Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v_V9SeIjuJ0EwqMA-Uqcyd2rYYU.roa
File: v_V9SeIjuJ0EwqMA-Uqcyd2rYYU.roa (raw, json)
Hash identifier: haILbkfN70/I5M+f1bVBmSN7Q/1EH7YI0Bms5lM5UWA=
Subject key identifier: BF:F5:7D:49:E2:23:B8:9D:04:C2:A3:00:F9:4A:9C:C9:DD:AB:61:85
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB3CE2A022C8E55695DF12034D1FB13F7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v_V9SeIjuJ0EwqMA-Uqcyd2rYYU.roa
Signing time: Wed 20 Sep 2023 18:15:47 +0000
ROA not before: Wed 20 Sep 2023 18:15:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b3:ce:2a:02:2c:8e:55:69:5d:f1:20:34:d1:fb:13:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 20 18:15:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bff57d49e223b89d04c2a300f94a9cc9ddab6185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:d9:85:74:04:83:22:35:47:4b:1d:f9:e8:
53:5f:fa:b5:48:75:eb:0c:2e:eb:94:0c:5c:a1:f5:
bf:ed:39:4a:71:8c:82:d1:1c:1f:64:d1:81:da:c8:
56:94:d3:e0:5f:4b:78:d8:e6:e0:8d:76:29:8a:b8:
d1:3c:f1:6a:72:0a:87:04:5e:ef:77:8b:10:60:e7:
96:d3:cc:32:3a:d4:c4:a3:f9:e0:f8:16:e4:c9:9d:
59:07:11:b3:ea:4b:63:9c:55:93:95:25:48:8f:ab:
7b:32:22:ed:9a:90:00:bc:5a:24:9e:34:a7:c7:ce:
36:7d:e1:fd:07:79:eb:4f:bd:9e:32:2e:d8:a3:98:
30:df:f3:89:50:3b:48:2d:18:3a:bc:23:f3:6f:e7:
0f:2e:d8:ba:1b:9c:78:c1:02:59:4b:a4:3c:e2:66:
54:39:2d:88:21:ef:0e:20:33:52:3d:75:3d:b0:d1:
72:bb:5d:dc:86:d9:ad:ba:2e:35:9b:40:fb:3c:57:
e2:3f:c1:45:1e:c4:2a:aa:08:c4:aa:76:f3:cf:a7:
be:41:50:9b:fe:1c:62:c8:ac:b3:7e:e6:2f:6d:c9:
c7:55:63:e7:c9:0a:0f:c1:6f:95:47:df:f4:56:e1:
07:88:9b:52:d2:d9:fe:e8:81:08:b3:0b:14:a7:2d:
f5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F5:7D:49:E2:23:B8:9D:04:C2:A3:00:F9:4A:9C:C9:DD:AB:61:85
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v_V9SeIjuJ0EwqMA-Uqcyd2rYYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:88:9b:9a:f7:f7:4f:f8:f4:bb:35:37:17:cf:b2:a8:56:c2:
ab:94:a0:a4:ad:28:54:59:9c:8e:6b:f9:e1:f5:9d:c3:ec:d4:
8b:72:c6:ec:d0:a9:ab:1b:e2:fe:42:14:35:66:33:c3:70:09:
21:85:83:11:74:38:16:23:17:60:ca:2b:ac:91:78:5d:d3:91:
aa:82:d2:50:cf:8f:0e:55:b2:af:1e:c1:20:9d:28:02:7b:6b:
1b:2a:d8:7b:8e:b9:42:ce:52:29:b7:4e:50:02:eb:35:58:26:
fc:2f:c3:e3:b8:27:4b:ec:fd:91:b4:48:d6:71:88:77:7c:2d:
3f:b0:3b:38:18:48:b6:3d:e2:74:39:bc:eb:01:e2:11:3e:4c:
8a:cb:64:fe:ab:1f:47:99:d4:18:45:f3:4f:00:3c:ef:58:70:
f8:90:79:f3:64:dc:4c:8f:9c:b7:0f:e1:ac:66:f5:26:6b:12:
14:04:d1:21:b0:40:66:4d:12:bb:4b:b4:aa:d1:15:aa:81:88:
14:95:27:02:00:ff:f7:c6:e1:81:10:b6:e3:ca:81:cf:ad:84:
37:52:d1:af:85:f6:eb:ea:c8:fb:32:4c:cc:8c:dc:02:86:a8:
c6:df:dd:ec:25:19:3f:04:50:36:d1:b1:8c:22:0d:00:36:9f:
09:2e:00:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:08:14 2025 by rpki-client