Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iMaJfNJb43T7BkuoqLItSFLN1JU.roa
File: iMaJfNJb43T7BkuoqLItSFLN1JU.roa (raw, json)
Hash identifier: GitQpfQtdmy4io9BKmE/2pKZowaOHd230uL5t3BgulA=
Subject key identifier: 88:C6:89:7C:D2:5B:E3:74:FB:06:4B:A8:A8:B2:2D:48:52:CD:D4:95
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB886B1138F9DA99D3C8094401B4E2F71
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iMaJfNJb43T7BkuoqLItSFLN1JU.roa
Signing time: Thu 21 Sep 2023 16:15:49 +0000
ROA not before: Thu 21 Sep 2023 16:15:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:86:b1:13:8f:9d:a9:9d:3c:80:94:40:1b:4e:2f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 16:15:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88c6897cd25be374fb064ba8a8b22d4852cdd495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ae:d5:71:e2:d4:8f:1c:4f:0d:ca:71:44:61:
ab:fa:51:21:d3:44:90:6c:46:6b:5c:2f:d0:d1:da:
b4:f4:18:e9:80:ec:d2:b8:94:39:ec:9e:fb:19:db:
04:33:e8:04:f8:3f:51:92:77:51:1f:ce:2c:6a:a3:
76:28:3f:61:c6:70:d3:15:92:a0:62:25:43:99:6a:
c1:03:ed:48:5e:fd:69:b4:4d:04:74:fa:73:f9:1f:
16:7e:9e:e3:bf:33:71:e7:52:c6:60:ee:ea:eb:25:
2d:e1:9d:6a:ae:86:7f:54:38:06:3c:86:0e:d1:28:
be:52:34:95:d9:0a:30:b8:dd:a0:7b:f8:a2:43:b6:
45:4b:b9:41:81:6f:2f:d1:e5:37:90:7e:e3:e4:26:
6b:83:f8:e0:bf:6d:c4:d5:08:f3:d2:a9:55:1b:99:
a6:2e:fe:52:4e:d3:21:e7:d3:48:16:24:3a:3e:7b:
d3:c4:df:f8:15:0e:d8:c4:90:9f:32:06:76:2c:17:
ee:9c:5c:c6:5b:a3:af:f1:86:e0:05:fb:96:b0:57:
49:f2:c5:21:2a:a4:cd:be:65:22:b6:4c:4a:a1:c7:
05:db:bd:e6:5b:48:3f:1f:27:26:14:e9:cd:44:4a:
5f:4e:1f:78:07:34:f5:c1:3f:84:35:68:24:41:72:
94:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C6:89:7C:D2:5B:E3:74:FB:06:4B:A8:A8:B2:2D:48:52:CD:D4:95
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iMaJfNJb43T7BkuoqLItSFLN1JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:bf:d0:f2:3b:d9:0b:9b:51:a5:7d:db:a8:a0:68:90:b0:00:
7e:a6:e2:0d:36:6e:e8:a1:f5:4f:68:c4:35:fd:ac:fc:a5:3c:
a7:e9:4a:4e:76:1f:72:c0:73:7a:85:30:07:d7:b7:4a:4f:01:
2d:f5:7d:4f:dc:e9:2c:be:97:39:67:84:5f:02:86:71:dd:a4:
92:47:e7:ff:de:32:d6:a4:13:05:fb:10:bd:51:ed:c4:0c:19:
d1:ce:17:fe:2b:40:55:6d:7e:6c:0e:fa:b0:0f:f8:52:4b:04:
a2:d0:7b:fd:d9:80:a9:2f:fe:dc:1d:35:ad:97:d9:80:51:4d:
6a:24:1e:22:aa:34:b7:7a:e4:cb:3f:2c:90:54:60:83:9e:fc:
87:19:e8:25:08:0c:81:4e:00:c4:ff:2a:a6:62:47:44:dc:8c:
7e:50:de:9e:a8:e1:c3:b8:07:c8:8e:92:5b:2e:07:b1:40:c8:
55:f2:33:75:67:12:66:9c:2d:a8:05:74:b8:c3:e3:1a:c7:6a:
f7:41:a0:aa:8b:a8:f6:5c:a1:0a:1f:be:6a:a3:1a:fb:30:e9:
c5:12:13:34:90:df:07:52:36:c4:21:fc:64:74:4a:b6:32:bd:
9c:17:33:b6:1a:54:35:50:db:4d:14:3a:e5:39:f4:c3:d5:33:
e7:50:fb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:33 2025 by rpki-client