Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jrB2rRUg1XShYVRwxpXn6-nom3k.roa
File: jrB2rRUg1XShYVRwxpXn6-nom3k.roa (raw, json)
Hash identifier: uNHL+2p3lfH2FAmYjft8zAxRg07oCe79SIK/fgeG1BQ=
Subject key identifier: 8E:B0:76:AD:15:20:D5:74:A1:61:54:70:C6:95:E7:EB:E9:E8:9B:79
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C8614E7F83F5012CA2E3A5E5C91CBF667
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jrB2rRUg1XShYVRwxpXn6-nom3k.roa
Signing time: Wed 20 Dec 2023 07:16:06 +0000
ROA not before: Wed 20 Dec 2023 07:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:14:e7:f8:3f:50:12:ca:2e:3a:5e:5c:91:cb:f6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 20 07:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8eb076ad1520d574a1615470c695e7ebe9e89b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:9b:e9:63:49:ac:b2:35:ec:41:bc:d8:73:
0b:be:02:24:2b:dc:b4:1a:3e:ba:a4:24:01:e9:6b:
52:67:d4:ae:8f:ca:c5:b7:74:a0:39:b6:c0:77:50:
f7:aa:3d:b8:d5:0e:27:b8:8a:95:73:92:fd:16:96:
b8:80:69:e5:c3:d8:57:2c:a7:36:83:34:7e:48:fe:
b3:0a:7f:9b:53:0d:ad:69:d4:ad:93:1d:6f:ac:ab:
b9:6f:2b:ae:5f:b8:02:91:b2:0b:50:0f:ee:2a:6b:
29:4a:e2:83:03:33:e8:c0:24:6a:b5:8c:e2:45:ea:
b3:22:2f:8e:1d:98:03:4c:36:53:20:c4:78:61:23:
f2:01:f9:ce:e2:70:08:b4:ec:e0:e1:eb:cf:f2:9f:
76:cc:a0:45:66:0f:d7:63:e3:93:f5:ff:0f:22:db:
72:b0:fd:1a:c5:6f:fb:cd:58:a9:bc:93:dd:96:37:
16:82:b7:c1:9d:04:94:5c:e0:87:d6:0a:ee:e7:06:
a3:d9:09:25:ad:81:81:3b:8d:85:13:1e:a8:2f:d4:
7b:7e:f4:bd:2e:25:a4:47:50:75:ab:1c:8c:cb:07:
f5:69:ca:ef:8b:11:65:01:ad:49:a5:22:62:11:16:
95:b9:f3:d3:3d:11:d3:59:74:48:b7:3c:af:64:0e:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B0:76:AD:15:20:D5:74:A1:61:54:70:C6:95:E7:EB:E9:E8:9B:79
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jrB2rRUg1XShYVRwxpXn6-nom3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c3:1a:03:7e:fe:a7:5d:42:e5:0a:49:42:3f:b2:53:71:ce:d5:
cb:f0:4d:e2:d9:7a:a6:5d:09:b0:73:c1:b5:4e:b4:3f:d0:b9:
86:ed:9e:60:53:ea:af:dc:60:53:83:0b:46:bc:7a:7e:f0:62:
a7:9e:8e:c8:ff:41:e7:c4:48:4e:67:08:d7:23:e0:ce:5c:bd:
d8:02:13:a0:7c:d6:78:0c:fc:ed:5e:e6:c7:2f:8b:e6:d3:15:
c1:b2:be:ff:3b:c2:d6:e4:99:03:4e:3b:33:00:a7:14:8e:52:
dd:ad:85:c6:cb:00:3f:cf:a4:da:bb:90:37:01:0d:37:05:44:
e3:07:78:0e:93:5e:a7:44:34:89:5f:e8:2d:98:14:6f:81:36:
b1:fd:3f:91:c3:0d:73:7e:41:1a:82:0f:47:96:ac:3c:d5:d0:
16:04:d5:9b:23:7d:a5:c0:06:08:4e:7f:39:08:7f:7b:0b:5f:
42:04:24:c8:96:1b:40:25:61:c7:7f:d3:ea:ed:5b:8e:86:27:
07:ad:a8:83:91:77:2e:8c:09:b9:78:cd:06:53:bb:a5:11:a7:
77:93:9b:8c:28:44:df:c4:2d:fc:63:9c:ce:e7:8d:57:6e:ce:
57:4a:e2:01:c9:33:98:26:fe:a0:a0:69:11:81:dd:bb:45:c3:
92:f0:bf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:52:39 2025 by rpki-client