Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ROFVOY9WlAPvpguNxvsUU6bjoSM.roa
File: ROFVOY9WlAPvpguNxvsUU6bjoSM.roa (raw, json)
Hash identifier: sTuH0BLcRloni//+5P3S9FVnpKBzxgH1fEZgdAzpXg0=
Subject key identifier: 44:E1:55:39:8F:56:94:03:EF:A6:0B:8D:C6:FB:14:53:A6:E3:A1:23
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC52DA3CBFDF41BD71A600959E85D4D06
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ROFVOY9WlAPvpguNxvsUU6bjoSM.roa
Signing time: Sun 24 Sep 2023 03:13:37 +0000
ROA not before: Sun 24 Sep 2023 03:13:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c5:2d:a3:cb:fd:f4:1b:d7:1a:60:09:59:e8:5d:4d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 03:13:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44e155398f569403efa60b8dc6fb1453a6e3a123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:ab:cf:94:47:66:43:8d:e3:37:07:2d:8e:
a2:77:9b:fb:bd:8d:fb:3d:ce:c0:91:a9:49:2f:0d:
38:c7:3d:55:d6:e9:17:1e:fe:30:14:00:d4:1f:ae:
22:3e:01:f2:55:7d:b6:0c:7f:e3:34:96:1b:74:7c:
1b:2f:43:d9:86:01:77:63:90:bf:45:57:ee:47:c2:
ff:13:df:a8:76:6d:9b:16:5c:64:b2:3c:bd:27:c1:
aa:46:dd:ac:c3:2b:8a:50:be:91:d1:9b:e5:dd:05:
29:ce:da:d7:4e:f4:7c:9f:bd:6e:aa:2a:8d:a8:89:
45:4a:6c:fe:32:77:c5:d0:13:6d:db:44:1f:69:51:
01:60:0f:44:62:fc:7a:f1:49:24:1e:d5:f3:2b:e1:
c3:d1:b9:27:d4:71:32:67:5f:98:a1:3c:60:22:c9:
67:8b:f9:91:47:eb:b2:e7:67:52:b6:44:2b:f9:49:
ba:61:cc:10:ee:38:80:01:52:f3:e8:9d:7d:c5:07:
23:19:8b:94:79:44:6f:ff:87:6c:4d:45:0c:3c:f1:
68:35:e5:2f:1f:bf:ce:08:6c:51:1e:1d:fb:c7:d3:
97:fc:2e:ee:75:45:74:1d:d5:61:7a:42:5b:0b:c7:
8b:f4:8b:f7:5a:4d:ac:b3:ab:26:55:d1:7e:46:15:
e6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E1:55:39:8F:56:94:03:EF:A6:0B:8D:C6:FB:14:53:A6:E3:A1:23
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ROFVOY9WlAPvpguNxvsUU6bjoSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:e9:ea:18:72:94:1b:d5:91:30:a8:ec:ad:cd:ef:da:00:3a:
98:81:6c:fb:c4:ca:da:0a:e5:17:11:f0:e6:36:22:d7:12:17:
b5:1c:c2:ba:95:c7:c6:f6:27:bb:4d:37:d4:bf:d1:72:41:73:
76:91:b6:36:d2:b6:d2:31:7d:a7:5f:41:bc:2b:62:52:d4:07:
c3:d4:d7:6b:33:0b:5b:43:85:ae:ac:ca:a8:be:f4:53:40:fc:
fc:b7:09:fc:9c:b8:2d:4e:41:86:00:8e:59:37:2a:c0:f3:10:
d9:ee:67:9e:a0:bf:02:05:7b:94:a8:87:37:29:02:f6:f9:1d:
19:7d:55:4c:80:28:25:1f:b1:db:6a:8e:be:38:03:d3:16:e5:
61:58:0c:10:01:a9:2e:92:a0:8e:13:6d:73:2d:79:e4:48:9a:
11:17:a0:4f:1c:e4:40:85:a2:5e:2b:8f:8f:9f:51:c0:63:2d:
e9:c9:5b:dc:13:32:c2:0a:3d:f3:47:20:5f:fb:68:13:a8:2b:
21:24:21:a2:37:81:37:70:30:63:75:56:71:ed:83:18:ab:26:
c1:b7:75:ba:00:fe:91:cd:e1:d4:05:a1:48:8f:90:1d:c0:ce:
83:78:2f:1c:5a:5c:a8:31:b4:7b:51:14:4d:5f:54:65:4a:03:
d0:49:6b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:49 2025 by rpki-client