Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/j6oETvfkapg8uH1hI5yZrzVJxEM.roa
File: j6oETvfkapg8uH1hI5yZrzVJxEM.roa (raw, json)
Hash identifier: P7YW0RcZ8X0+4OUrCFQXVUJ9k2e37zNmthoAHnlwGGI=
Subject key identifier: 8F:AA:04:4E:F7:E4:6A:98:3C:B8:7D:61:23:9C:99:AF:35:49:C4:43
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABB87721BE3EA47085E203F0E8774936E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/j6oETvfkapg8uH1hI5yZrzVJxEM.roa
Signing time: Fri 22 Sep 2023 06:15:30 +0000
ROA not before: Fri 22 Sep 2023 06:15:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bb:87:72:1b:e3:ea:47:08:5e:20:3f:0e:87:74:93:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 22 06:15:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8faa044ef7e46a983cb87d61239c99af3549c443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dd:21:14:23:22:2d:f8:6f:66:db:a1:6d:af:
79:f9:bc:a3:32:07:cd:c1:cb:7a:7a:57:e7:15:4d:
c6:7c:04:73:52:84:ce:7c:cf:fa:e1:36:e5:40:36:
0b:e9:24:63:b0:7f:70:3f:7e:67:4b:73:8d:ff:27:
31:2f:e2:d4:3e:5b:7d:85:a6:f9:5c:8b:38:48:8a:
cf:94:c8:04:d8:75:cb:9c:36:da:56:6e:9c:bd:ea:
35:f3:48:f4:b3:33:1b:28:21:19:74:1c:1f:3e:6d:
72:ed:25:02:43:45:f4:34:56:2c:f1:85:0f:3c:bf:
fe:82:50:49:98:0e:0d:78:e9:29:12:06:59:a5:f8:
58:05:5b:17:dd:ae:42:4d:10:b7:c8:38:c1:af:16:
77:0e:2d:c2:e9:29:55:cc:ef:87:69:71:08:8d:88:
22:95:05:fa:2c:20:63:2a:9a:29:18:51:f8:a6:bd:
6b:2d:73:ca:50:46:74:3d:ec:09:c2:a3:4e:91:b2:
e2:d2:87:2c:a0:c0:78:79:e9:e9:c8:e7:d2:5c:87:
cb:30:9a:32:2b:83:86:82:2f:2b:c9:b7:a2:38:af:
be:dd:be:83:50:f9:1f:37:4b:fe:a8:c6:52:7f:42:
13:cd:8b:d9:62:14:05:a1:22:14:45:66:f2:f7:d0:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AA:04:4E:F7:E4:6A:98:3C:B8:7D:61:23:9C:99:AF:35:49:C4:43
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/j6oETvfkapg8uH1hI5yZrzVJxEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:ee:62:f4:ea:f6:0b:7b:58:1e:75:09:c4:fa:34:31:39:78:
cc:04:87:96:77:a1:f4:58:ec:8a:a0:3c:2e:4d:b0:39:a9:71:
97:94:f8:0d:22:f9:4b:6f:e6:3c:9d:ed:4f:bb:e6:fb:20:b2:
a4:a4:05:96:37:76:d8:cf:54:e6:8b:be:a7:b3:c4:19:75:5d:
aa:19:cf:89:8c:78:94:d9:ba:7c:17:ea:29:54:cb:53:00:74:
32:b8:59:39:98:b8:f4:90:57:fb:5d:eb:72:f4:50:fd:a8:ff:
eb:80:65:06:28:64:72:b9:8f:a7:7b:68:f1:54:24:a9:60:ad:
fc:4e:ad:11:91:25:1a:7b:3d:c7:0d:21:a3:35:90:5f:92:e5:
af:8f:96:25:c8:ee:2d:2c:f0:22:2a:18:86:f9:07:bc:48:d4:
19:7e:c2:cb:73:79:35:ff:66:fa:c5:a5:9b:5f:36:01:ff:ce:
b4:c1:e3:52:55:7e:05:4f:50:71:fe:c0:dc:84:0b:53:bf:b7:
8f:67:56:a1:84:9f:1e:f2:9f:4c:b9:67:3e:8b:83:05:f8:24:
a9:1f:0e:83:99:96:b1:22:26:83:7c:4c:b7:88:15:15:fc:e6:
fb:69:a9:14:95:2e:17:04:37:62:0e:15:94:07:46:0e:5b:37:
4a:d7:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:13:48 2025 by rpki-client