Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sFEvQC1JjHtZ8ZKl4aHtj0CRinY.roa
File: sFEvQC1JjHtZ8ZKl4aHtj0CRinY.roa (raw, json)
Hash identifier: I65u3Izor710UDCnJl0CYI/r+bb+i9eo8FqHygOFeAI=
Subject key identifier: B0:51:2F:40:2D:49:8C:7B:59:F1:92:A5:E1:A1:ED:8F:40:91:8A:76
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B389A9309A607D432A1F95B8912981F5E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sFEvQC1JjHtZ8ZKl4aHtj0CRinY.roa
Signing time: Mon 16 Oct 2023 13:08:56 +0000
ROA not before: Mon 16 Oct 2023 13:08:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:3896:759d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:9a:93:09:a6:07:d4:32:a1:f9:5b:89:12:98:1f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 16 13:08:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0512f402d498c7b59f192a5e1a1ed8f40918a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:66:69:57:a1:6f:06:13:9f:a8:b5:09:48:41:
61:16:70:60:10:68:72:d4:57:55:62:b5:01:01:98:
fb:67:16:c8:76:e3:3f:b8:48:84:b0:f2:4a:ce:b6:
c7:32:f4:77:df:3c:a4:b7:e8:f3:d8:2a:24:72:8d:
4d:d1:4b:b8:c8:20:b6:5b:bf:85:c2:62:85:8f:5f:
0c:e1:74:4a:ed:a8:63:ea:3a:7a:73:9a:9f:45:30:
00:6f:7d:0d:d2:0d:59:ef:28:a7:b4:c8:44:79:30:
2b:75:0f:4e:e2:02:f0:2a:ef:cd:5e:73:3a:c2:44:
9c:18:e9:49:44:56:58:30:f3:81:0b:f6:bf:9c:9b:
ad:3c:c3:68:03:4c:2a:1a:8f:d1:37:4f:0b:1b:14:
36:29:83:fb:0f:2e:79:57:91:84:1e:f2:a3:02:c2:
94:0e:e4:bb:b9:9b:6e:19:9b:7c:1f:72:73:ab:21:
21:21:8f:72:83:af:cf:f4:0e:6b:ed:54:41:c5:9c:
86:bb:2a:d9:1f:fb:c3:02:3a:5e:2e:68:8e:f0:ba:
7e:7f:a6:4b:16:74:78:63:ef:86:8e:1d:80:20:b9:
39:a6:29:2c:e7:76:2a:39:62:68:02:ac:4b:cf:f5:
cc:08:eb:36:5a:8e:6f:80:88:f5:2a:ca:b5:61:1a:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:51:2F:40:2D:49:8C:7B:59:F1:92:A5:E1:A1:ED:8F:40:91:8A:76
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sFEvQC1JjHtZ8ZKl4aHtj0CRinY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:c1:f2:b8:4c:73:7f:64:6a:49:a2:97:8e:e2:40:8f:ed:9e:
3e:19:f6:af:21:6c:eb:6d:a9:4e:59:3f:ee:8c:44:9e:89:ba:
b6:e2:8f:38:00:a3:ae:e0:25:17:81:9c:e7:38:86:1c:5c:d9:
7a:e6:27:a5:e2:2a:ae:85:aa:25:a1:a7:03:27:1d:a2:61:c8:
f8:5a:af:e3:9c:ec:24:9e:90:7b:32:df:11:ef:0a:7d:73:22:
9e:73:08:17:b2:7f:a6:55:84:fc:a2:96:c5:79:b0:dd:6e:55:
e8:e0:85:f0:56:28:fa:9f:ee:62:0f:42:dd:c5:37:5f:a6:de:
c5:47:9f:24:1c:a2:b7:ae:ad:25:c5:da:37:14:19:d5:22:c0:
40:05:94:e2:be:10:ba:76:3f:52:10:d9:af:86:7e:05:da:86:
95:8a:74:16:97:d1:b9:68:24:c7:41:72:ff:85:8f:da:60:35:
f2:7c:63:84:af:77:eb:ad:43:02:6f:1a:06:75:c4:75:96:ae:
88:e5:7b:55:00:98:a7:c2:d4:cb:62:ae:5b:21:d5:96:ae:85:
c2:21:d6:b1:41:ff:36:ae:cd:e2:d2:f9:f7:86:ad:be:81:d1:
7f:12:73:1f:99:3e:88:71:69:86:0d:b5:79:26:2a:7a:97:39:
d5:13:05:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:25:35 2025 by rpki-client