Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/joV8qK7KRxdpbnq3p8WGwqBIJ80.roa
File: joV8qK7KRxdpbnq3p8WGwqBIJ80.roa (raw, json)
Hash identifier: IkcAMFyPcBBpkpEnpLrp7rrEMYCd9vG7pK9Z9chLH/U=
Subject key identifier: 8E:85:7C:A8:AE:CA:47:17:69:6E:7A:B7:A7:C5:86:C2:A0:48:27:CD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADBB723D1EA55FBE663408E2E4774ECF6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/joV8qK7KRxdpbnq3p8WGwqBIJ80.roa
Signing time: Thu 28 Sep 2023 12:15:27 +0000
ROA not before: Thu 28 Sep 2023 12:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:b7:23:d1:ea:55:fb:e6:63:40:8e:2e:47:74:ec:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 12:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e857ca8aeca4717696e7ab7a7c586c2a04827cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:97:b2:cd:ee:2b:e9:8b:a0:3d:88:70:d8:
95:74:71:5a:34:bc:dc:41:2b:5a:9b:ea:1c:69:6d:
71:cc:ea:9a:ee:11:d9:38:a1:9b:03:9d:12:eb:c5:
bc:50:14:6b:03:6b:1b:cf:5f:ee:49:5f:a4:37:c3:
e1:f4:e6:13:3a:d3:dd:f0:9a:03:8a:56:55:da:f0:
4b:65:2d:cf:51:31:90:f5:a1:be:27:20:1d:4d:9d:
d4:bb:00:07:ec:9d:10:6e:65:22:36:fc:16:9c:eb:
61:81:62:30:39:d7:9d:c9:c6:fc:9f:d3:c0:eb:fe:
8e:e9:ae:eb:0f:07:18:ce:e3:32:38:29:5c:80:7a:
a6:cc:f6:08:9a:32:24:a1:87:ac:99:2a:d1:a2:50:
9d:f1:a5:74:6b:3a:c4:7c:3b:e0:11:c3:b8:c2:1f:
86:3f:56:ac:81:d9:16:f8:ce:93:93:00:f7:86:30:
80:c7:84:27:93:ad:d9:29:1d:60:3e:52:5d:b3:31:
e7:91:fd:b2:a9:ed:ec:9a:61:dd:9c:ed:c1:ce:98:
6a:b5:05:d8:33:0e:34:2e:c1:01:ca:81:6d:c5:31:
e3:f7:d0:5e:2a:c8:42:ab:05:6d:ce:83:0b:08:fd:
38:0f:fe:5b:3a:5c:ae:d3:3c:b9:c1:cb:63:5c:0d:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:85:7C:A8:AE:CA:47:17:69:6E:7A:B7:A7:C5:86:C2:A0:48:27:CD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/joV8qK7KRxdpbnq3p8WGwqBIJ80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:88:d2:e7:22:2c:18:7d:ef:7f:6d:1b:8d:27:7d:2c:d7:2f:
dc:2f:e1:7f:73:14:51:d7:1d:0f:66:33:ec:63:04:ae:e0:ca:
cb:9f:2f:c9:59:1a:71:cb:e8:bf:81:35:a2:07:56:2a:82:1f:
08:5b:41:4d:b8:aa:0b:88:d4:c4:a3:0c:ea:28:47:6d:c2:ba:
31:2d:af:da:5b:5f:a5:9d:ff:bc:61:f6:fe:0d:13:7a:be:29:
e8:3d:aa:34:c4:c9:3e:64:b1:aa:58:28:2e:32:46:b0:3d:89:
03:0d:b1:07:ed:e6:9e:61:50:11:1a:92:f7:ea:03:94:15:7f:
67:1a:56:46:d4:d7:af:5d:1e:50:a2:e9:c8:ca:b8:a0:47:e5:
16:b4:5a:2b:5f:1c:8b:b4:4b:b1:dd:52:7e:87:43:a9:42:ed:
c2:c3:a8:4a:f0:21:48:08:94:27:a0:14:f3:2b:86:af:67:41:
16:2f:08:1f:cb:97:df:a6:27:fd:6c:8f:9d:b8:22:62:98:70:
83:f7:66:50:10:b7:85:80:0a:45:9f:2f:be:c7:98:63:d6:af:
a2:32:60:56:12:96:e1:33:cc:c2:f9:21:23:b9:9a:95:62:da:
48:14:68:d6:da:d8:07:35:29:bb:70:34:3d:54:b8:cc:e3:d4:
67:79:89:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:44:04 2025 by rpki-client