Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ssiYZxodCtvlHCiesNMsJDX3GI0.roa
File: ssiYZxodCtvlHCiesNMsJDX3GI0.roa (raw, json)
Hash identifier: U7kSDJw8kE2zUIfFlegEMK8tKCr75R8vmAsYtf/nWQY=
Subject key identifier: B2:C8:98:67:1A:1D:0A:DB:E5:1C:28:9E:B0:D3:2C:24:35:F7:18:8D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE1B02E1F69A4AE005A595F7C2556281B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ssiYZxodCtvlHCiesNMsJDX3GI0.roa
Signing time: Sat 18 Nov 2023 09:08:21 +0000
ROA not before: Sat 18 Nov 2023 09:08:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e1:b0:2e:1f:69:a4:ae:00:5a:59:5f:7c:25:56:28:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 09:08:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2c898671a1d0adbe51c289eb0d32c2435f7188d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:4a:de:33:16:d5:3b:3f:32:2c:c9:94:36:
f3:ec:12:24:15:a3:6d:de:d0:1d:14:84:b1:dd:01:
4a:97:89:57:5f:8d:56:ab:4b:18:bf:68:67:d6:8b:
51:6b:75:1f:fe:d7:b3:5d:a3:51:1c:50:ac:e9:4b:
51:b4:06:36:dd:ac:ee:e2:79:9e:1d:b6:48:5b:aa:
6a:67:9b:31:40:97:23:4e:8b:a1:8c:c8:31:21:53:
ba:f5:8e:eb:cf:02:79:9e:84:54:5b:0f:66:ed:48:
ff:7d:e6:3e:22:06:fe:c4:b4:bf:23:42:01:6f:5a:
f6:d4:84:8c:7a:fa:9b:12:60:23:3f:1e:c9:a6:84:
ca:34:7f:84:ff:60:4a:0c:86:19:02:dc:5a:3b:23:
66:a0:c5:58:b8:14:20:dc:9b:18:fe:ca:18:46:61:
35:80:45:93:d3:be:bb:88:3a:80:4c:0e:81:0e:c4:
5b:3d:8f:59:5c:fd:98:f0:41:62:93:1a:0d:90:3e:
56:fa:f7:5c:ec:19:0f:d1:7e:9e:99:29:7d:1a:85:
2e:09:16:46:af:b8:72:26:06:b8:cf:d6:cf:0d:8e:
1b:10:0f:96:88:5b:af:e7:e8:63:1f:05:48:a9:db:
d1:2d:0c:fe:02:af:c5:45:59:6a:ec:dc:27:97:42:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C8:98:67:1A:1D:0A:DB:E5:1C:28:9E:B0:D3:2C:24:35:F7:18:8D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ssiYZxodCtvlHCiesNMsJDX3GI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:5f:82:cd:b7:99:71:b8:7b:c3:ca:ee:28:5d:a8:9e:e2:b7:
a6:04:a5:f6:9b:15:dd:64:7e:ae:83:74:5f:94:b4:c1:54:8a:
84:86:86:c4:83:e9:69:fe:74:c2:37:43:17:cd:7b:24:9f:88:
aa:38:be:46:41:99:f0:55:39:16:ad:5c:30:32:b6:f8:bb:1f:
53:76:55:07:25:4a:29:ad:b7:d6:02:0b:ef:d4:82:83:e6:8b:
2b:32:d2:49:f4:d0:9d:66:e3:65:7e:fc:e3:e6:31:f8:eb:9f:
e5:85:bb:0a:3f:f2:1e:c9:3e:27:0f:cb:dd:9a:a6:26:57:e5:
c6:7d:21:96:2d:a3:33:15:4a:73:9c:2e:23:ec:5d:98:d2:41:
d9:15:f5:6f:cf:62:72:01:02:50:ac:c7:d3:c6:91:41:39:36:
66:37:cd:38:8b:94:5e:34:bc:b9:eb:45:85:4b:14:26:92:09:
02:58:0f:a1:f4:4a:52:18:4d:21:d5:3e:b4:7e:8c:14:44:0d:
72:6b:c2:d3:3c:8d:6e:98:d6:c0:ce:85:69:ca:88:de:9c:3a:
00:6d:47:22:f8:14:d7:d1:33:b2:07:50:53:e3:e7:b0:8c:a6:
53:7a:33:cc:ca:9e:bc:f2:11:e3:31:16:30:4d:5f:55:59:42:
98:0c:61:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:39 2025 by rpki-client