Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/80m64i_ftWuHvdEF1IBRvd80Mxk.roa
File: 80m64i_ftWuHvdEF1IBRvd80Mxk.roa (raw, json)
Hash identifier: U9kqwePT/7E1zUaZAKPh8nDMg3Xpq+hZ8XLX0Ah98SA=
Subject key identifier: F3:49:BA:E2:2F:DF:B5:6B:87:BD:D1:05:D4:80:51:BD:DF:34:33:19
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA3AF99A1891788E441FCB8DA984B0D87
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/80m64i_ftWuHvdEF1IBRvd80Mxk.roa
Signing time: Mon 06 Nov 2023 08:11:16 +0000
ROA not before: Mon 06 Nov 2023 08:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a3:af:99:a1:89:17:88:e4:41:fc:b8:da:98:4b:0d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 6 08:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f349bae22fdfb56b87bdd105d48051bddf343319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:53:f6:da:ab:20:c0:f2:de:96:c0:8a:ea:
65:bf:3c:10:47:eb:d4:a3:df:77:04:80:1c:fb:de:
cc:71:4e:b3:ad:b9:3b:92:48:83:f2:4f:00:41:3e:
61:68:fd:59:24:32:94:45:d8:c9:e2:d3:c7:58:c5:
81:fc:e4:f6:7c:e4:3f:4c:e2:4b:6a:c0:e8:98:76:
b1:0f:10:53:fd:82:bc:a9:82:ce:ae:16:84:9d:5e:
2e:23:14:77:1a:ca:ae:54:58:ef:0b:e0:2e:e5:30:
6a:a4:2e:98:0a:0e:9b:b9:44:15:bc:a1:bc:10:00:
55:cf:d9:0e:de:51:40:45:4b:2e:20:bd:31:88:21:
88:ea:8b:e1:f8:21:1f:5d:8b:d5:7c:93:db:05:22:
f4:a7:0d:27:91:5c:62:7d:ce:68:e9:04:23:44:62:
6c:0f:e8:8a:e3:76:d2:18:d1:cc:93:ae:fe:4a:b1:
cb:f6:e8:ef:a9:39:7e:7a:ab:84:78:93:a8:f7:fb:
2a:cf:b4:33:ee:2c:9e:23:f5:56:eb:5d:13:4b:31:
d3:9c:cf:f9:69:13:40:8f:d4:23:74:6a:46:9c:63:
6b:88:63:9c:e1:96:13:32:cd:79:f4:1f:5f:ea:18:
aa:3d:cb:cc:fd:54:fb:d8:81:94:ea:d4:69:47:b8:
20:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:49:BA:E2:2F:DF:B5:6B:87:BD:D1:05:D4:80:51:BD:DF:34:33:19
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/80m64i_ftWuHvdEF1IBRvd80Mxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c8:8d:2e:20:6d:2f:79:a4:8f:16:06:ce:0e:93:ba:08:40:e9:
97:da:6f:ce:28:3e:3c:7e:c9:ec:03:87:47:44:d8:95:b1:79:
5f:e6:20:23:b1:8f:f6:71:d8:46:f5:25:79:d9:84:32:20:b1:
df:a5:69:4e:f1:1f:45:02:b8:ba:0b:74:5b:c3:3f:0a:71:27:
b4:2e:4c:17:7a:08:c4:14:bf:6d:57:be:51:b3:ee:c5:c1:ae:
52:c6:3f:a0:6c:00:9f:1e:3d:6b:b1:c1:ff:f6:47:2d:dc:c4:
9a:57:d4:41:f2:3d:73:d5:7f:52:1e:d4:0e:16:c7:49:d2:c0:
bc:04:a8:d7:13:f6:1c:fa:e6:4e:9f:77:d0:bd:55:77:55:ff:
f9:80:f0:c5:58:6e:90:94:ea:24:30:e4:eb:51:fa:9c:16:87:
2d:54:c6:88:bf:11:38:a4:83:fc:8b:68:6f:72:93:08:45:8a:
04:48:c5:4b:b6:ef:52:1c:09:99:94:dd:78:5f:9d:84:b3:d4:
22:fe:95:05:65:9b:c8:f2:14:0e:4b:98:da:0e:3f:90:02:39:
f2:e2:2d:4b:c1:e8:ef:b2:e9:8b:b2:30:17:c2:6f:77:f2:fd:
a5:67:bc:65:eb:74:89:72:ed:d8:c6:7d:64:9a:de:a1:98:d2:
c8:fc:11:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:14:38 2025 by rpki-client