Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9zJEPl-QRQ0c3_kxgMNah36o51w.roa
File: 9zJEPl-QRQ0c3_kxgMNah36o51w.roa (raw, json)
Hash identifier: yVNhJN7iER29hCxonT1G53o9y1PR+YNH/NajQSJgymo=
Subject key identifier: F7:32:44:3E:5F:90:45:0D:1C:DF:F9:31:80:C3:5A:87:7E:A8:E7:5C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1A94B7104B19E4B10CE6952255EB415E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9zJEPl-QRQ0c3_kxgMNah36o51w.roa
Signing time: Tue 10 Oct 2023 17:13:55 +0000
ROA not before: Tue 10 Oct 2023 17:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1a:94:b7:10:4b:19:e4:b1:0c:e6:95:22:55:eb:41:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 17:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f732443e5f90450d1cdff93180c35a877ea8e75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:b3:bc:39:88:9e:fe:bd:4e:cf:68:50:dd:
bb:c6:0b:06:00:f3:cc:9a:aa:75:55:71:2d:e8:d5:
16:eb:04:fb:dc:5e:77:31:75:4f:2b:9f:af:65:aa:
42:89:05:23:57:d9:b6:37:95:09:0c:88:22:8e:5d:
28:ee:00:c8:72:8b:33:f3:29:4f:ff:f5:76:fb:0e:
ba:19:4b:58:42:b9:50:d1:0c:8f:52:c7:0b:84:65:
7d:44:e5:1b:12:f6:b9:8d:35:7c:2c:cb:32:ef:f1:
49:20:55:00:8c:00:05:46:e4:ca:4e:d4:9b:f8:17:
cb:18:c5:aa:2b:5b:86:3a:b2:25:05:90:a7:63:a2:
fa:74:b9:69:b0:ba:c2:f9:61:21:e6:6f:de:1c:f5:
84:aa:6a:6d:39:a8:75:8a:1f:a1:ec:6e:a1:45:17:
fe:29:85:d2:8f:0f:e6:f8:ea:d7:e8:5a:f1:63:6c:
c9:25:2c:76:43:36:a3:c9:a6:20:d5:c3:d7:7f:b6:
ba:4b:df:c5:c6:f6:66:d6:fa:06:89:89:bf:98:f9:
59:cb:95:db:59:ce:57:09:82:56:4c:c2:bc:fe:cb:
03:8f:59:3b:3f:64:68:34:2a:d7:ee:cd:4c:ba:0b:
96:98:9f:8e:a6:6e:27:23:e6:2d:df:7f:fa:1c:d4:
fc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:32:44:3E:5F:90:45:0D:1C:DF:F9:31:80:C3:5A:87:7E:A8:E7:5C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9zJEPl-QRQ0c3_kxgMNah36o51w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:df:2a:fa:f4:eb:35:62:a9:80:58:79:1c:f0:28:cb:fa:e4:
51:11:64:49:96:0e:b7:5f:d4:38:73:be:49:1f:4e:f0:9e:bd:
d4:78:54:da:b6:0a:6a:cd:4a:00:b2:e8:ae:74:49:81:dc:a2:
5f:f5:8a:19:40:90:46:6d:0c:5f:70:7f:e6:88:f3:80:b2:99:
9d:0c:f2:83:b1:ab:93:70:0d:31:8c:16:ae:4b:d6:37:1c:77:
f4:21:ad:4f:ac:50:5d:82:30:9c:8f:6c:59:1e:ef:b2:4e:22:
4c:24:64:39:e1:78:9e:5d:9f:93:a3:81:d4:69:8c:db:6a:86:
80:bb:b2:5c:38:64:4c:42:e7:41:56:d3:54:38:ac:f4:3e:74:
81:6c:9a:e6:b9:c8:cf:d4:64:51:53:09:7c:e3:6f:13:bb:31:
e7:ed:19:0c:6d:d0:2f:63:f5:1a:59:62:61:8a:25:d6:dd:fe:
df:99:47:b7:e7:31:8d:b9:d0:ab:60:c4:5e:97:50:e5:82:a0:
ad:3d:09:ce:15:61:1a:4c:33:32:20:bf:9f:91:96:ab:5c:76:
d6:19:39:c0:bb:eb:5d:f6:0b:b2:45:b0:0c:dd:54:37:c2:b8:
65:69:f9:48:ee:fa:f7:9f:7e:d5:b3:c2:d0:54:3e:3e:47:e9:
64:40:63:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:22:22 2025 by rpki-client