Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9ODJ6AncA5okxs6Q23arMDUewhs.roa
File: 9ODJ6AncA5okxs6Q23arMDUewhs.roa (raw, json)
Hash identifier: fmKo0SgNI815ZVoWROkEASxqehQmFtZ4SPCWyqf2I2M=
Subject key identifier: F4:E0:C9:E8:09:DC:03:9A:24:C6:CE:90:DB:76:AB:30:35:1E:C2:1B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD276682C77A5D7CD1297FC79135D6E86
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9ODJ6AncA5okxs6Q23arMDUewhs.roa
Signing time: Wed 15 Nov 2023 10:10:57 +0000
ROA not before: Wed 15 Nov 2023 10:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:76:68:2c:77:a5:d7:cd:12:97:fc:79:13:5d:6e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 10:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4e0c9e809dc039a24c6ce90db76ab30351ec21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:49:c0:f2:46:9a:77:59:4c:f7:a1:1f:29:4c:
d6:7a:d9:71:bd:7b:29:c0:d3:a9:0c:ce:cb:41:22:
c6:d9:7c:0e:b5:a1:bd:df:65:96:31:97:2c:d0:3d:
c1:9c:69:66:28:c1:c2:62:1c:44:d3:9a:3f:4f:91:
6d:56:08:3a:75:20:6f:ac:0f:37:37:55:53:8f:88:
92:a1:e6:b9:ce:7c:83:82:31:46:f2:1a:37:6a:62:
56:8e:61:93:ab:dd:49:92:ef:1c:4b:09:43:3b:e3:
39:3b:5a:ca:ab:e9:4c:65:83:9b:5a:a8:38:52:c6:
b8:38:9d:90:1c:ff:75:96:89:b0:f2:04:d9:49:67:
eb:1d:06:03:cc:4d:82:5b:71:23:01:f9:c1:c9:1e:
6a:92:55:14:91:37:8e:1b:a9:73:af:d0:c3:7f:ef:
e5:c5:8a:1a:72:7b:44:88:8f:ab:c3:83:27:78:80:
83:d3:45:cf:56:87:2c:58:ef:47:38:93:3f:5e:49:
9c:d5:a4:fc:ab:2d:f0:62:b4:96:3b:2e:35:f1:5e:
53:bd:83:05:c8:c4:ab:65:ed:0a:a4:06:de:0d:6f:
1b:1b:2e:a4:a4:5c:d9:9e:09:7d:e0:f5:d6:9a:c3:
75:12:1b:cc:1c:30:31:96:ae:c3:a0:b1:0e:25:ee:
8b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E0:C9:E8:09:DC:03:9A:24:C6:CE:90:DB:76:AB:30:35:1E:C2:1B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9ODJ6AncA5okxs6Q23arMDUewhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:74:8b:47:9b:2d:ca:6c:0f:db:19:70:f0:15:c9:f2:51:9d:
fe:17:21:a7:07:bd:d4:f5:c6:38:54:9a:f9:96:5d:22:a1:a0:
63:fc:36:94:a2:a4:7f:a5:f1:e5:3e:19:70:5f:d4:55:a3:a4:
a5:f1:d2:7d:66:0b:06:4e:16:17:bb:ae:fb:8c:d9:d9:91:6f:
a5:51:91:a6:cf:55:b0:b4:de:26:3d:bc:e1:89:2a:54:55:c4:
04:19:88:19:0f:a0:34:d9:d0:be:d2:03:4d:53:b2:6d:e2:27:
f3:c2:2b:d6:68:7f:37:7a:a0:9b:53:d2:6c:90:2b:c3:bf:2e:
42:7a:24:bd:c9:7b:d7:90:26:99:9d:39:f5:c3:39:e3:40:d9:
82:41:2a:71:ee:74:ad:c3:55:c4:35:d8:bb:cd:1f:ae:b3:11:
53:6b:76:d7:e5:a3:50:c6:14:7a:ff:2c:b3:04:c5:8e:ec:34:
22:98:65:ca:f3:91:62:67:be:30:f4:92:ed:48:82:7d:51:e6:
09:5e:fe:72:9c:c7:37:f0:4b:25:9a:9f:48:6d:d0:56:b5:8e:
d4:6f:c4:89:0e:9d:6f:bf:bd:e7:0d:fe:d5:ca:c7:98:bc:8e:
c9:67:68:22:a2:0c:37:49:30:43:50:82:2f:ac:a7:26:14:11:
c1:bc:a9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:13:21 2025 by rpki-client