Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m2SCJ539JscekI6Ki0vAa69MQVU.roa
File: m2SCJ539JscekI6Ki0vAa69MQVU.roa (raw, json)
Hash identifier: QyfoQpPwhDR2WyuoXaTTTOh+WkN6r3lrounz+J8D3gE=
Subject key identifier: 9B:64:82:27:9D:FD:26:C7:1E:90:8E:8A:8B:4B:C0:6B:AF:4C:41:55
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B943D6FBAD12140D01C12C96BA12FEAB9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m2SCJ539JscekI6Ki0vAa69MQVU.roa
Signing time: Fri 03 Nov 2023 08:12:16 +0000
ROA not before: Fri 03 Nov 2023 08:12:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:3d:6f:ba:d1:21:40:d0:1c:12:c9:6b:a1:2f:ea:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 08:12:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b6482279dfd26c71e908e8a8b4bc06baf4c4155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0e:89:c1:02:3c:3d:27:ab:e9:3f:36:5b:e0:
1a:1c:79:0f:a9:5e:a3:ff:b0:93:b9:c5:47:20:6c:
e4:36:cc:99:da:d3:cb:9b:6d:a3:bc:26:14:7e:71:
67:c4:bd:a4:ef:42:c3:ce:4a:b8:f4:af:f4:69:d0:
87:78:fd:a6:11:4e:48:2a:52:ac:99:89:68:07:cb:
6e:56:74:77:7c:e5:2e:e7:b0:e6:ce:2a:08:f5:19:
7d:f8:ea:85:ea:0a:e4:70:da:ee:4d:da:08:53:13:
e1:54:7e:f8:03:ab:c7:a7:c3:97:30:3c:91:20:05:
69:90:f7:aa:fc:72:a6:ce:7c:48:40:3d:d9:85:ba:
41:30:0e:e3:e4:3c:d1:63:a1:bb:97:ea:b3:1b:8b:
8c:d1:ae:df:70:99:b0:a2:20:e7:ff:52:ff:b5:3e:
5b:3d:a7:a7:7a:ce:b7:42:4e:2d:b5:8e:8a:3b:fa:
c7:78:98:52:da:30:d5:2c:d7:0c:1e:3d:8d:95:85:
4a:05:99:ab:52:ee:be:46:b9:ed:b3:0b:87:50:83:
28:61:5f:4c:04:25:77:3e:84:c1:dc:46:6b:cf:26:
db:5a:d8:c4:3f:1d:11:a1:cc:f2:f0:86:3f:bf:f5:
3b:ea:63:98:f2:c8:1c:18:fe:5a:aa:c2:76:a7:4b:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:64:82:27:9D:FD:26:C7:1E:90:8E:8A:8B:4B:C0:6B:AF:4C:41:55
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m2SCJ539JscekI6Ki0vAa69MQVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:51:b9:de:ed:74:4b:cd:ba:39:b0:9d:20:b1:b6:e5:2b:ff:
9a:ba:b9:80:72:82:e2:a2:4d:35:21:7d:0f:43:6e:60:33:98:
13:4b:b1:b3:0c:94:c8:9a:d3:3e:c2:63:5d:bd:59:08:57:28:
25:df:80:61:66:16:3b:49:c3:87:02:b5:d9:b7:e9:44:2a:98:
16:8a:9b:27:83:82:0d:6b:09:31:46:6e:96:5e:63:af:f4:01:
64:54:bf:a2:8d:fd:5e:68:ce:31:cb:83:3b:7a:4a:f3:9f:38:
a0:f4:e0:cf:ab:0b:7b:bf:9e:ae:4d:26:87:3e:fc:93:06:ea:
fa:cd:ba:3d:e8:a3:78:78:49:08:8a:b0:a8:76:8c:64:bd:fc:
ea:59:71:ef:cf:69:94:f8:d7:55:74:92:44:40:f6:67:1c:4e:
eb:83:4c:ab:4b:5a:3a:2a:6e:ff:85:64:91:3f:72:c1:3d:fd:
ee:1a:c2:5e:61:ca:1d:cd:f2:88:b8:b8:a9:2c:78:4b:3d:ad:
3f:04:1a:43:5e:05:a8:a4:76:5d:91:f0:5c:97:78:fb:b8:c3:
01:45:52:04:10:f7:1f:63:33:e7:d5:79:8c:a0:c2:f1:0d:8d:
fb:cc:5a:8c:e5:5f:d5:3e:f3:d2:21:0b:cc:3f:e6:f3:3f:63:
5c:f8:f4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:33 2025 by rpki-client