Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iVjjHJ2aOxXxnOAKinEYQuX8v0E.roa
File: iVjjHJ2aOxXxnOAKinEYQuX8v0E.roa (raw, json)
Hash identifier: J+KRmduDB8aONHitOwGEMtLIMEOjAsg8xD5VoF/MOxk=
Subject key identifier: 89:58:E3:1C:9D:9A:3B:15:F1:9C:E0:0A:8A:71:18:42:E5:FC:BF:41
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2F651609EF522264ADB16AA517358EF9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iVjjHJ2aOxXxnOAKinEYQuX8v0E.roa
Signing time: Sat 14 Oct 2023 18:13:55 +0000
ROA not before: Sat 14 Oct 2023 18:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2f:65:16:09:ef:52:22:64:ad:b1:6a:a5:17:35:8e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 18:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8958e31c9d9a3b15f19ce00a8a711842e5fcbf41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:f9:d4:05:9c:cf:0b:03:2d:50:2a:4e:0c:
ff:f3:a6:0f:56:81:d6:66:ec:fe:91:99:ed:f4:84:
aa:3d:03:da:0f:7f:76:0b:b3:dc:49:cd:69:b1:e5:
7e:04:cb:05:2d:50:07:5a:81:28:2d:d4:0f:b1:d4:
ac:85:29:92:13:fc:fc:83:cf:82:f7:30:c3:b2:15:
c8:6f:d1:7c:1e:92:8c:df:64:33:6f:e4:45:29:9c:
57:1b:bd:00:54:c1:a4:81:82:83:78:33:a4:c7:67:
48:ad:32:e1:f4:a1:40:24:ac:80:dc:54:ec:d6:4f:
64:14:c6:fa:9c:4a:93:02:38:01:3e:31:34:69:e6:
f8:9b:d9:da:a9:fd:d9:c8:12:e1:f0:bf:12:33:f5:
ed:8b:1a:1f:9a:f3:54:fd:ff:f8:eb:49:da:da:a9:
02:db:c2:80:4c:09:67:8e:52:ee:9b:82:b2:2a:80:
5f:b9:e4:5d:db:94:4f:0c:d4:4a:a6:9b:67:fb:74:
f4:0e:18:6a:c0:9d:3f:bb:79:4d:cd:8a:07:e8:43:
84:35:e9:90:1b:c5:7e:fc:84:83:4d:35:57:06:08:
27:3c:65:56:58:fb:aa:a4:e8:56:c8:ea:71:76:4a:
6f:e1:cf:76:71:87:50:52:39:a7:9b:af:22:31:d9:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:58:E3:1C:9D:9A:3B:15:F1:9C:E0:0A:8A:71:18:42:E5:FC:BF:41
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iVjjHJ2aOxXxnOAKinEYQuX8v0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:21:6e:f9:7e:0f:8d:c2:03:c6:4b:84:d9:bc:9b:23:93:89:
db:ca:c0:a6:61:d5:a1:ef:22:2e:e4:d8:96:5b:d5:7d:d2:04:
27:39:ca:a1:7f:70:dd:74:a0:78:97:b8:98:90:0d:99:44:39:
1e:93:a2:19:e1:32:20:a6:d9:56:59:00:a7:d2:db:b3:8b:d9:
72:4e:b9:40:2a:57:af:5f:8b:82:65:53:2d:92:40:d8:f3:71:
6d:36:1f:ca:07:2d:ac:5c:63:aa:24:e2:77:13:6d:ee:30:67:
5d:04:2b:2b:05:64:8a:b1:07:d5:54:4c:c5:74:c8:00:5a:b3:
12:b9:10:ee:16:b0:4e:0c:6a:47:6e:89:ac:d0:8e:18:92:8f:
7e:31:a0:ec:94:ca:40:ea:0d:1e:82:e7:30:96:0f:53:c4:60:
05:02:dc:42:7b:2a:fb:75:fc:70:c0:df:07:e9:3d:4a:b9:f1:
e3:6c:4c:b8:42:a3:52:62:4c:3c:a9:ca:60:a9:47:6f:19:03:
d6:ed:83:18:09:fd:4c:bd:b0:c4:fb:d5:f9:e2:55:38:85:49:
e4:a1:f6:17:6c:fe:cd:c1:1c:ef:c2:b1:c6:99:89:7d:99:28:
d4:7b:d9:46:6f:e4:24:ee:64:be:8f:3c:7b:27:40:0b:0a:c1:
7f:32:98:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:10:41 2025 by rpki-client