Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/I1O2qhntW20CO7r_NnFjATr8Mok.roa
File: I1O2qhntW20CO7r_NnFjATr8Mok.roa (raw, json)
Hash identifier: eB5joe8DPnnMRYmAyqk4t2SBAs0M+ABW6hShmzfrQpk=
Subject key identifier: 23:53:B6:AA:19:ED:5B:6D:02:3B:BA:FF:36:71:63:01:3A:FC:32:89
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAA5940DD3F38D4FDEDC7B05106EAC1DD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/I1O2qhntW20CO7r_NnFjATr8Mok.roa
Signing time: Tue 07 Nov 2023 15:14:17 +0000
ROA not before: Tue 07 Nov 2023 15:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:59:40:dd:3f:38:d4:fd:ed:c7:b0:51:06:ea:c1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 7 15:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2353b6aa19ed5b6d023bbaff367163013afc3289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3b:e0:93:8e:3e:7d:bf:5b:16:3f:4c:d5:18:
c9:b7:75:de:73:b2:7e:70:e6:30:6b:ad:01:d1:cd:
03:6f:3c:9b:d9:70:07:bf:c0:fa:b5:db:88:b7:35:
ba:73:45:34:17:63:2e:1a:61:e4:34:63:23:61:9c:
3e:2a:12:49:d3:ba:43:10:bf:8f:76:33:fe:21:91:
6a:c2:87:b3:7c:6b:0c:cc:d8:75:50:21:dd:08:c4:
6e:65:38:86:6c:60:45:64:3d:b4:67:be:bf:c8:3d:
84:eb:ab:48:e8:71:bf:5f:11:b6:48:22:60:49:44:
45:ff:c2:42:0c:92:70:d9:3c:13:5d:88:94:d4:d1:
fe:99:23:ad:b7:ea:2f:7a:c3:42:2c:2f:7c:b4:52:
6e:c4:70:74:b1:21:ea:ea:26:ba:e2:d7:26:8e:a9:
29:63:11:42:79:4a:f4:80:6f:c1:b2:71:b9:70:f5:
80:7b:4c:62:24:2b:d7:71:bb:38:dd:4b:fd:0e:85:
ab:92:9a:0c:7a:7b:d9:73:fb:71:0a:c7:df:b3:d6:
7c:3a:53:be:cd:37:90:6b:86:46:e6:01:f8:14:85:
db:2d:1e:f4:09:08:cc:c9:38:90:f3:84:8c:12:58:
ab:a4:f0:64:8f:a5:dd:d1:6e:18:3d:c6:73:03:f7:
c6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:53:B6:AA:19:ED:5B:6D:02:3B:BA:FF:36:71:63:01:3A:FC:32:89
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/I1O2qhntW20CO7r_NnFjATr8Mok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:30:65:1f:d5:b1:4f:8d:60:76:38:bc:8d:82:ee:55:1e:89:
e3:ee:20:42:2e:af:86:a9:a3:23:b2:cd:5f:03:c8:94:17:05:
ba:28:00:9e:41:91:70:ea:3d:a7:63:28:14:00:ca:29:80:25:
08:17:11:80:22:ce:61:14:a7:0d:3d:03:f6:65:5a:99:43:da:
75:b3:5f:42:63:80:44:63:a3:31:6b:5d:73:12:46:f0:92:67:
3b:2d:34:12:0a:6a:ef:ab:16:9c:6d:8d:05:b0:de:58:ab:fa:
0a:14:19:4e:89:2b:9b:44:52:91:3e:fb:06:f4:d2:f9:22:38:
7e:4a:1d:ea:15:de:87:2b:1b:0c:db:57:1e:ac:8d:55:dd:57:
00:b2:40:ac:e1:df:0c:12:ad:2f:a9:ef:4e:5c:6f:5d:6b:b9:
cc:68:36:54:28:e3:ce:64:c3:5f:02:96:d3:13:5d:86:d6:0b:
3b:1b:d6:52:37:08:1a:99:d1:76:1b:34:39:f4:5a:0c:37:5e:
1f:50:f0:a7:e7:1d:c8:da:59:de:d1:44:10:6a:f8:db:21:1d:
42:15:b3:5d:5b:9c:d8:7a:c2:e0:1e:06:3a:64:0d:66:5e:19:
35:8a:67:f7:1f:b8:c7:7e:86:37:cf:4c:9e:7a:7c:52:88:95:
9d:1f:bd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:31:59 2025 by rpki-client