Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9BTEed5Mre4fQs3-dlywHI6ZDt8.roa
File: 9BTEed5Mre4fQs3-dlywHI6ZDt8.roa (raw, json)
Hash identifier: xXAeaNdMMvJdXffVW0L7/YuMHO3tQ0DljlL8cQUB89k=
Subject key identifier: F4:14:C4:79:DE:4C:AD:EE:1F:42:CD:FE:76:5C:B0:1C:8E:99:0E:DF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B208E8F86884A085A9BD3A44F1CDFD8F2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9BTEed5Mre4fQs3-dlywHI6ZDt8.roa
Signing time: Wed 11 Oct 2023 21:04:55 +0000
ROA not before: Wed 11 Oct 2023 21:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:208d:f49a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:20:8e:8f:86:88:4a:08:5a:9b:d3:a4:4f:1c:df:d8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 21:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f414c479de4cadee1f42cdfe765cb01c8e990edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:96:11:42:3c:65:6f:f5:eb:53:0e:7a:50:
d3:34:33:41:69:10:fa:62:b4:b3:7b:59:a9:04:e1:
e7:63:e4:0d:75:5f:6d:41:7c:b3:63:79:fa:c1:59:
a2:ad:52:ec:89:ae:ed:26:6c:93:37:ca:cc:4a:ff:
4b:3a:7e:7a:dd:4a:20:31:56:02:6c:8c:56:79:79:
97:a1:d2:83:09:6b:cb:a7:ef:b2:5f:d7:de:7a:78:
74:70:91:f9:d9:22:94:13:c5:9f:af:26:c7:83:08:
05:8d:97:62:69:94:fc:4d:c1:85:d8:4e:a6:d0:4b:
a1:02:1a:af:03:32:53:25:36:0a:b7:22:91:53:71:
b4:1d:80:60:cc:e3:69:9f:c4:99:31:f7:94:f2:ae:
61:94:81:2b:28:09:55:f7:ee:9c:bd:fb:a4:2c:8b:
24:06:05:17:22:b1:40:5b:b2:7a:65:34:c4:47:36:
e1:c1:3a:c6:b5:af:6e:fd:1b:41:93:89:b3:34:da:
9f:83:db:79:28:6a:89:9b:8c:fc:a1:d0:7b:06:18:
9d:8c:13:3b:03:81:7d:85:83:c8:a5:86:fe:4d:94:
d9:00:ad:53:2a:e5:56:5b:cc:6b:3e:ca:04:9e:12:
b9:ce:56:3b:1d:a2:6f:50:d6:e3:31:e2:bb:aa:00:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:14:C4:79:DE:4C:AD:EE:1F:42:CD:FE:76:5C:B0:1C:8E:99:0E:DF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9BTEed5Mre4fQs3-dlywHI6ZDt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:2e:d2:f9:b6:a2:f8:fa:fc:03:3a:aa:d6:93:49:9c:c1:4b:
f5:ac:d4:30:92:90:ca:a0:c3:9d:43:0c:06:83:ef:39:7b:33:
95:e5:55:63:c4:d8:11:e2:55:ba:d3:d2:1c:08:6e:27:0c:21:
7c:c6:b4:87:b6:b8:9d:86:7a:0f:8c:5a:ea:35:3e:ad:da:ae:
72:90:54:37:db:67:11:e1:3c:52:58:e5:64:a0:0e:a4:32:1d:
77:65:71:0d:6a:2a:d8:d3:12:6b:f8:4d:22:46:e0:91:12:d4:
bd:0a:1f:59:a5:48:a5:b1:83:15:f6:5a:95:b9:67:d7:ba:15:
85:15:23:57:2b:16:66:1a:78:cb:5a:e9:24:e0:a4:4c:e9:e2:
c2:72:98:ce:c4:54:37:6e:0a:e7:76:a1:bb:0e:d2:20:fa:98:
29:9f:c2:03:a9:ac:18:4e:39:c3:4d:d3:4a:18:69:da:ee:8b:
51:17:71:a3:ee:e8:58:32:5e:02:5b:53:37:0a:ac:e3:c4:af:
85:4c:cc:60:5a:39:ca:1a:8d:48:d1:05:6f:26:59:75:17:c2:
dd:02:d9:0b:01:70:82:05:53:e8:f1:c3:4f:f4:8e:ec:80:67:
e9:f0:c2:ff:63:8b:aa:8b:1d:cc:6f:12:c6:90:3c:bc:1b:c9:
19:22:e7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:40:10 2025 by rpki-client