Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iwOrgkKpSWWEdB8MMcjOFBaWUP4.roa
File: iwOrgkKpSWWEdB8MMcjOFBaWUP4.roa (raw, json)
Hash identifier: CwvQuxnwEZ1hx4tk0g0ohhjcqaLSNhOW73d9D0Vgxls=
Subject key identifier: 8B:03:AB:82:42:A9:49:65:84:74:1F:0C:31:C8:CE:14:16:96:50:FE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF319396ACAD13FF259484DB2CB451BE5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iwOrgkKpSWWEdB8MMcjOFBaWUP4.roa
Signing time: Tue 21 Nov 2023 18:16:38 +0000
ROA not before: Tue 21 Nov 2023 18:16:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f3:19:39:6a:ca:d1:3f:f2:59:48:4d:b2:cb:45:1b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 18:16:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b03ab8242a9496584741f0c31c8ce14169650fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:62:a2:e3:16:4e:76:8a:43:eb:77:92:6d:
6c:57:5e:3f:9b:36:68:63:cc:2a:68:3b:e7:1b:57:
27:fa:bf:25:38:9b:3f:0b:18:54:3b:e9:e3:63:9f:
89:4a:98:68:3e:42:1b:a6:2a:49:0f:13:7e:73:97:
48:9c:a2:23:99:c2:36:3a:f6:ab:cc:57:9e:8a:f6:
2f:03:24:7c:cc:a6:cf:38:7f:47:23:bf:b0:9e:c3:
ec:58:72:72:41:23:de:06:22:fd:88:5f:25:03:3d:
8c:2a:a7:7c:a8:f4:db:be:b2:cf:f0:e7:ae:f5:5d:
be:e6:58:0e:f7:e7:96:eb:a2:f1:36:b2:81:91:44:
c1:dc:b5:01:50:18:41:7e:2f:08:48:98:ce:09:2e:
dc:28:d3:fa:d7:ab:1a:c1:0e:72:38:41:e0:09:d4:
b3:46:af:e9:46:2d:22:5d:e2:e5:9c:34:cc:ac:16:
42:f6:26:83:82:61:20:e4:80:b4:39:7e:4e:9d:ab:
a0:ed:98:27:bb:ef:12:13:6d:47:6f:24:6b:cd:00:
4e:41:ff:a0:96:35:16:fb:0a:ca:73:8f:95:68:57:
3a:a7:e4:75:f6:0e:85:3f:b7:27:f4:b8:56:ab:b6:
42:d4:25:01:2a:cd:9d:33:b7:f4:79:40:5c:5e:2c:
39:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:03:AB:82:42:A9:49:65:84:74:1F:0C:31:C8:CE:14:16:96:50:FE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iwOrgkKpSWWEdB8MMcjOFBaWUP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c3:4a:41:a2:e6:66:75:85:21:94:0f:91:42:65:73:ff:3f:76:
e5:74:89:be:ab:d1:ac:16:89:4d:f2:83:3d:b8:cd:e3:c0:4c:
2a:cc:7b:49:f9:1e:73:93:7c:70:16:e9:33:ca:b8:66:ee:b4:
78:e2:8c:b1:af:19:13:86:a9:fd:a7:ab:06:79:e0:06:07:d9:
bc:fa:f6:52:f9:cc:da:75:6f:b1:1a:e2:b9:d1:cc:23:f8:78:
da:ae:ab:ed:b7:c6:8c:d6:8a:f7:d0:85:e3:cf:d7:ce:9f:49:
07:44:e7:15:b1:4f:d4:03:d3:72:bc:af:41:95:50:6c:7e:83:
47:8c:16:87:c1:23:78:41:b3:fd:ed:0f:4d:a6:c1:7a:fa:f5:
45:b4:12:18:6d:8b:0a:e2:ee:ea:01:0a:34:f2:9e:69:51:af:
b7:64:b7:d1:05:cd:dc:1d:8f:98:5e:ab:06:3b:5c:c5:f5:2b:
cd:cc:90:9c:ef:6f:0e:93:73:59:99:ff:d3:8d:77:98:01:ff:
6b:01:1c:2f:97:77:ba:44:b8:9a:4f:d9:a5:d7:eb:33:d2:bb:
ba:9e:46:f8:0f:30:66:67:43:41:2f:da:9c:35:40:57:8d:1a:
35:dc:45:8d:42:fb:47:eb:6a:54:2b:b2:39:49:9f:08:60:dd:
bf:87:66:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:44:59 2025 by rpki-client