Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/j4wpInFdEo5VLOAxQ4Jt8uhCfGg.roa
File: j4wpInFdEo5VLOAxQ4Jt8uhCfGg.roa (raw, json)
Hash identifier: B0i5tub5sKxOJQBHF6U9UdC+1pmbqyLYtfy45aGzA8s=
Subject key identifier: 8F:8C:29:22:71:5D:12:8E:55:2C:E0:31:43:82:6D:F2:E8:42:7C:68
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0CD9D417E5EC66CD32684A942F523A21
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/j4wpInFdEo5VLOAxQ4Jt8uhCfGg.roa
Signing time: Sun 08 Oct 2023 01:14:44 +0000
ROA not before: Sun 08 Oct 2023 01:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0c:d9:d4:17:e5:ec:66:cd:32:68:4a:94:2f:52:3a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 01:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f8c2922715d128e552ce03143826df2e8427c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:05:ab:c6:ec:54:21:de:80:0d:4b:75:9e:
f4:23:7a:a5:00:56:1d:f8:49:2e:c4:dc:3f:33:2d:
1a:66:89:06:68:ed:fc:00:52:a4:43:ed:49:92:07:
a4:1b:8a:26:af:a7:42:c5:ba:ef:92:6f:54:62:6c:
39:a0:bb:97:72:2e:3c:3c:4d:33:88:d6:e2:ed:60:
01:a9:db:e3:97:01:22:ab:d4:c2:70:ef:6d:5c:fb:
f1:08:22:4e:f3:d4:74:a2:f4:f2:85:46:d7:a1:40:
24:6c:4d:d0:d0:54:aa:24:ca:ca:31:56:1a:e6:e4:
ba:56:3c:1e:70:6f:c1:79:05:a9:e1:9b:8e:ed:0f:
a4:c8:7b:ba:e0:70:24:40:c8:74:c9:34:04:9b:93:
6b:62:d1:e4:18:23:c5:76:a1:91:9f:74:aa:ed:b0:
0c:7a:e6:cb:c4:6e:9d:70:f3:71:f2:1e:c2:a2:41:
d3:7c:a1:6d:6f:88:72:03:de:05:82:45:ed:6e:62:
8e:37:45:39:b3:b3:05:ea:9d:4e:1f:d4:3c:1d:e4:
12:e7:a1:ce:37:1a:04:6c:a2:af:d5:ff:29:52:52:
e5:4e:47:54:a9:1c:e6:b5:8f:13:0a:68:a3:65:25:
f5:b0:5e:57:b1:03:f3:86:83:25:ce:2d:87:d0:3d:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8C:29:22:71:5D:12:8E:55:2C:E0:31:43:82:6D:F2:E8:42:7C:68
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/j4wpInFdEo5VLOAxQ4Jt8uhCfGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bb:df:a7:f7:3d:fe:65:aa:89:29:d5:1c:fd:06:88:41:20:78:
90:82:ef:8c:c6:52:75:85:f0:be:ea:c4:61:9c:5c:90:ca:af:
76:45:61:c7:92:f4:81:9b:75:47:8c:4c:ea:b9:7d:e7:21:d6:
12:7e:4d:86:67:1f:2f:99:3a:c1:e3:ca:57:4b:7f:d8:45:96:
d8:e9:a1:90:55:a7:1d:bb:10:dc:38:30:f9:c0:7d:bf:b0:14:
28:21:d1:9a:9e:43:95:9a:5e:ae:4e:82:57:b3:ed:61:45:6f:
72:c1:22:87:b2:27:f0:b5:aa:b1:db:f6:7e:69:c8:d1:51:0d:
c3:de:fc:cf:19:6d:ef:4c:64:b9:17:60:49:b7:00:c6:3b:5b:
a0:09:56:12:f9:37:f5:f1:99:34:33:63:b8:d2:e9:37:29:69:
cf:01:38:cd:60:23:55:84:2f:3e:cc:8f:a4:28:d4:29:2c:aa:
29:56:d0:69:5c:5f:79:3e:54:c4:58:39:a3:f7:34:f7:f0:96:
5c:22:08:1b:28:45:b8:17:d8:00:09:d9:ee:bb:91:20:84:28:
ed:1b:61:db:c9:69:79:b8:ba:19:72:aa:19:d4:9c:b6:15:d5:
ed:6d:8f:30:0d:53:2a:be:89:6b:ed:67:7e:f9:e5:6a:fa:9d:
6d:8a:cf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:31:17 2025 by rpki-client