Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a2SMZfHaqqpT2IU8nV30vXgxfdE.roa
File: a2SMZfHaqqpT2IU8nV30vXgxfdE.roa (raw, json)
Hash identifier: Vs9kgsWEhvM06M9BwTvhFcMOc+fXAApl8ZjRwjy/0nk=
Subject key identifier: 6B:64:8C:65:F1:DA:AA:AA:53:D8:85:3C:9D:5D:F4:BD:78:31:7D:D1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB021590E0A74D1F8F1AE28FA679E6369
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a2SMZfHaqqpT2IU8nV30vXgxfdE.roa
Signing time: Wed 08 Nov 2023 18:10:57 +0000
ROA not before: Wed 08 Nov 2023 18:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b0:21:59:0e:0a:74:d1:f8:f1:ae:28:fa:67:9e:63:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 18:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b648c65f1daaaaa53d8853c9d5df4bd78317dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:17:d9:59:f8:b1:c7:77:a7:3f:a4:aa:b6:
21:10:2b:70:ad:d5:67:c9:88:22:be:b2:bb:32:b7:
a0:31:83:8f:9e:18:00:02:74:9d:51:43:28:18:8e:
6b:00:9d:86:d0:0a:49:6a:c4:6d:04:32:cf:1b:68:
b5:59:44:e8:cf:47:fc:eb:7f:75:a9:d5:e4:8e:b3:
70:1d:b9:5e:9a:a5:f9:4c:34:d9:d3:86:4f:b5:57:
59:af:09:37:ec:a2:9e:9f:7b:0e:99:df:7b:07:5f:
89:b4:de:cc:58:74:af:0c:42:ee:f1:99:54:48:4b:
b6:6a:10:4c:36:94:27:00:fd:1a:eb:47:ef:4e:3c:
aa:36:22:19:cc:78:fd:17:df:04:4a:5c:a9:47:42:
50:7d:81:8c:e9:5c:96:cf:fe:b5:df:63:f4:a7:7b:
83:41:db:29:f0:68:75:43:f6:85:b0:41:18:af:c5:
0e:82:0f:02:d8:0d:eb:cf:61:66:c3:e7:25:84:24:
4a:46:a7:62:dc:67:6d:dc:f0:bc:9b:ea:bf:37:1f:
2a:14:f8:16:a1:bf:d8:7c:2e:d6:54:7a:83:6d:c3:
91:4b:6f:bb:65:3a:25:23:de:50:ec:b2:4e:ff:2e:
ca:c5:80:05:6a:c5:57:d2:37:c8:34:b7:e9:05:a3:
b6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:64:8C:65:F1:DA:AA:AA:53:D8:85:3C:9D:5D:F4:BD:78:31:7D:D1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a2SMZfHaqqpT2IU8nV30vXgxfdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:21:0f:3a:67:f1:ad:26:38:66:51:52:34:e1:6f:60:92:2a:
2b:7f:4c:91:be:1d:ea:41:d7:91:d3:8b:d0:bc:f5:2e:d3:d0:
7e:da:c3:bc:24:b6:e5:47:29:4e:32:8c:e0:5a:55:78:77:55:
38:26:05:4d:b7:0c:5c:0d:a1:3b:c7:f8:20:5b:34:89:02:af:
be:4d:2c:7a:9e:9a:86:c6:9c:f6:fd:b2:43:14:0d:d8:66:9c:
07:68:6b:3f:0b:dc:b1:c9:7d:71:8a:bc:5a:46:4d:e3:60:5c:
6f:fa:e9:7e:54:86:a6:cb:d6:1b:91:24:3c:4a:1a:a0:a3:bb:
de:0b:2a:cc:bf:ce:da:f2:6c:74:96:da:48:9c:f6:bc:53:60:
ee:e5:7a:2e:64:68:81:e1:bb:d0:04:4b:49:1c:8f:15:a6:fd:
ee:97:54:74:17:1c:a9:1e:a0:4f:76:ca:9f:1e:c9:24:8b:31:
08:c9:33:f7:49:08:1b:04:c5:04:16:5c:26:7e:e2:24:45:61:
0f:cb:b6:69:75:93:7d:ca:a2:99:9f:d6:b3:fd:c5:54:d9:7d:
9b:27:14:b7:65:a7:df:cf:54:56:e9:68:be:3d:45:16:8e:4a:
40:66:8d:b8:0b:16:da:a2:55:d1:a5:75:6a:15:99:35:9f:83:
83:d2:af:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:43:06 2025 by rpki-client