Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uM9nP8IkE21Vm3ao84m9GJvETac.roa
File: uM9nP8IkE21Vm3ao84m9GJvETac.roa (raw, json)
Hash identifier: VbG9TEBFkli1Q71PZ5i/q9WdRo/KW2HZIO6ZQCaLMUc=
Subject key identifier: B8:CF:67:3F:C2:24:13:6D:55:9B:76:A8:F3:89:BD:18:9B:C4:4D:A7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF61A4898347F3AA19CE7746A24F83EC7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uM9nP8IkE21Vm3ao84m9GJvETac.roa
Signing time: Wed 22 Nov 2023 08:16:39 +0000
ROA not before: Wed 22 Nov 2023 08:16:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:1a:48:98:34:7f:3a:a1:9c:e7:74:6a:24:f8:3e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 08:16:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8cf673fc224136d559b76a8f389bd189bc44da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:c0:ee:c5:cb:1f:e5:2a:10:82:f1:e7:c6:
e0:c5:82:57:52:62:44:b6:a6:7a:5e:82:b8:be:e9:
8d:29:ab:3a:c7:a2:07:96:60:f0:dd:9e:0b:59:a5:
12:37:2a:12:1c:a0:61:31:f3:e7:d4:73:85:09:e1:
a4:75:25:97:f3:1a:05:97:1b:0c:4e:93:08:20:83:
52:06:f6:2a:a1:48:cc:df:f4:ef:64:f6:4b:b7:dc:
19:ab:ad:9d:04:03:46:eb:0a:8f:ea:2e:46:93:84:
b3:cd:b5:70:63:e4:58:7d:db:a6:a7:a1:30:d4:e2:
67:91:33:62:38:b9:88:e2:06:46:97:14:0e:ce:d3:
37:08:78:aa:17:0f:2f:82:d3:7e:6e:7a:54:e8:48:
d9:24:ff:f7:fb:2d:b3:e7:11:d6:22:ac:2e:45:bc:
b9:1a:40:01:a7:1e:3d:14:15:da:1f:1e:ea:22:da:
3d:3f:61:d3:7d:f0:6e:9e:63:24:2a:5c:14:f4:e1:
73:af:a7:10:a4:b6:ab:01:49:8d:80:d3:43:18:f5:
4a:98:81:b3:a1:cb:d8:5d:e4:5f:81:55:48:f6:96:
fe:ad:20:81:ba:86:ff:16:39:bc:cb:27:99:8c:5d:
f0:a0:ef:12:52:a7:1b:77:d7:08:f7:04:53:2e:6b:
64:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CF:67:3F:C2:24:13:6D:55:9B:76:A8:F3:89:BD:18:9B:C4:4D:A7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uM9nP8IkE21Vm3ao84m9GJvETac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:e9:c6:7e:99:d3:c6:0f:0c:dc:bf:ce:f3:e6:b2:50:0d:77:
ba:76:d5:67:75:f1:e2:71:8f:76:a4:75:de:64:7c:20:7b:e1:
16:09:98:4e:95:f1:5b:1f:fa:86:17:36:76:08:f9:84:da:ed:
36:4b:47:43:9b:36:b9:7e:a2:15:8b:c4:b6:58:fd:61:01:38:
63:c5:ab:f9:0b:a5:f5:79:36:e9:8e:5d:22:3c:85:59:07:60:
a7:ff:28:9f:83:c8:13:fc:45:27:4f:63:9e:4a:07:cd:99:05:
f2:5e:ea:af:0b:b1:37:45:df:d3:df:d8:85:d5:9d:61:d6:19:
e8:8f:31:19:5a:f3:45:0a:1e:39:cd:b8:0a:2e:eb:65:fb:72:
7e:de:f0:31:66:6b:a7:33:80:1f:14:68:ee:60:90:31:9b:6c:
a9:d4:ff:bc:06:09:0a:bb:46:c9:6c:6e:50:f6:d9:c4:23:2d:
0b:09:85:2d:6f:ef:2f:1a:ff:2f:4e:3f:97:1c:67:9a:7d:0a:
06:24:b8:64:1a:35:e7:ff:1a:76:d2:c6:d2:f0:89:48:b2:06:
22:e5:49:b9:4f:46:0f:da:ed:b1:db:d1:aa:6d:84:da:0e:9b:
31:d0:10:b8:7a:e5:37:61:e9:4f:dc:95:04:ad:66:9b:93:06:
4c:a2:a7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:48:11 2025 by rpki-client