Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BKELq6D-_z3UICghAudvtXdWvgE.roa
File: BKELq6D-_z3UICghAudvtXdWvgE.roa (raw, json)
Hash identifier: vDa5FPT20XczUUMjg0hj3sTZ5PXbMGEWGzOZM0Br0DU=
Subject key identifier: 04:A1:0B:AB:A0:FE:FF:3D:D4:20:28:21:02:E7:6F:B5:77:56:BE:01
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B09A0EF4B007633F00A3EF70DC03D956B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BKELq6D-_z3UICghAudvtXdWvgE.roa
Signing time: Sat 07 Oct 2023 10:13:43 +0000
ROA not before: Sat 07 Oct 2023 10:13:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:09:a0:ef:4b:00:76:33:f0:0a:3e:f7:0d:c0:3d:95:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 10:13:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04a10baba0feff3dd420282102e76fb57756be01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:65:1b:a8:22:6b:35:62:5e:80:7f:46:75:
56:99:54:a8:15:14:b2:ca:5c:51:16:93:7f:14:11:
45:07:5e:02:a4:cf:6b:25:05:36:0c:4a:53:52:b7:
a2:81:61:af:a2:bb:e8:d1:37:a2:20:dc:ea:11:0a:
fb:59:bc:3b:ab:df:f5:5e:ed:45:b9:62:02:3f:7e:
80:ab:73:7d:9e:7c:20:bc:90:fa:e4:26:0d:25:e1:
38:d2:08:6e:c3:64:67:fe:3e:79:10:4c:5d:18:c7:
6e:36:b2:f9:91:49:a7:47:7b:f6:6c:50:fe:a6:a5:
05:9a:e3:a3:5f:66:ce:6a:f4:29:7e:34:80:bf:db:
29:3a:06:05:e5:af:e3:91:d1:a5:1a:96:a6:d6:cc:
26:86:7c:12:54:0b:6e:9a:cb:26:09:0e:4f:93:c9:
bd:4e:97:dd:28:ea:bc:91:c5:46:84:eb:8f:f7:7b:
dd:2f:1c:b8:db:da:92:02:5d:65:60:9c:0d:7e:43:
1b:88:88:75:97:17:04:ad:e5:8c:49:7e:07:67:2f:
25:d7:d9:3b:c7:6e:2f:ec:c1:80:32:0b:3e:8b:12:
db:00:5c:2f:40:1c:81:bc:d7:b9:63:c0:bc:df:19:
28:b7:96:d6:27:4a:07:d5:45:6a:04:8d:9c:c2:1f:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A1:0B:AB:A0:FE:FF:3D:D4:20:28:21:02:E7:6F:B5:77:56:BE:01
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BKELq6D-_z3UICghAudvtXdWvgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:19:70:4c:3d:a6:35:17:90:60:18:57:71:ad:2e:4c:4f:f9:
9a:2e:b7:b0:d7:fd:32:23:39:f2:c2:cb:3d:12:f5:af:03:28:
7d:a5:1e:19:c2:11:4d:96:11:5e:09:d1:35:00:99:81:ac:4a:
f0:4c:fb:6b:1b:67:8a:bc:0a:83:29:cc:74:30:76:60:24:16:
14:94:e1:67:bc:63:68:0c:0b:67:6a:bf:c4:78:bd:87:71:49:
c3:60:cb:f8:e6:34:4f:e4:86:5f:ac:8c:64:15:c3:27:62:63:
e0:09:ca:54:4f:b4:2c:23:54:99:a1:bb:24:32:62:0f:69:71:
4e:33:f2:3b:fc:e0:fa:42:f9:a3:39:00:15:93:60:81:19:9c:
cb:51:e8:a2:74:0d:70:71:e5:5e:18:ff:78:a5:de:1a:72:71:
a0:e1:45:ef:02:41:fd:88:a1:e2:3c:67:c0:78:ae:65:7c:f0:
aa:d8:29:6e:5c:65:62:99:da:91:e3:6a:1f:3a:f0:98:b3:d0:
b1:37:30:7c:8d:5a:71:c8:22:65:7c:c7:ef:46:42:e7:77:aa:
d0:f3:ce:c2:dc:84:a3:e8:f4:cf:41:9f:96:9a:fa:29:2b:cd:
7e:e3:11:b1:c8:dc:f6:b7:d1:1a:b0:6d:a3:13:f9:57:0c:23:
9f:26:83:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:44:14 2025 by rpki-client