Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KA8dmU0ikCGvFsyoaiwoxg6SpJY.roa
File: KA8dmU0ikCGvFsyoaiwoxg6SpJY.roa (raw, json)
Hash identifier: 56PCxkl73TleJ+AvwQ2IoByJxcmbWZFumwGjB6CAGBc=
Subject key identifier: 28:0F:1D:99:4D:22:90:21:AF:16:CC:A8:6A:2C:28:C6:0E:92:A4:96
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAF459F9AB6B41CC185BFE142564C241E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KA8dmU0ikCGvFsyoaiwoxg6SpJY.roa
Signing time: Wed 08 Nov 2023 14:10:57 +0000
ROA not before: Wed 08 Nov 2023 14:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:af:45:9f:9a:b6:b4:1c:c1:85:bf:e1:42:56:4c:24:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 14:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=280f1d994d229021af16cca86a2c28c60e92a496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:22:6f:66:ad:46:36:40:f5:cc:18:42:17:ec:
c5:1f:a9:6e:ee:52:41:71:f0:a9:c5:75:3d:e2:54:
c5:23:b6:a9:5a:ea:67:cd:08:cc:83:26:ab:ac:b6:
f5:f5:6a:64:7a:68:09:ed:12:fa:93:a9:0b:67:0e:
0d:55:89:22:c5:e0:e0:06:47:0e:ef:ba:2a:ec:32:
da:87:bb:c1:12:f6:dc:fc:18:08:e3:4b:2e:43:e5:
10:3d:7b:96:b9:24:20:e4:b1:c0:2e:17:6b:ed:de:
48:64:4d:95:33:c6:a8:e0:f3:39:b4:05:4f:17:43:
b2:c1:dd:28:b2:56:d9:9d:f8:6b:df:2d:e5:9b:56:
62:99:7b:62:df:e1:b6:06:a6:ce:a1:b7:78:74:57:
5e:40:b7:a6:62:0a:10:12:3c:b2:01:56:c6:34:91:
3d:27:1a:e0:c1:e2:1e:7b:e0:dc:9b:a3:47:e9:2b:
2b:1d:f5:03:15:5f:b3:7e:63:83:6c:12:dd:31:a8:
71:df:b6:6c:de:10:cf:b8:c6:9c:55:d9:ef:1b:36:
16:a7:ee:49:79:3a:7f:de:a1:4d:3c:04:a4:e4:0a:
dc:fc:9c:bc:69:3d:d4:c3:3e:6d:d0:c7:15:79:81:
b0:a2:00:c3:74:7a:64:67:c7:17:6e:9f:96:9b:9b:
2d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0F:1D:99:4D:22:90:21:AF:16:CC:A8:6A:2C:28:C6:0E:92:A4:96
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KA8dmU0ikCGvFsyoaiwoxg6SpJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:e1:ce:e8:73:08:93:b5:90:d0:c5:8e:73:18:22:e8:8d:9e:
67:45:a8:29:fc:26:c2:46:9b:56:a7:ea:73:03:a5:d7:f6:d0:
68:fd:63:31:63:4f:35:4f:2c:75:59:e3:14:ac:bf:bf:67:6f:
c3:ee:74:7e:89:04:84:02:70:30:6e:f5:f2:1a:74:59:5f:65:
8b:57:e0:1d:a5:e2:25:be:94:d3:76:ce:0c:d0:ce:3c:2f:35:
32:a8:39:f7:81:aa:f8:f2:22:6c:92:9a:6f:95:b2:c0:40:66:
fe:9b:be:49:91:67:8b:35:75:ad:e7:7d:26:a4:4c:09:f4:83:
a0:01:ba:1f:b8:79:db:ea:f6:ac:6d:ea:a0:26:ad:26:ba:0f:
e5:32:96:7b:c7:74:41:48:3e:91:a0:06:71:4d:97:e4:ab:b1:
f8:c4:fc:f4:95:b9:36:d5:c9:0a:aa:5e:48:c0:64:c0:3c:6f:
ee:38:ea:43:c6:c4:f4:c1:fb:a4:0b:d2:b8:77:28:95:ab:79:
10:c3:c8:7f:22:8a:6b:2c:f8:21:52:3a:a7:02:18:f0:62:50:
67:f5:12:83:49:77:90:22:3e:ac:fb:ee:34:86:ee:4f:79:69:
fe:7f:19:45:a6:3c:2b:37:3b:16:4e:46:e8:fb:e2:99:4b:01:
6d:42:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:31:03 2025 by rpki-client