Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IAIJh1bjVQaCdIrzPG7VG7UX2Vs.roa
File: IAIJh1bjVQaCdIrzPG7VG7UX2Vs.roa (raw, json)
Hash identifier: LAuwnCo5Rh6tz3kV2vpKS4MBian2NL/+JDjICJofqIE=
Subject key identifier: 20:02:09:87:56:E3:55:06:82:74:8A:F3:3C:6E:D5:1B:B5:17:D9:5B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B51872FF6A69E319ED6DC3C66D3B693A2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IAIJh1bjVQaCdIrzPG7VG7UX2Vs.roa
Signing time: Sat 21 Oct 2023 09:18:15 +0000
ROA not before: Sat 21 Oct 2023 09:18:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:51:87:2f:f6:a6:9e:31:9e:d6:dc:3c:66:d3:b6:93:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 09:18:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2002098756e3550682748af33c6ed51bb517d95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:e9:21:08:51:1a:93:b2:e9:f6:5d:d4:0e:
f2:da:c2:09:7c:51:36:f9:5a:67:38:57:f9:61:ae:
da:f4:82:20:a5:d7:52:18:65:e9:be:1a:64:a6:a5:
39:fe:b1:12:b2:fc:55:9a:19:c7:b3:59:d4:d0:8d:
7d:53:fd:37:3c:92:b6:f1:ff:f9:99:15:06:04:70:
c5:ee:b8:56:0a:df:9b:9d:ba:f5:e1:63:66:7b:7e:
69:62:f6:f3:c2:fd:bd:b5:2d:ca:c6:20:16:77:b2:
87:bf:50:0d:4c:1e:97:8e:0f:59:06:bb:55:40:29:
b5:a6:2d:b1:50:99:db:09:df:a6:c4:51:03:cb:07:
b5:31:78:b5:24:91:3e:fc:24:0d:7b:dd:91:3b:74:
5a:be:8f:9e:c1:10:68:3d:f7:87:33:c6:4b:04:e2:
c4:ef:67:ca:11:b3:a7:6e:8d:eb:46:b8:73:c0:99:
4e:e7:7c:58:6b:3d:06:c6:fd:d6:1a:a1:35:c5:18:
67:cc:7e:e2:c0:6b:c4:51:70:74:65:27:5e:d7:ed:
b3:2c:79:13:34:f6:94:a5:84:a2:e3:ea:5b:6a:05:
89:a3:c0:6c:e6:d1:e3:43:da:69:15:55:a1:97:da:
9c:61:20:6e:81:22:1b:e3:0b:1c:3c:ee:13:ad:72:
cd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:02:09:87:56:E3:55:06:82:74:8A:F3:3C:6E:D5:1B:B5:17:D9:5B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IAIJh1bjVQaCdIrzPG7VG7UX2Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:c8:cf:4b:b3:2d:69:6b:88:a4:7d:74:d8:8a:19:00:a8:b8:
a6:e8:cb:30:9f:f1:ec:b4:9b:bf:31:dd:ed:de:e7:8a:11:d6:
ee:18:dd:75:07:f6:eb:8f:9d:f7:18:dd:67:97:46:bd:27:ca:
13:c9:c2:68:4b:39:23:f9:3d:19:21:a9:02:c7:7a:70:ef:7d:
3e:de:d9:e5:1d:e1:6d:e2:ea:14:6f:92:37:e6:96:71:be:8e:
21:70:52:be:85:e0:60:76:21:a9:8a:c9:02:52:de:76:48:b0:
86:05:65:d8:5b:23:09:da:12:68:92:78:f8:90:af:f8:11:86:
40:42:3c:cd:5e:d2:d6:81:2e:f5:b9:75:ca:7d:47:78:2d:68:
71:ab:eb:81:e6:8f:9e:48:cc:03:91:0e:fa:c8:18:1c:bf:88:
a5:6c:2c:a0:9c:a7:d3:3f:0f:3d:88:72:39:2f:0c:ab:ac:9b:
b3:3c:74:f7:1e:3b:d7:af:e9:19:42:89:54:aa:cd:ab:be:fa:
00:02:7d:6b:2b:dc:64:9d:43:7f:11:cd:91:0e:e2:03:b6:92:
cd:26:bd:65:62:cd:12:c6:d5:eb:76:02:0e:c8:5e:bc:5c:95:
ef:21:74:03:8b:8e:4f:e6:6a:48:40:42:d7:cb:31:a6:34:77:
6a:9c:b8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:24:05 2025 by rpki-client