Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2Ln3qdT0IcAN9xP6n1wnCm6b0YI.roa
File: 2Ln3qdT0IcAN9xP6n1wnCm6b0YI.roa (raw, json)
Hash identifier: mtNca4K2YJQw++jbwFBqdR9kOPpve98yr8McmusHMUA=
Subject key identifier: D8:B9:F7:A9:D4:F4:21:C0:0D:F7:13:FA:9F:5C:27:0A:6E:9B:D1:82
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BEAF1DE481B2829DB77094E0F30F469A4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2Ln3qdT0IcAN9xP6n1wnCm6b0YI.roa
Signing time: Mon 20 Nov 2023 04:16:41 +0000
ROA not before: Mon 20 Nov 2023 04:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ea:f1:de:48:1b:28:29:db:77:09:4e:0f:30:f4:69:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 20 04:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8b9f7a9d4f421c00df713fa9f5c270a6e9bd182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5e:e1:f1:02:fe:99:76:8b:fa:4a:ee:c6:86:
19:5b:09:82:73:09:b8:ac:ca:4d:54:5b:b1:1e:d3:
d7:5b:a5:5d:c3:14:44:51:79:21:88:32:77:17:9a:
cc:a1:a2:a3:ea:6b:40:5e:67:54:b5:6c:04:3c:67:
3c:1d:be:37:78:f8:3d:6d:bc:24:9e:8d:df:46:ba:
62:99:f0:df:0d:ab:0b:9d:e3:a6:ae:4d:04:bf:2e:
5e:1b:27:8c:6a:c8:82:5a:44:0c:49:c8:fd:04:86:
86:61:c6:db:4b:4e:42:46:94:4a:e5:3d:c2:3e:fb:
ce:05:5f:67:55:c1:e2:e7:5d:f5:d1:ed:35:29:c6:
80:63:2a:0c:65:c3:9c:29:f2:5c:31:93:a1:48:88:
8b:96:f2:e4:49:5d:af:03:29:0c:24:c0:66:6c:0a:
8e:d8:fc:80:82:05:aa:ad:54:a4:96:ff:01:e7:fb:
1c:4b:03:a1:97:96:87:04:0b:89:7a:17:b4:00:e7:
56:b2:08:a8:b4:a9:ba:5f:cc:c5:88:08:3b:eb:a8:
f5:82:74:13:fb:55:60:f6:a6:c4:ad:8d:81:84:a0:
01:ec:84:1c:06:b6:41:e9:5e:b3:27:5c:ab:4d:49:
89:2c:08:65:47:21:54:60:6d:22:f1:01:eb:bc:14:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B9:F7:A9:D4:F4:21:C0:0D:F7:13:FA:9F:5C:27:0A:6E:9B:D1:82
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2Ln3qdT0IcAN9xP6n1wnCm6b0YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:ee:a3:80:25:27:88:18:44:63:f2:51:dd:40:29:5c:42:ab:
d0:80:5f:06:5e:30:9a:c3:eb:02:cd:4b:8c:92:1f:37:1e:3b:
07:8e:e6:df:20:66:0f:04:95:c2:ec:c3:38:a3:31:cf:b0:84:
04:cf:7f:60:bc:ff:8e:1b:6f:6f:49:27:84:bb:59:71:d0:82:
cb:50:ea:2a:a4:3a:bd:15:55:c0:e9:81:21:11:6e:72:42:5a:
ee:a3:ec:8b:2f:72:e7:eb:03:9a:c1:83:3c:b1:b8:7b:86:2d:
fe:5b:de:55:c8:a7:08:fd:74:0a:31:00:1e:d0:b6:7f:a8:46:
83:48:d6:8d:59:26:1a:f3:f4:14:a5:c2:ac:b4:12:b6:81:f6:
fb:11:08:87:9a:84:50:6c:a7:58:a7:96:45:b6:2e:80:9a:9d:
7e:c1:d7:50:02:2d:c6:6c:d4:89:ea:e9:17:8b:80:d3:50:75:
95:18:af:90:2c:1a:d0:45:a6:2c:62:9d:0d:1b:ae:50:98:b4:
60:f6:b9:c7:40:32:c1:c2:39:70:b3:16:ed:67:39:20:e2:2a:
fc:e2:ff:c6:3d:c8:b7:3e:79:18:78:bf:60:fa:76:2f:22:8c:
f6:75:4a:24:67:96:7d:96:ce:54:8d:c0:76:ba:a9:ba:06:76:
08:e0:e0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:56:21 2025 by rpki-client