Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8jMUv-lCMQiWW4R9HpOJu9qq1KY.roa
File: 8jMUv-lCMQiWW4R9HpOJu9qq1KY.roa (raw, json)
Hash identifier: nWmEM2onNDPkrzH6ySmalcGMblFk8FlxIyqSH9/QuKA=
Subject key identifier: F2:33:14:BF:E9:42:31:08:96:5B:84:7D:1E:93:89:BB:DA:AA:D4:A6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C57E850ACFFE9775DA2DEE1BC43FF9C4C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8jMUv-lCMQiWW4R9HpOJu9qq1KY.roa
Signing time: Mon 11 Dec 2023 08:04:51 +0000
ROA not before: Mon 11 Dec 2023 08:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:57e7:d703/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:e8:50:ac:ff:e9:77:5d:a2:de:e1:bc:43:ff:9c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 08:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f23314bfe9423108965b847d1e9389bbdaaad4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:b2:0c:cb:2d:3e:2c:4a:92:33:c9:ee:f8:
95:a5:02:82:a9:4f:31:26:9f:8f:24:1b:5c:a5:f7:
92:68:6d:1f:d1:da:97:41:7f:bb:ce:bd:aa:93:09:
ff:16:59:37:9f:0f:25:da:e5:7b:8a:9e:5b:ed:7a:
19:3e:c3:3f:33:45:bb:56:d9:54:55:d2:48:9b:a5:
5f:c0:eb:38:67:ee:05:7c:9a:9d:0f:af:c5:85:33:
7f:b5:0b:5b:4b:22:c7:d5:25:3d:49:7b:6a:e7:66:
44:68:d4:5b:6a:e8:b6:e0:8d:9d:ff:13:e8:d3:5c:
63:f3:28:65:38:ea:e9:33:56:37:09:0f:7b:3c:e8:
f5:3e:fd:d8:8c:91:8f:78:8b:17:ad:e9:7a:1b:0f:
fb:c7:3e:42:3f:f9:c8:c5:ec:f6:78:15:cc:b1:ca:
a5:b4:d6:19:a4:70:f3:5c:0d:79:a3:11:91:0c:aa:
01:2d:69:58:b8:65:98:22:1e:c3:da:cd:07:30:a0:
5c:70:26:5e:d1:4a:dc:06:53:fe:62:42:96:a2:28:
b8:83:b8:4d:e9:0e:d2:a8:d1:93:df:19:55:1a:bf:
72:ed:34:63:a6:3d:fb:4e:9b:9c:46:e2:9e:c6:60:
27:93:b5:54:10:e7:10:5d:fb:8a:d7:8a:0b:2f:4e:
8d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:33:14:BF:E9:42:31:08:96:5B:84:7D:1E:93:89:BB:DA:AA:D4:A6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8jMUv-lCMQiWW4R9HpOJu9qq1KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:9c:ff:f7:78:74:0c:d9:3a:2b:8d:93:23:50:e4:84:96:4e:
f8:3c:3c:ba:5a:42:a7:96:ad:c4:37:81:95:2e:aa:26:6e:01:
5a:5c:00:44:47:e6:e4:27:68:0d:86:ad:07:17:9f:6c:2c:80:
f8:3f:57:3b:2a:5d:9e:d1:e7:46:c8:fc:7f:bb:87:81:c0:4c:
aa:e3:3e:5e:48:b7:12:a7:96:1e:c0:8e:68:f7:d5:60:0c:ab:
f1:45:09:f8:c5:ad:ec:92:9d:77:78:72:c4:0d:8f:b3:9e:10:
2d:2e:f8:22:1a:02:33:f0:09:dd:16:a4:bc:5f:d8:a9:2c:4b:
10:36:14:41:03:16:c3:43:6e:86:7e:4e:c5:14:74:f2:6b:94:
f7:39:67:fa:6b:05:bd:ba:5c:eb:20:12:72:e5:58:5f:13:f4:
1f:ce:75:7c:cd:d6:74:f8:06:f7:96:f3:0f:6d:33:1e:d2:d8:
57:c7:5e:dd:86:bd:b0:76:c5:c9:49:4d:90:91:96:5a:cc:b0:
53:1c:c1:e5:6b:e8:f2:a2:46:df:24:ee:9e:cd:98:5a:c5:bb:
e1:cc:15:d8:14:8f:0f:d2:e0:39:49:8c:0d:4e:5c:1b:50:b5:
0a:d2:ff:25:2f:d1:55:2b:7c:fe:5e:ef:c1:19:f5:60:08:50:
c8:70:17:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:16:17 2025 by rpki-client