Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IsFVhPFBtuvTJWRltjfpJCqeGiM.roa
File: IsFVhPFBtuvTJWRltjfpJCqeGiM.roa (raw, json)
Hash identifier: axLyeqJjhVgRs/snbRQOBuKgOMGEgGKC7ZmP3jwiHtU=
Subject key identifier: 22:C1:55:84:F1:41:B6:EB:D3:25:64:65:B6:37:E9:24:2A:9E:1A:23
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C34F7A7CCB8F2ADABAC4F18CBB5284F19
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IsFVhPFBtuvTJWRltjfpJCqeGiM.roa
Signing time: Mon 04 Dec 2023 13:14:54 +0000
ROA not before: Mon 04 Dec 2023 13:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:f7:a7:cc:b8:f2:ad:ab:ac:4f:18:cb:b5:28:4f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 13:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22c15584f141b6ebd3256465b637e9242a9e1a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:71:86:e0:f3:53:3f:cd:0b:28:04:74:c1:
c8:a8:1b:29:96:d0:83:da:6c:ac:ec:a6:70:1b:35:
1d:53:14:4c:9f:7f:58:fa:05:2e:65:eb:48:9a:4d:
6d:e8:48:0e:df:a9:1e:4a:b2:3d:e4:03:3e:80:65:
7f:69:ec:e9:63:bc:ff:4a:10:94:21:a3:0f:a8:fc:
d0:f0:6b:80:1d:28:54:1c:c6:9e:12:5f:a2:46:b3:
12:ba:71:21:64:38:45:44:3f:6a:19:84:f4:39:bf:
ea:8e:0b:7c:ff:82:c7:b0:11:3a:50:89:d0:e9:b8:
af:06:cc:05:4b:e7:9e:68:d3:f0:dd:90:4a:42:a9:
6c:0a:48:2d:ae:9b:81:d5:b0:71:f5:8e:60:b3:58:
4b:a7:04:33:6b:28:01:11:22:6d:ca:a7:bc:9d:39:
0b:0c:79:d3:bc:0c:e7:f3:82:f8:53:25:69:a1:3f:
9e:13:79:ba:1d:5b:ce:81:aa:c1:42:ee:32:a1:f2:
54:ca:bf:c9:38:c3:1c:ec:80:6b:98:f8:40:28:60:
b9:bb:0a:57:0e:8d:7a:a9:41:2f:23:14:22:42:8b:
bf:e5:19:45:e0:2f:96:ea:54:b0:bf:a7:bb:96:29:
71:18:17:00:97:55:3d:2f:74:39:6f:2a:2d:96:05:
c6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C1:55:84:F1:41:B6:EB:D3:25:64:65:B6:37:E9:24:2A:9E:1A:23
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IsFVhPFBtuvTJWRltjfpJCqeGiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:79:24:d2:da:25:33:66:32:90:5e:dc:d9:ec:71:68:dd:b2:
d3:ad:0d:71:9a:85:ae:30:e6:a8:a3:70:4a:a8:c6:29:31:31:
dd:3d:44:05:a1:51:f3:f9:53:c3:38:de:80:1b:69:5a:fc:be:
bc:72:97:63:a5:11:05:14:95:48:79:82:0a:fe:22:48:5c:d7:
b1:36:74:09:d8:00:45:46:ad:f7:07:0e:cb:26:06:62:ef:d0:
d6:cd:e1:6a:a4:3b:d3:ad:59:b9:43:15:e2:58:51:5e:58:82:
98:1d:c9:11:24:07:c3:0f:39:e3:b7:f6:e6:63:3b:3d:19:dd:
6a:31:ac:6b:c9:86:4f:a6:2e:3a:e2:b6:88:51:43:fa:e7:a8:
d4:b9:ac:cb:ca:76:94:7d:bb:62:ee:93:7c:7b:4d:db:41:21:
c1:99:6f:27:60:ff:99:b7:cd:ac:08:7e:fe:16:9e:26:b8:c7:
e1:a5:61:76:36:b6:2d:45:80:43:56:44:c9:8e:1e:72:79:95:
2a:8f:eb:97:bd:b3:03:55:13:df:d8:f3:6f:19:2a:ed:a6:e8:
53:e0:6f:bf:7d:1c:85:63:a5:dd:35:eb:47:ff:0b:83:96:e4:
30:14:9f:d0:32:ab:55:ac:5f:1c:fb:02:49:2a:c5:4c:5f:2e:
a0:5f:a3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:34:21 2025 by rpki-client