Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/I4J_u7XOjtx-v8ihjSpXRVEPD14.roa
File: I4J_u7XOjtx-v8ihjSpXRVEPD14.roa (raw, json)
Hash identifier: j/fCXXCD1GQn3lDogkeQq6XMjHe7V0iI2D2dGK9vgac=
Subject key identifier: 23:82:7F:BB:B5:CE:8E:DC:7E:BF:C8:A1:8D:2A:57:45:51:0F:0F:5E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8010F27ABE31D32037478066462158F4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/I4J_u7XOjtx-v8ihjSpXRVEPD14.roa
Signing time: Mon 30 Oct 2023 10:11:16 +0000
ROA not before: Mon 30 Oct 2023 10:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:10:f2:7a:be:31:d3:20:37:47:80:66:46:21:58:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 10:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23827fbbb5ce8edc7ebfc8a18d2a5745510f0f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:c0:0e:7c:94:d4:96:fb:a8:c5:7e:25:84:
9a:a8:c1:10:a7:40:71:34:60:ed:e3:ca:82:99:a0:
79:3d:a2:c7:13:d8:50:ee:08:98:ba:61:68:80:c1:
89:33:de:16:c2:8a:04:ad:79:15:33:7f:cb:e2:9e:
20:c5:92:80:05:26:2d:89:c4:e7:77:f5:4a:d8:ca:
0c:8a:df:85:1b:cd:e4:8d:d6:5b:bc:2e:30:63:19:
2c:92:5f:df:c8:fc:5d:f2:02:63:c7:a4:4d:35:0a:
df:11:6b:bf:d6:4a:9d:ac:0b:f4:47:65:91:64:15:
e5:13:0e:f4:16:bb:de:9e:e0:50:e7:df:9d:a8:7c:
36:15:7d:23:6f:cf:68:65:41:ab:46:3e:89:6f:54:
e8:d2:25:6e:6f:38:77:0b:da:28:c2:2e:1a:38:d5:
fc:e0:60:54:65:12:9a:1d:82:f4:e7:f4:18:34:7a:
0c:31:b3:44:4a:58:f4:c4:ba:2a:ec:f8:4b:6c:84:
92:92:d6:2a:da:94:cf:75:09:04:a4:3f:30:04:89:
0e:00:3c:ad:6f:15:0e:74:57:5a:3d:6e:10:05:52:
c8:7c:e5:73:c0:b3:a1:fb:2d:52:88:26:9a:ed:e6:
eb:d3:3a:6f:d3:4b:f1:08:4b:6a:1f:87:00:79:cd:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:82:7F:BB:B5:CE:8E:DC:7E:BF:C8:A1:8D:2A:57:45:51:0F:0F:5E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/I4J_u7XOjtx-v8ihjSpXRVEPD14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:31:50:3b:a2:e4:ac:96:30:b5:ce:e2:60:f1:b9:99:bb:f0:
bf:e8:3d:4a:7a:f0:b6:86:d1:4d:eb:7d:46:59:31:ce:1a:5a:
d3:eb:74:3d:84:1e:64:4c:e6:58:43:3c:6f:56:bb:0e:3e:7f:
a9:39:94:97:29:03:8f:f7:9a:08:09:9d:84:5b:58:60:7c:eb:
96:f9:c3:5c:e6:46:fb:54:d0:da:a0:9a:1a:28:b0:39:a9:ee:
7d:72:7f:99:e6:71:0d:77:76:2c:c5:3a:4b:e9:54:d8:7e:a7:
7c:6f:51:48:78:e8:a1:6d:0e:8d:38:6e:12:38:17:21:df:c7:
0c:8c:ab:b1:73:dd:93:fe:85:a8:64:db:76:29:81:36:37:38:
d2:c6:14:c1:1a:3a:25:41:28:06:a2:eb:e7:2f:2d:0f:8c:98:
17:4e:b3:02:75:c0:73:d6:dd:05:2f:26:4f:6a:a2:bc:7d:10:
fc:ad:8d:a1:d2:bc:02:b2:9e:9a:cb:aa:ec:fe:35:1d:d2:d6:
ba:da:03:5d:6f:7e:e3:9a:e5:c4:51:75:fb:65:d3:d6:41:57:
bc:1b:cc:7b:12:54:2a:ac:f4:a0:ea:60:47:65:74:6e:d8:63:
0e:dd:f3:d6:c5:08:8b:33:f3:18:1a:1c:ba:c3:65:e1:b5:57:
84:91:40:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:05 2025 by rpki-client