Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JI93_WU8C8T3jdaH3K9bzxW-KlM.roa
File: JI93_WU8C8T3jdaH3K9bzxW-KlM.roa (raw, json)
Hash identifier: 2Co9kpDoSBgy5FUtB84UKOV00H42o4dHR+rgg9pyAgs=
Subject key identifier: 24:8F:77:FD:65:3C:0B:C4:F7:8D:D6:87:DC:AF:5B:CF:15:BE:2A:53
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C224E594CFD06B9CF7742B40D826A9EE4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JI93_WU8C8T3jdaH3K9bzxW-KlM.roa
Signing time: Thu 30 Nov 2023 22:16:49 +0000
ROA not before: Thu 30 Nov 2023 22:16:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:22:4e:59:4c:fd:06:b9:cf:77:42:b4:0d:82:6a:9e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 22:16:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=248f77fd653c0bc4f78dd687dcaf5bcf15be2a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e5:d9:07:e3:f5:95:c7:6a:e9:6d:fc:24:76:
44:19:95:e3:78:70:52:7a:49:e3:16:a2:bd:91:57:
6a:65:c1:cd:d2:10:89:05:d7:7b:31:0e:8a:1a:47:
f3:67:1e:05:fb:19:84:e1:56:2e:f5:e2:bb:36:6e:
d8:45:ae:0c:f8:d2:f5:63:02:a8:8d:9f:5b:36:91:
3f:39:1c:7c:80:03:5b:2a:cd:21:91:cc:be:ef:e7:
a5:34:40:50:d4:bf:dd:58:ad:b7:8f:ad:1c:d4:db:
f6:39:3b:54:e4:95:53:0f:5e:c5:0f:7e:e0:af:30:
58:18:e2:a9:66:e0:61:12:08:07:69:43:0e:7e:bd:
f8:3a:86:5b:49:18:b4:e1:4a:ac:92:00:81:ce:97:
9e:42:95:c8:d9:76:96:51:79:62:f4:18:95:37:9a:
95:b2:76:a9:58:ea:82:b4:43:08:34:5f:4d:7d:9e:
a7:39:16:75:2e:41:f2:86:54:d9:9c:ca:23:6a:08:
24:07:66:59:fd:11:57:f6:ee:ba:86:da:37:0b:9b:
bf:fb:99:cd:a5:62:53:87:08:fb:62:ac:ed:b2:bf:
1c:cc:62:d0:4e:04:af:2b:86:3a:40:90:d4:14:74:
c3:66:96:c6:97:87:57:84:79:63:d9:b5:a1:c0:b8:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8F:77:FD:65:3C:0B:C4:F7:8D:D6:87:DC:AF:5B:CF:15:BE:2A:53
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JI93_WU8C8T3jdaH3K9bzxW-KlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:4f:77:2a:07:20:25:18:30:1f:8a:f7:35:fd:00:00:a7:19:
c4:43:8e:cc:2e:96:a0:dc:a7:e5:d7:60:89:03:31:a6:6e:f9:
c6:89:25:7f:a2:b0:f6:c9:fe:31:84:f9:ae:92:be:34:77:62:
44:e5:b7:a4:98:f0:94:a8:c3:e0:b1:e7:c3:89:d6:a1:66:e0:
3d:e5:e9:9f:98:3b:60:a4:26:b2:fc:61:39:c8:4e:86:ce:ed:
48:b8:14:4b:1d:b1:7a:c4:d5:30:67:92:d4:c8:2d:48:fa:5e:
65:c8:15:82:34:87:ed:66:c0:67:c3:36:cc:40:84:c9:39:aa:
22:49:42:07:f0:78:e2:77:be:ce:07:22:01:5e:4c:36:1c:bf:
58:79:bb:e6:40:d5:57:e8:2c:35:28:35:f3:b9:16:1e:e9:c7:
46:08:17:57:ab:d0:2c:22:9d:9c:d2:f3:47:2c:af:9a:19:6d:
46:58:78:96:de:ca:64:c7:af:16:36:96:03:6f:f0:44:95:89:
d0:72:bd:07:f2:bb:b6:e7:3b:78:e5:61:9f:f1:40:86:fe:a0:
36:f9:a6:78:db:f6:1a:26:ce:42:d4:34:9e:b8:5f:81:c5:0f:
a0:df:c6:b0:83:07:a8:ac:f1:7a:1b:2e:02:77:5e:51:2a:f2:
58:29:86:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:57:28 2025 by rpki-client