Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1i0dBcr5xV1HgrznObNk5OlGUjw.roa
File: 1i0dBcr5xV1HgrznObNk5OlGUjw.roa (raw, json)
Hash identifier: ZAND+cMVlORD6qj53gSjMk8Z3A7Jt51JKybs44DTP40=
Subject key identifier: D6:2D:1D:05:CA:F9:C5:5D:47:82:BC:E7:39:B3:64:E4:E9:46:52:3C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0AB3AC1FA5CB3EC7C70542A8BB1C7ED3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1i0dBcr5xV1HgrznObNk5OlGUjw.roa
Signing time: Sun 26 Nov 2023 08:16:36 +0000
ROA not before: Sun 26 Nov 2023 08:16:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0a:b3:ac:1f:a5:cb:3e:c7:c7:05:42:a8:bb:1c:7e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 08:16:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d62d1d05caf9c55d4782bce739b364e4e946523c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8b:6b:79:17:8c:f7:e6:1c:39:3a:75:51:7d:
b8:20:8b:fa:bf:ca:f1:af:57:05:40:fa:f9:da:3d:
6c:96:76:70:f2:55:14:c6:c6:40:75:44:dd:04:63:
dc:bd:98:a0:da:79:d3:13:19:d8:c5:73:a4:b6:80:
11:d0:05:ae:4f:31:61:93:ed:14:30:64:ae:81:69:
a9:05:5e:47:4e:0f:3a:a3:eb:e7:c4:60:6a:f5:41:
6e:e2:bd:b1:bf:43:bc:dc:4d:67:71:ff:a3:9f:41:
8e:6c:31:8d:35:26:ac:e3:4c:ef:77:8d:bd:11:54:
0d:c9:29:d3:4f:5f:0e:ae:a2:25:06:b5:fe:33:3a:
25:30:7e:a1:37:07:03:70:ec:3b:c1:2a:d7:46:41:
9c:10:15:2d:f1:39:73:e5:9a:a4:8c:40:74:47:35:
55:a4:e3:4c:c1:7e:8e:5e:49:cd:5a:71:b6:04:10:
65:6d:5e:4d:bc:4d:63:ca:57:03:86:36:49:34:e3:
6a:d0:62:de:a1:f9:e8:e1:af:f5:08:3e:f6:36:0e:
4f:5f:92:72:6e:70:fd:73:23:d2:ed:be:4a:53:15:
c4:f0:4e:6f:55:b0:6c:12:a3:54:d6:6b:2e:1a:cf:
4f:6c:3a:33:e7:d1:fa:5d:8a:a2:f7:d3:5a:2e:09:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2D:1D:05:CA:F9:C5:5D:47:82:BC:E7:39:B3:64:E4:E9:46:52:3C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1i0dBcr5xV1HgrznObNk5OlGUjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:e2:22:d2:f3:b3:6e:c6:f7:82:91:8d:10:79:f3:ac:a0:34:
d5:84:dc:28:24:57:7a:cb:84:e6:70:83:ab:0f:09:46:50:44:
32:82:12:15:ff:7c:41:2c:e5:98:22:a0:44:b0:6d:13:19:9d:
f9:f4:f8:fc:3f:3e:e9:76:79:ae:12:3a:88:e0:0d:80:a4:5f:
c9:58:1f:49:ba:be:ce:a9:e5:ba:60:64:71:a4:05:cc:f7:5a:
97:40:e4:40:40:62:02:dc:0a:26:fe:3d:70:14:04:84:15:95:
0a:c5:0f:7b:4c:74:a0:09:16:84:a7:6d:ab:85:f4:89:1c:ca:
c3:da:54:59:33:f1:8c:0c:3f:94:56:3d:49:95:82:bd:d8:b3:
34:8f:c4:44:1e:c9:a2:5a:36:0d:84:92:21:0b:37:bd:b2:17:
2f:36:29:70:bf:c0:ef:74:0b:ec:41:c9:21:fa:31:05:41:9d:
e9:38:f7:40:ea:18:ca:0d:96:5f:7f:5a:be:7e:28:c2:d3:e6:
4d:f3:47:e1:d2:32:41:57:99:d5:50:3d:fd:30:85:b2:11:f6:
d8:58:95:1b:be:7a:61:f3:60:ad:a2:f8:3e:71:61:38:05:5d:
36:98:63:b5:bc:12:41:c3:51:a1:48:69:ea:da:84:8f:b6:9d:
cc:75:75:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:32:06 2025 by rpki-client