Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BjX028h4prHqwyrVCV4t1RryCO0.roa
File: BjX028h4prHqwyrVCV4t1RryCO0.roa (raw, json)
Hash identifier: DM288DKgQfOZFsjCk/ZXEoUjZzxPvVsvMr4poKm/c0c=
Subject key identifier: 06:35:F4:DB:C8:78:A6:B1:EA:C3:2A:D5:09:5E:2D:D5:1A:F2:08:ED
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C292C089027B5F0755508B278A64E5173
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BjX028h4prHqwyrVCV4t1RryCO0.roa
Signing time: Sat 02 Dec 2023 06:16:40 +0000
ROA not before: Sat 02 Dec 2023 06:16:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:29:2c:08:90:27:b5:f0:75:55:08:b2:78:a6:4e:51:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 06:16:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0635f4dbc878a6b1eac32ad5095e2dd51af208ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:82:5b:20:c4:aa:d8:32:e8:5b:5f:fc:74:c3:
2d:31:0e:7a:0f:07:b6:4d:74:5c:02:99:13:48:4d:
bf:37:e8:05:29:de:65:13:f1:6c:18:8b:22:26:59:
da:b4:dd:81:ff:82:d9:8a:97:cd:b1:9e:96:5d:8d:
d8:a1:9b:b6:fc:a5:fb:60:81:d2:37:b3:75:fd:44:
95:b7:57:ab:d7:f6:47:c0:37:b1:5b:d3:b5:d8:b4:
53:f7:31:a9:5a:78:2c:8f:f0:72:26:02:93:e1:d9:
0d:b4:0b:66:4b:5a:29:88:1f:db:bd:2a:ce:c9:91:
18:4a:cc:95:46:37:73:df:5f:80:d2:f8:e4:51:e1:
03:5b:12:61:8d:22:82:3d:d8:6d:34:f0:5e:81:99:
0a:c8:10:11:0f:e7:4c:a8:1a:c6:f7:ef:72:2f:db:
d0:88:b7:5f:3a:d5:09:7c:dc:ac:db:22:54:8b:5a:
55:74:93:4a:62:d9:0e:bc:24:4b:63:a3:67:b9:3d:
e1:c3:13:fa:07:55:8b:12:c1:00:fc:59:04:53:2d:
49:9e:f9:9d:a4:05:9b:e3:ca:99:83:4c:36:ec:16:
02:f3:68:e8:1c:bc:6d:2b:ad:56:ca:c0:b8:0c:b1:
09:1f:b0:b9:d8:d1:4c:4f:a5:7f:03:20:07:01:59:
11:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:35:F4:DB:C8:78:A6:B1:EA:C3:2A:D5:09:5E:2D:D5:1A:F2:08:ED
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BjX028h4prHqwyrVCV4t1RryCO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:c0:f1:87:c6:db:b3:b0:2f:ce:dd:6a:6a:b7:4a:91:61:05:
06:ce:e4:47:d5:91:c6:19:a8:7f:dd:83:12:03:86:2c:bc:93:
f5:19:da:fa:9a:82:90:84:c0:f5:00:69:3d:59:d6:bb:75:b7:
fb:3a:93:ea:51:d7:bf:c6:03:6b:67:95:3d:9e:f6:51:58:51:
2f:3f:f6:91:14:31:6e:3d:8a:ed:54:7d:63:df:cc:dc:89:3e:
34:04:af:2b:a4:d0:67:b4:0f:58:47:fb:a1:07:b8:29:62:31:
24:2f:45:db:96:fc:ca:13:21:f5:4b:15:c4:b9:41:e8:b0:0f:
82:8d:d5:90:21:63:12:10:24:7d:c1:89:c0:4f:e8:c2:f7:0a:
76:bf:72:94:d7:40:af:b3:70:c6:71:e6:dc:97:a9:56:14:3a:
f3:0f:be:52:df:f0:43:86:c7:5a:f0:02:35:10:d7:cc:0f:01:
2e:1a:08:3f:3d:ad:6e:79:a2:c1:65:36:47:24:b7:4f:d1:b4:
1f:7b:8a:6d:31:aa:3c:96:26:59:1e:9d:e6:4f:96:45:cc:5a:
56:b0:34:17:e8:ee:54:56:05:32:b8:27:cc:be:9e:73:ae:d7:
bd:b0:4d:e5:da:4d:3e:50:d3:58:4e:42:82:d5:37:cc:94:12:
80:9c:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:39:18 2025 by rpki-client