Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BmkaexYt4M9kNbxxmaQfboUr6h0.roa
File: BmkaexYt4M9kNbxxmaQfboUr6h0.roa (raw, json)
Hash identifier: UhW4I+HfoJ9wxRV8WuDE1WmUhLq4c9exwesvNI2ab18=
Subject key identifier: 06:69:1A:7B:16:2D:E0:CF:64:35:BC:71:99:A4:1F:6E:85:2B:EA:1D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBE49EC27CB8E5D7E6DF7E9A3D3C6CA6C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BmkaexYt4M9kNbxxmaQfboUr6h0.roa
Signing time: Sat 11 Nov 2023 12:09:57 +0000
ROA not before: Sat 11 Nov 2023 12:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:be:49:ec:27:cb:8e:5d:7e:6d:f7:e9:a3:d3:c6:ca:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 11 12:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06691a7b162de0cf6435bc7199a41f6e852bea1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:45:e0:2b:f2:9f:f4:81:50:7e:86:00:5e:04:
45:a8:d3:e6:84:ec:9a:b7:be:73:34:b2:e5:cb:0f:
2d:50:bc:85:bb:8f:88:1a:0e:43:f9:fa:cc:34:2a:
78:50:1d:fb:fe:aa:6f:15:4d:93:27:1b:c9:e3:5e:
8a:a5:1c:40:f6:00:01:fe:f7:91:d5:23:b7:86:32:
c4:24:d0:50:78:78:5b:88:46:13:ce:79:ac:a7:b8:
cc:0e:16:1f:d1:21:ed:a2:9d:e7:e8:8a:3b:1b:88:
b0:34:3d:29:38:d0:35:93:83:b5:71:80:13:04:5d:
66:6c:12:9e:68:93:d6:7d:07:79:2a:93:f0:a3:46:
b4:ea:04:f4:4b:83:ee:05:7e:8c:e5:e7:87:9a:6b:
d0:93:a2:43:fe:1e:ac:17:7d:3f:56:bc:5b:9c:34:
38:69:b2:7f:eb:c9:fa:0a:16:d8:c8:f7:a0:d9:8c:
73:01:7b:97:83:91:2b:1c:13:96:14:c8:a2:b9:e6:
11:33:38:52:9a:7b:10:0f:e6:b5:82:c2:dc:f7:68:
b5:17:4d:ee:66:5c:20:e9:7a:45:df:7a:a0:20:9d:
a6:e6:9d:6e:3d:23:04:c5:79:f3:e9:d1:da:b1:31:
3c:4b:1c:22:01:3e:cd:1c:59:8d:33:60:9d:86:e1:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:69:1A:7B:16:2D:E0:CF:64:35:BC:71:99:A4:1F:6E:85:2B:EA:1D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BmkaexYt4M9kNbxxmaQfboUr6h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:93:12:89:4c:39:bb:57:20:0c:4e:c6:57:42:14:73:f1:e1:
fb:ec:e2:07:ce:03:84:e1:37:cc:61:72:3f:eb:20:5a:ad:ee:
cd:7a:d2:9e:e6:04:a7:83:0a:00:02:0f:77:1c:29:e1:ca:19:
16:e5:61:29:46:78:3d:bd:c0:46:09:45:8a:6b:10:a6:c2:ea:
8d:06:cf:cc:53:79:28:9e:e0:9a:dd:ce:08:d9:ea:1b:0f:a5:
c1:13:d6:cf:52:8b:9a:73:cb:d0:f9:7f:09:da:08:66:cf:de:
31:1a:07:4f:01:fe:23:4b:5a:8f:fa:b0:b9:e0:76:b6:49:9f:
51:b0:e9:49:9b:0d:f8:41:39:c2:7c:cd:64:f1:11:20:ac:9a:
c7:55:84:5c:61:e9:34:a1:5f:c4:2a:6f:0a:c3:15:6d:24:78:
ba:f4:71:8b:5c:bf:77:5c:e8:3a:d0:f1:ad:7d:86:77:61:a9:
a0:e0:8c:6f:9c:85:d7:42:a9:ba:ab:f5:23:0a:c7:df:c7:d3:
90:c2:5e:2b:dc:72:36:0d:e7:b7:21:f2:bc:22:8d:a2:3b:62:
88:0c:db:c2:9a:dc:3c:2a:39:b2:fb:31:02:94:c9:c2:2e:cd:
38:1a:df:c3:c6:a2:aa:12:45:74:77:8a:bc:cd:de:05:9c:e0:
90:bc:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:06:18 2025 by rpki-client