Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ATSPmaJCQL-C7C1TNa5n7MV08aw.roa
File: ATSPmaJCQL-C7C1TNa5n7MV08aw.roa (raw, json)
Hash identifier: QxaRnEv6NSV6Ynq5Bi76W29a11/Dn61FX2US38kPTXI=
Subject key identifier: 01:34:8F:99:A2:42:40:BF:82:EC:2D:53:35:AE:67:EC:C5:74:F1:AC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B864F73E98D0932913F69A9D7DF27DACC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ATSPmaJCQL-C7C1TNa5n7MV08aw.roa
Signing time: Tue 31 Oct 2023 15:17:15 +0000
ROA not before: Tue 31 Oct 2023 15:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:86:4f:73:e9:8d:09:32:91:3f:69:a9:d7:df:27:da:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 15:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01348f99a24240bf82ec2d5335ae67ecc574f1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a4:72:26:01:9d:97:08:a1:bc:3f:40:bb:3b:
72:ca:5e:ad:57:41:bb:c8:fc:60:9e:21:a8:d8:e4:
e1:e5:e0:e9:39:f4:05:5b:5f:d8:57:4a:12:72:45:
af:fc:4c:92:80:c7:26:c5:da:bc:47:60:97:55:d5:
ce:32:39:47:66:7a:97:a8:21:29:d6:47:70:59:6a:
57:4d:6c:e3:58:ba:4b:69:dc:47:1f:3b:79:31:34:
0c:dd:6c:30:14:70:28:25:f6:bb:56:4f:5b:37:12:
c3:ac:dc:85:69:2a:9f:78:3b:7f:10:f8:55:f9:a1:
cf:72:80:1b:f8:cc:70:ea:f0:4f:78:81:8f:99:1e:
06:23:25:1c:e5:82:81:3f:d1:4d:7a:a3:97:47:ee:
87:ed:83:2b:f9:ca:b0:a5:b1:15:d7:e4:7b:db:f3:
68:29:76:bf:2e:bf:5a:bc:2e:18:f3:31:d7:3c:57:
f9:1b:68:79:a1:98:9a:27:4d:36:e9:89:76:a3:1a:
0d:4e:f6:ae:62:fa:62:e0:22:4d:b5:41:54:7e:86:
c3:57:62:6a:43:7c:b9:ee:6a:ad:a2:86:f5:a3:4a:
89:8c:a0:8d:81:c5:9e:d0:04:8b:8b:9d:8c:bd:e3:
ff:91:b6:08:e1:f1:95:a3:e8:4c:ac:f7:b1:d1:63:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:34:8F:99:A2:42:40:BF:82:EC:2D:53:35:AE:67:EC:C5:74:F1:AC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ATSPmaJCQL-C7C1TNa5n7MV08aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d3:19:a1:7d:dd:85:31:be:f3:80:4e:9e:76:a4:15:9b:1b:1e:
fa:d4:f9:1e:0a:a0:f9:6c:12:87:bd:27:99:d7:c9:fe:7b:a2:
b6:e5:ae:af:8a:ca:c3:d8:4f:21:11:f5:d4:61:27:69:87:3c:
72:4b:f6:e9:af:05:dd:cd:de:f5:e1:0e:4f:e1:29:70:a8:5a:
03:1d:21:14:30:0a:61:c5:31:da:c0:c7:cc:25:21:d9:8e:e8:
3a:83:1c:e2:f3:27:36:5c:51:28:d3:0f:6e:24:e1:7d:93:18:
1b:b6:c9:68:75:ac:2b:3e:2a:b9:83:9d:9d:07:49:02:15:bb:
62:99:3d:ed:93:7b:3b:0a:3b:8a:3f:f3:c8:2a:1b:f7:a9:d3:
7a:c2:93:6c:87:78:21:5e:48:73:21:51:7a:36:74:4a:dc:a5:
73:92:f8:83:e0:6f:95:2d:eb:96:97:1d:44:f1:9b:c3:2d:c6:
e8:d5:7f:74:88:fe:c8:99:cd:ec:bb:99:83:02:8d:b7:b8:2a:
a6:44:80:32:e0:21:16:26:49:d6:6b:9a:99:ed:be:0c:26:c4:
00:ad:a9:a9:bd:8a:98:01:96:ce:49:3b:6e:a8:52:0b:10:6d:
67:17:dc:16:18:34:f7:40:c8:72:ab:4e:20:70:c5:e3:c5:67:
38:42:65:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:10:43 2025 by rpki-client