Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rBy3JHBbJHJZUcu-eehbYtOVf90.roa
File: rBy3JHBbJHJZUcu-eehbYtOVf90.roa (raw, json)
Hash identifier: hyXReDSfjwmEd/lvKLKpq/0qCp1NrBNIp6hBB7qx5rQ=
Subject key identifier: AC:1C:B7:24:70:5B:24:72:59:51:CB:BE:79:E8:5B:62:D3:95:7F:DD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABDACDD519BF3396626A167599688BA19
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rBy3JHBbJHJZUcu-eehbYtOVf90.roa
Signing time: Fri 22 Sep 2023 16:15:37 +0000
ROA not before: Fri 22 Sep 2023 16:15:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bd:ac:dd:51:9b:f3:39:66:26:a1:67:59:96:88:ba:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 22 16:15:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac1cb724705b24725951cbbe79e85b62d3957fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:67:e9:ba:f5:98:41:c7:ba:55:d1:63:fc:
c2:b9:23:8f:c9:f9:1e:76:a2:06:06:bf:a0:91:b4:
7c:80:64:ed:55:67:38:bd:16:ec:7e:94:36:a4:37:
00:25:fe:2b:45:1c:a9:e1:a1:c5:25:67:bd:1b:a2:
0d:ee:61:7d:a3:35:55:70:a6:8a:31:5d:f9:75:51:
87:df:f8:5d:85:c9:77:48:65:13:c7:40:8a:ed:0e:
31:95:14:ec:06:45:9d:7b:98:38:5c:b5:f5:cb:b9:
57:e7:ee:fc:d2:49:5d:bd:93:e9:a3:f0:c2:ae:55:
06:f5:ae:33:4a:f6:38:45:1c:2d:7a:90:92:c3:6b:
04:19:8c:29:5d:b4:07:66:22:9e:e9:d0:ec:90:82:
0c:9a:0f:4c:35:33:34:c0:57:65:17:28:30:78:ef:
66:31:f1:98:97:a2:22:7d:db:aa:80:97:70:2a:b1:
fa:87:76:3a:5d:2e:fa:21:7e:63:eb:5f:62:27:7c:
30:fe:1a:34:22:d1:07:6a:83:09:c0:38:db:13:8f:
7b:db:87:5a:32:52:69:0e:35:69:21:e2:6b:07:48:
07:6a:15:56:8f:64:de:6b:7d:70:2b:4b:7c:03:6a:
c1:e1:e1:00:66:ef:f1:8d:03:59:18:30:b6:b2:f6:
95:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1C:B7:24:70:5B:24:72:59:51:CB:BE:79:E8:5B:62:D3:95:7F:DD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rBy3JHBbJHJZUcu-eehbYtOVf90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:0a:2e:e4:0e:4f:10:64:69:6b:9f:f1:5b:5b:02:08:a9:98:
f2:e2:4f:f7:e8:f9:31:8b:6e:65:b7:fa:c4:5d:e3:e6:ac:ad:
04:04:b1:c7:41:59:65:96:3c:0a:84:b7:4b:27:3b:8b:66:8c:
a7:c1:4f:da:80:d5:69:30:ec:8b:70:6a:31:97:90:1a:3a:5b:
88:28:39:1a:e3:d6:b9:a5:6e:34:af:34:ef:55:ac:bc:e1:f1:
74:9f:c0:c8:48:16:8f:83:ac:f4:83:33:e8:33:9d:44:f5:6c:
06:e1:43:e8:51:0a:d6:a1:e7:dd:44:00:7c:20:87:53:62:a0:
71:5a:03:c5:f0:2a:54:09:4e:14:a4:a7:4e:97:b7:2b:f9:22:
c3:3c:fb:ba:6a:9d:c6:67:31:ea:4a:18:7e:0f:3f:aa:02:96:
63:07:3a:58:0e:d1:de:46:20:06:d5:09:64:8d:bb:a2:fa:d8:
3d:ff:f1:0b:be:01:6d:1d:39:7c:e2:2a:1d:29:98:7b:c2:bb:
fe:a9:6c:60:fc:34:23:20:ff:25:d0:43:15:b5:aa:83:60:b6:
6f:f2:af:3c:3b:97:0d:d5:f3:d0:62:6f:70:be:0b:9f:18:e1:
85:a7:65:6f:34:cf:7f:f9:f0:93:5c:f2:9c:c9:6a:8e:10:eb:
c6:1d:8e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:46 2025 by rpki-client