Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s8Flq65Dw8zEuyrlp2ij9Rn80C8.roa
File: s8Flq65Dw8zEuyrlp2ij9Rn80C8.roa (raw, json)
Hash identifier: GJBXo3VVrixqAkIOl/TLDC8EPLotjN2axk7K6eD3VDs=
Subject key identifier: B3:C1:65:AB:AE:43:C3:CC:C4:BB:2A:E5:A7:68:A3:F5:19:FC:D0:2F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B939D37BBE9362C4C352E1FA109E9F635
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s8Flq65Dw8zEuyrlp2ij9Rn80C8.roa
Signing time: Fri 03 Nov 2023 05:17:15 +0000
ROA not before: Fri 03 Nov 2023 05:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:9d:37:bb:e9:36:2c:4c:35:2e:1f:a1:09:e9:f6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 05:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3c165abae43c3ccc4bb2ae5a768a3f519fcd02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:18:78:9b:2b:6a:c4:8b:de:d7:17:1c:15:a7:
9e:be:34:8f:a0:a0:1a:46:68:a2:5f:9e:5a:58:82:
78:33:9d:0c:91:ee:6d:22:6d:f1:69:46:1c:91:85:
1f:0c:27:c4:1c:13:32:2a:4a:48:a2:3e:1a:8b:92:
6f:40:33:a3:90:e3:e7:e1:c8:dc:61:da:49:2a:93:
c1:c8:21:28:9e:14:f8:99:aa:65:c9:45:96:fb:09:
00:1e:44:de:ea:20:02:1f:fd:d8:98:ed:23:52:5c:
2b:46:d6:f4:ab:7b:cb:ff:63:53:d4:6b:08:cc:14:
9f:0e:1b:1a:6e:49:00:78:d7:55:1d:5d:a5:36:51:
f6:c1:12:00:fa:bf:74:44:f3:ab:d4:72:25:7a:d5:
ef:03:7a:5d:19:3b:e0:ca:2e:8a:79:85:f4:d7:b4:
97:78:3a:5e:b0:aa:db:32:bb:33:87:62:cd:5f:79:
f2:37:fc:f6:45:89:08:6a:61:8d:3f:59:c5:9a:09:
d1:9e:58:ef:34:ae:7d:9c:db:2e:4e:12:4a:38:65:
d0:f2:75:a7:91:c9:b7:3e:0f:7f:74:13:ee:df:c7:
24:4c:7f:14:0b:22:a5:7d:b5:2a:ac:60:d5:3b:9c:
ca:33:19:d0:d3:9f:4d:4b:8a:a0:b0:47:4c:07:a3:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C1:65:AB:AE:43:C3:CC:C4:BB:2A:E5:A7:68:A3:F5:19:FC:D0:2F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s8Flq65Dw8zEuyrlp2ij9Rn80C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:85:b7:6c:24:83:0c:2e:9a:17:ab:44:53:8d:17:28:45:28:
3b:83:3e:47:03:03:72:52:f1:b0:fa:79:cc:43:2b:c3:c9:c1:
06:39:cd:b0:e6:e8:01:06:d5:78:46:f9:48:e4:12:b3:fb:1c:
9c:f2:a3:4f:76:70:a2:34:ac:f3:3a:b4:45:e0:ba:6e:e9:32:
45:64:03:23:80:47:b2:ce:ca:9a:53:8b:b4:e1:a7:a3:05:c0:
9c:64:66:1c:9a:bf:32:39:e6:63:06:a6:05:93:75:d7:79:d2:
6f:9d:d2:c8:71:67:89:9e:d3:19:e5:05:1f:43:1f:e2:7c:be:
c1:c5:4a:5a:aa:a7:79:a7:71:9a:7f:d6:d5:7d:b5:53:16:2f:
a8:c2:c7:0a:f5:ac:af:21:3d:5e:e2:db:e2:24:2d:d6:78:57:
d6:36:e9:84:4b:ea:fa:9a:1a:90:61:5b:2d:c5:57:bc:50:4c:
d8:3d:91:67:4f:6b:2a:0d:2a:47:bc:c0:69:a8:5a:a0:ef:ef:
33:57:df:94:60:89:8e:87:0c:6a:b5:82:55:41:b1:79:ca:6e:
ea:38:57:76:27:1b:69:8e:76:db:49:1e:7d:3d:bb:e4:36:fe:
65:09:01:bd:70:35:66:b9:38:af:1e:c4:5a:2e:1b:66:a9:a9:
44:49:93:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:59:29 2025 by rpki-client