16:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:3d:c1:cf:f4:be:4b:a0:c8:60:71:43:5b:d7:ce:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 14:16:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0c83d429ac10d69134ef2963d40418dcc8d8130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6a:f3:ba:a6:ca:de:2c:cc:87:6d:1b:ee:f8:
18:2c:23:4e:da:0e:3c:9c:0e:3e:95:0d:47:c5:2c:
4a:5b:87:d2:8d:4c:16:38:7f:45:2a:13:b7:4a:0d:
26:30:01:c3:e1:d7:7a:dc:da:e8:44:fe:67:3c:b5:
86:5c:0f:49:85:ba:69:e0:08:84:33:6f:bf:1b:75:
85:5c:b1:5f:ef:6d:9b:0f:d8:af:f1:d0:9e:27:f3:
ce:77:0b:f2:bc:47:0e:f9:66:2e:5e:49:76:01:0d:
a2:44:4b:04:23:45:df:46:ca:c0:09:b2:bd:41:59:
43:09:db:be:be:7d:c9:25:4a:ff:aa:b9:a9:fc:e9:
5d:e3:93:e8:b8:83:02:b3:18:41:82:e8:5e:e8:17:
c6:61:8d:22:27:e9:84:57:81:2a:da:1a:ce:03:87:
68:fa:63:1a:2e:13:94:9f:5a:d1:5e:bb:8c:20:40:
54:49:73:e7:df:18:2e:fd:1e:0d:75:5c:0b:79:07:
ad:99:df:1c:61:96:d1:e5:3c:63:d4:9e:92:c3:7f:
71:fd:1d:59:a0:1e:31:3d:65:f7:5c:27:93:ba:ba:
da:c0:e4:c1:8f:a3:e4:0a:23:5f:87:b7:47:ed:32:
bc:78:62:87:90:3b:a3:f6:7f:e5:2c:1f:35:1c:60:
f9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C8:3D:42:9A:C1:0D:69:13:4E:F2:96:3D:40:41:8D:CC:8D:81:30
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8Mg9QprBDWkTTvKWPUBBjcyNgTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:e8:fe:d1:b4:d0:1e:1c:f6:87:88:ad:9b:67:1e:10:c1:92:
60:d8:35:82:99:20:e5:14:cc:28:0b:07:7c:d1:99:45:33:58:
e0:6e:7c:38:8d:c9:e0:e2:a5:38:ef:08:2d:99:fd:e3:3c:7d:
7d:e8:85:1f:16:5f:24:49:71:af:80:38:e4:e8:93:4d:5c:c3:
f3:d5:4e:0f:06:9c:c9:80:03:45:a0:bb:b0:80:38:92:61:9a:
4d:3e:f8:11:5d:ff:55:78:78:de:20:bc:f9:45:8f:61:62:6a:
20:78:4a:fe:32:6b:20:81:31:2a:1c:67:e7:db:1e:b6:d6:de:
95:42:f3:02:1b:4d:d4:c4:e3:92:ad:d6:de:fa:2a:c1:32:c5:
65:dc:05:1b:8a:ef:f9:86:59:aa:0b:91:c6:c1:50:d1:51:40:
5b:f4:12:aa:a2:0f:f4:27:62:30:d8:2c:ca:4e:ef:f0:e1:98:
82:8f:86:0a:15:c1:c6:0b:31:fb:0e:3b:4f:7b:fa:56:53:ec:
36:a7:33:f8:b5:cc:3d:1d:7a:30:13:17:f6:98:4b:29:19:bf:
b0:1c:02:80:10:0f:b1:bb:a7:1d:a7:eb:9d:ab:77:75:62:a5:
38:71:b1:9c:24:c2:ed:db:7c:ad:7a:e7:24:a6:0d:7a:94:42:
6d:5a:23:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:17:51 2025 by rpki-client