Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AIpCgoXrD53RjhWcRrddJHUPJiM.roa
File: AIpCgoXrD53RjhWcRrddJHUPJiM.roa (raw, json)
Hash identifier: 9JuEZuQ3/vCd0OaWBVGuHa8wWlARifODLljcZ7xaR/Q=
Subject key identifier: 00:8A:42:82:85:EB:0F:9D:D1:8E:15:9C:46:B7:5D:24:75:0F:26:23
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2D3CB1B9A6BB447FBA8340D6E43C0BDE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AIpCgoXrD53RjhWcRrddJHUPJiM.roa
Signing time: Sun 03 Dec 2023 01:13:21 +0000
ROA not before: Sun 03 Dec 2023 01:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2d:3c:b1:b9:a6:bb:44:7f:ba:83:40:d6:e4:3c:0b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 01:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=008a428285eb0f9dd18e159c46b75d24750f2623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:a7:76:8b:b4:dd:38:32:2d:67:de:e1:b1:
92:ea:19:c6:24:bd:98:27:36:9e:62:df:79:20:66:
34:4e:75:07:3a:70:b9:be:8a:6a:dc:7b:71:68:86:
a0:ee:31:c4:8f:e8:d7:fc:48:e5:c0:43:c0:15:2b:
45:b3:5e:40:f0:17:49:77:76:8a:1a:89:b1:8b:60:
26:f3:4a:f0:15:f2:97:80:ba:6f:2a:be:34:e1:2b:
a8:d1:d3:ff:62:e0:fa:03:97:0f:50:7c:d4:40:96:
7c:4e:99:bc:8c:37:43:18:4e:4a:fe:c8:73:35:5b:
29:43:ba:8e:aa:ab:26:84:74:34:ae:02:d5:69:fa:
de:65:5c:d2:da:65:db:97:ee:27:32:7b:f3:0e:77:
bd:83:a3:2e:b0:b2:20:d0:4d:55:f7:26:33:a3:4e:
0d:a8:f7:31:36:2f:31:88:7d:ef:72:bc:38:1c:2b:
da:d3:32:2d:70:f0:9e:e6:d0:ef:f2:29:e1:02:27:
41:01:4a:39:a6:4d:c0:5e:85:31:5d:bd:ce:15:99:
0d:d4:a5:d0:4f:e5:a4:cd:ba:31:0b:7f:c2:70:ae:
1c:21:76:c4:63:82:61:b0:ef:02:ca:96:9a:0b:25:
49:d7:77:40:74:ca:b8:7b:b8:51:76:3a:09:42:78:
2f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8A:42:82:85:EB:0F:9D:D1:8E:15:9C:46:B7:5D:24:75:0F:26:23
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AIpCgoXrD53RjhWcRrddJHUPJiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:77:83:a1:0c:22:87:01:11:01:6c:6e:07:71:d5:35:5e:e5:
da:be:51:a9:dc:a2:a5:a3:26:70:11:2c:08:a7:54:a6:3f:ec:
58:1b:c8:2c:c2:f8:43:2e:aa:04:f4:83:62:84:83:6a:1d:55:
2c:22:0d:d9:ff:67:56:b4:74:86:06:e5:e8:ba:e1:d4:66:7b:
f2:33:58:60:84:5c:14:fc:40:ab:40:01:24:c3:76:85:82:55:
f1:9f:26:b2:23:83:30:17:b5:8d:28:88:ac:09:6e:04:b9:ee:
3c:97:e8:14:88:55:71:3a:cd:f2:6f:38:89:e1:1a:6c:85:ab:
ff:1b:78:eb:41:32:db:0c:6c:00:fd:cb:cc:b3:9b:1f:f2:2b:
7e:eb:b7:ca:40:06:11:b8:8d:1c:58:80:84:a1:c8:f6:89:a1:
a5:cc:fe:87:eb:32:d5:37:10:f3:6c:7c:4a:19:1c:c0:cd:38:
ff:a8:1f:98:3c:25:06:04:77:ae:97:1d:11:79:bd:08:1b:72:
f8:b4:48:bc:b6:97:2b:f0:a9:8b:d8:67:78:79:e1:d0:e0:23:
5b:c9:2b:35:59:2f:2a:fb:c6:cd:bb:e5:12:65:5e:75:84:c9:
79:59:75:5f:80:f9:61:40:8b:af:32:5c:bc:ab:58:18:a2:6d:
9d:b9:fb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:01:25 2025 by rpki-client