Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rIXfBZYStHog3i_SorYJmOsYlYM.roa
File: rIXfBZYStHog3i_SorYJmOsYlYM.roa (raw, json)
Hash identifier: kBvSzLbdKOV4WROQ7BvDIAf4SBJVvoITs3lYj1ny7ok=
Subject key identifier: AC:85:DF:05:96:12:B4:7A:20:DE:2F:D2:A2:B6:09:98:EB:18:95:83
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF97ED824E15BB39C5F06B7047C5C9462
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rIXfBZYStHog3i_SorYJmOsYlYM.roa
Signing time: Thu 23 Nov 2023 00:05:21 +0000
ROA not before: Thu 23 Nov 2023 00:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:f97e:bab/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f9:7e:d8:24:e1:5b:b3:9c:5f:06:b7:04:7c:5c:94:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 00:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac85df059612b47a20de2fd2a2b60998eb189583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:49:c5:11:09:a4:00:ca:af:35:09:e0:f3:e7:
d1:97:14:89:0a:64:e3:d8:71:1f:09:6d:aa:63:3e:
0e:29:bd:38:a9:3e:04:63:7e:e0:29:c5:1a:dc:8f:
1e:29:f0:fa:6f:1d:a7:60:14:62:b2:a2:72:32:ae:
eb:d2:bd:c3:a6:5a:5e:a5:2b:39:06:09:a3:98:6a:
45:99:c2:20:94:2c:d2:48:23:3b:48:cf:2e:68:fa:
5a:fe:35:70:09:e9:d1:ab:f4:00:6c:6f:cf:cd:43:
a6:36:b7:36:6f:31:4a:49:8e:8f:76:ce:11:62:d1:
b1:f8:96:0c:8c:1d:be:a3:74:14:6e:b3:f5:f7:c9:
72:ad:b3:46:92:e3:b6:82:9f:1b:a6:2b:f2:93:2d:
50:55:32:1c:26:ae:5a:6e:d2:78:ce:40:f1:41:1d:
ed:02:3f:7e:a1:10:9f:0a:dc:22:57:46:64:da:21:
c2:5a:52:41:61:92:44:a7:0d:33:39:77:aa:94:d2:
27:a8:d9:84:61:8f:6c:e4:62:fe:6e:e1:87:75:fe:
85:9b:47:ac:0e:b2:6a:c2:8d:e4:ab:9e:71:bc:f4:
ca:c2:d9:ed:46:b3:56:61:78:bb:12:c8:b4:e3:91:
e4:37:6f:83:b5:dd:22:5a:a9:1c:42:c1:0c:3e:42:
77:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:85:DF:05:96:12:B4:7A:20:DE:2F:D2:A2:B6:09:98:EB:18:95:83
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rIXfBZYStHog3i_SorYJmOsYlYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:9e:fd:a9:8a:5a:a8:28:44:15:99:6a:1b:ee:77:9c:6d:ca:
5c:60:f0:59:13:79:6e:ac:0f:20:8e:a6:02:84:18:3e:7a:39:
3a:97:a7:b3:7b:11:e3:14:b1:54:95:21:2c:ca:e8:a8:9f:24:
5b:b4:56:a4:50:fd:0a:58:66:a3:17:3a:41:9c:79:bc:50:5c:
88:11:c8:9d:f6:03:9c:56:39:cd:ed:df:32:6e:6c:6b:ca:3a:
31:9b:73:31:e9:1c:e0:a5:77:b2:32:0b:35:20:7d:8a:72:65:
37:43:a3:be:58:1c:46:c4:80:24:cf:b3:ed:95:95:78:b2:37:
e3:66:da:e6:26:02:a7:21:ff:f1:e1:f3:ac:83:13:da:19:6f:
fd:5a:a1:e6:ca:80:8e:90:8d:76:89:39:1e:3f:be:ba:31:a0:
18:c6:55:c2:a8:02:c0:1a:df:9e:3a:81:05:c8:4e:77:28:92:
da:09:03:4c:0e:cd:91:e6:fe:d7:dc:bd:c5:22:bf:43:15:49:
fc:db:1c:17:fd:9b:59:26:0b:3a:00:90:a8:a9:ff:8e:fb:4e:
99:1b:73:30:55:98:d6:27:97:8b:ad:ee:af:a5:35:85:68:49:
43:7f:bc:b2:d3:9e:cb:ce:9d:a2:76:67:d4:22:a0:99:dc:50:
9e:3b:c0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:10:17 2025 by rpki-client