Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jkZQ2KLwoNPjx6gMidHhhYmyCt4.roa
File: jkZQ2KLwoNPjx6gMidHhhYmyCt4.roa (raw, json)
Hash identifier: iv9qARnHbQEnxwcOopmvs9RFgkc+L9k+MMyVIPmIC5M=
Subject key identifier: 8E:46:50:D8:A2:F0:A0:D3:E3:C7:A8:0C:89:D1:E1:85:89:B2:0A:DE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADCFF65DDDA8DCCB2FBFBC630BA6AC8C9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jkZQ2KLwoNPjx6gMidHhhYmyCt4.roa
Signing time: Thu 28 Sep 2023 18:13:59 +0000
ROA not before: Thu 28 Sep 2023 18:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dc:ff:65:dd:da:8d:cc:b2:fb:fb:c6:30:ba:6a:c8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 18:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e4650d8a2f0a0d3e3c7a80c89d1e18589b20ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:c3:b1:f3:4c:d5:d6:a9:aa:83:de:19:bb:
fc:5f:d9:5b:b3:9c:ed:01:eb:34:03:6a:e7:e8:87:
e7:f6:12:3a:e6:e5:82:8f:b2:2c:ec:27:dd:5f:6c:
14:b1:09:bb:5b:54:f1:a2:8d:f3:1e:db:39:d4:57:
9f:f9:9f:84:c1:38:09:22:9d:1c:b8:7a:05:32:10:
4b:4b:d9:88:1c:05:0b:9e:39:f9:a7:9f:65:cb:25:
42:1c:46:5d:49:13:55:63:28:1a:41:10:dd:dc:b9:
e6:e8:7f:73:9d:e8:bb:ae:06:e3:ac:21:4b:4e:a1:
b9:ab:32:40:a4:55:dc:eb:32:c6:5e:e2:4f:40:26:
df:d6:37:9c:b7:1e:12:93:81:84:8f:5b:71:e5:d1:
89:ba:97:9e:b2:b5:f2:d8:f7:87:12:a2:8a:f1:9b:
e9:bf:91:70:9e:24:32:ef:3d:72:01:d4:48:17:f1:
2c:70:f2:21:49:a3:e1:b3:fb:c5:ef:4e:43:85:60:
05:5b:04:16:d5:7c:4f:a6:f1:d5:ac:8f:bf:96:1f:
b8:52:6d:5a:b1:4d:32:66:f0:3f:b1:4f:e5:6e:9a:
92:8d:1a:71:7a:7a:b6:a4:9b:90:52:25:91:eb:5d:
27:61:fd:85:72:c9:77:3e:f9:7a:61:57:71:f8:69:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:46:50:D8:A2:F0:A0:D3:E3:C7:A8:0C:89:D1:E1:85:89:B2:0A:DE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jkZQ2KLwoNPjx6gMidHhhYmyCt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d2:84:72:40:f2:55:7f:23:fe:e2:10:44:aa:49:8a:44:cb:73:
fc:70:4a:ba:c6:97:cb:1e:2a:3c:af:c0:62:f1:ae:27:a4:10:
94:b4:d0:c8:8d:0f:38:a2:5e:df:08:4c:01:61:55:d7:e8:18:
18:46:9a:a2:38:6a:fa:e7:89:98:4f:e1:d4:52:11:51:9b:02:
ea:c4:1c:2f:14:d1:09:ee:af:b7:95:73:b3:51:c5:91:cc:f8:
47:20:d5:8c:67:43:e9:cf:fd:e8:97:5e:8e:e3:98:c0:95:75:
56:90:6e:d3:5c:75:11:c2:63:ce:6d:17:64:29:af:dd:4e:df:
9f:fa:e2:70:08:67:cc:86:41:6f:c1:8a:27:44:17:45:ea:fc:
63:dd:bf:f9:e4:b0:b9:c6:2c:12:a0:9f:4d:bb:a8:c2:6c:b9:
9a:70:1c:ac:17:54:c5:98:3a:3d:44:13:c8:38:e0:51:ce:39:
13:51:e6:d1:0f:66:4d:34:84:dd:4e:5d:bc:8d:a3:f1:80:25:
57:2d:72:e3:98:53:91:ee:76:ef:0f:f9:da:ae:6d:72:95:3c:
29:64:9f:94:20:c6:3e:c5:ec:79:ef:9b:17:b7:0d:0e:98:e8:
64:68:2e:ff:6d:54:85:b8:6a:b6:57:6a:f7:82:e0:6a:91:6b:
70:56:61:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:30:36 2025 by rpki-client