Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2k9AMO7mPuyEiAjq6O5wQ7LnxK8.roa
File: 2k9AMO7mPuyEiAjq6O5wQ7LnxK8.roa (raw, json)
Hash identifier: NuLTmUC2MLEYssjibeRXuX1khmTYp97yc/phIr9VIxA=
Subject key identifier: DA:4F:40:30:EE:E6:3E:EC:84:88:08:EA:E8:EE:70:43:B2:E7:C4:AF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5AF743AEC093D205EABF24CBF3D1A39E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2k9AMO7mPuyEiAjq6O5wQ7LnxK8.roa
Signing time: Mon 23 Oct 2023 05:17:16 +0000
ROA not before: Mon 23 Oct 2023 05:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5a:f7:43:ae:c0:93:d2:05:ea:bf:24:cb:f3:d1:a3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 05:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da4f4030eee63eec848808eae8ee7043b2e7c4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ec:cc:24:dc:33:a4:21:8b:36:e3:34:55:ee:
d7:76:1b:64:0e:e0:32:0d:b7:e6:da:3c:ad:29:c4:
73:ba:9a:d1:93:65:d9:c6:ce:9c:20:8a:e9:6e:04:
d3:5a:5d:4a:7c:f1:4d:f3:68:72:0a:1d:e0:53:1e:
bf:a4:b8:8e:68:b9:f0:82:b0:4b:9b:fc:42:f4:e3:
72:bb:4e:03:ea:ef:a4:e0:53:4c:29:ff:c7:35:6e:
09:98:4c:82:08:49:e6:f9:3a:aa:32:fd:d1:08:cf:
e6:39:77:b5:9e:44:09:2e:16:ca:b8:c0:9d:4b:44:
8a:6a:dd:3e:b5:66:b2:d0:ce:94:b7:d3:b4:6b:ee:
ed:ea:b3:c2:a5:58:9c:09:7f:55:02:87:25:dd:fe:
ae:63:a7:b0:00:72:3d:a5:fd:2d:21:f6:44:82:39:
99:c9:ed:1f:52:b9:b3:dd:39:f6:0e:8b:18:16:5e:
62:92:11:ad:56:a2:28:16:a0:d5:90:5f:c1:ce:51:
6d:f2:cc:4f:cd:a4:62:2d:16:79:f8:96:8a:a1:2e:
60:68:7a:10:3b:97:f0:59:0b:7b:2c:55:4c:e3:70:
f4:85:24:2a:65:7e:7e:1a:24:2f:8d:17:ba:e5:7d:
bb:02:32:c7:6c:94:a2:0f:d5:73:5b:59:d3:26:39:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4F:40:30:EE:E6:3E:EC:84:88:08:EA:E8:EE:70:43:B2:E7:C4:AF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2k9AMO7mPuyEiAjq6O5wQ7LnxK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:72:7b:4e:8d:6a:30:4a:75:a5:c3:29:45:13:49:0a:cb:23:
bf:0d:89:bb:0d:8b:8f:65:70:cc:0f:e5:70:08:60:3d:9c:36:
36:fe:86:08:dc:ee:a7:63:0d:72:97:2a:a5:a2:c8:38:e9:78:
b8:2b:ae:15:4a:e3:b0:9d:3e:b4:c8:d7:93:38:28:b0:cc:2e:
fa:62:03:23:3d:06:2b:08:e9:b3:11:a9:6e:ff:3c:cf:b0:7d:
2e:b0:c0:1a:36:5b:a0:c7:ca:51:08:b1:d0:c8:c8:c0:59:e1:
60:65:31:32:55:cd:10:b1:65:e7:85:a0:52:7f:4b:80:53:49:
44:09:f8:7f:34:e7:05:f3:b0:b0:7b:67:b6:9c:74:93:51:10:
56:8c:17:1b:7a:14:18:b3:33:24:8e:22:8b:8d:41:e5:03:21:
54:17:ab:3b:5d:3c:f3:b6:80:da:b5:ad:8c:06:2d:a8:35:69:
49:64:6d:94:72:f9:b4:29:0c:19:f5:33:5e:67:ba:88:d7:07:
ae:fe:9c:5f:92:27:7b:75:6a:5c:7c:25:e6:63:f3:16:ed:00:
8c:34:a2:5f:ea:8a:81:c6:48:0e:bd:7d:2b:f3:e5:01:56:34:
4c:36:2f:b1:cf:3a:d9:06:c6:05:88:a1:04:6b:f3:00:67:60:
54:15:bf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:28:27 2025 by rpki-client