Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/I5Y1Bob2csnLTBjRh8BOVZ2T6B8.roa
File: I5Y1Bob2csnLTBjRh8BOVZ2T6B8.roa (raw, json)
Hash identifier: 9u4UAxJn1MSHX1cqsBIQHQK/OHdwhnJEnCyd5gyZ+Go=
Subject key identifier: 23:96:35:06:86:F6:72:C9:CB:4C:18:D1:87:C0:4E:55:9D:93:E8:1F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA7C6F62AA394F4A4233A8124FCF243EC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/I5Y1Bob2csnLTBjRh8BOVZ2T6B8.roa
Signing time: Tue 07 Nov 2023 03:15:16 +0000
ROA not before: Tue 07 Nov 2023 03:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a7:c6:f6:2a:a3:94:f4:a4:23:3a:81:24:fc:f2:43:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 7 03:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2396350686f672c9cb4c18d187c04e559d93e81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:04:68:57:87:9c:ff:4e:83:90:43:cc:40:d8:
54:46:ef:58:dd:69:5d:6c:2d:0f:f6:5e:57:32:8b:
27:dc:be:dd:eb:bb:3c:80:3b:f8:ad:f8:be:33:e6:
15:ee:a2:1f:c4:0c:4c:22:2b:2c:b3:fd:f3:a0:59:
a1:95:f3:46:50:c4:5d:70:5e:92:18:90:8d:d1:84:
ec:79:06:8b:86:14:ee:1e:68:c6:ee:8d:22:10:df:
19:36:81:2b:ad:70:f0:e7:8d:7c:61:24:ef:cc:ab:
4b:5f:5e:f5:38:e2:0b:67:2e:a5:89:8b:ad:09:e2:
1e:59:c6:81:c7:51:67:39:87:bb:e8:14:a6:7f:78:
2e:1d:7b:37:a4:34:a6:be:1b:7a:d5:00:6b:b8:7c:
67:8c:1c:28:7d:8c:d4:18:54:16:92:ec:3d:32:6b:
06:a8:08:c7:e7:6e:d2:a0:70:a8:65:ab:27:d0:43:
16:3e:65:57:4b:08:a2:2b:4f:5f:19:4b:5c:dc:84:
2e:1d:56:8f:89:06:17:aa:63:51:ad:a9:5b:cb:46:
d2:cb:c2:7e:bb:2a:c5:ff:22:ae:52:34:43:58:11:
97:07:93:cb:bc:16:f5:09:96:0d:75:54:f2:1a:7c:
a4:16:5d:e9:7a:93:4e:ea:02:12:e0:b5:d2:84:60:
d9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:96:35:06:86:F6:72:C9:CB:4C:18:D1:87:C0:4E:55:9D:93:E8:1F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/I5Y1Bob2csnLTBjRh8BOVZ2T6B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bc:05:94:11:5f:f8:b7:e6:df:1b:39:c5:d9:be:76:ec:4b:3f:
e8:17:10:89:b8:a2:eb:1c:17:4b:ee:f4:78:7c:36:f4:2a:d2:
3b:48:45:25:d5:42:f9:57:90:03:3c:37:f3:96:2c:5e:98:15:
c2:ee:91:54:a7:dc:19:19:55:ca:ab:cc:ea:69:a1:cf:60:c7:
d2:c4:ea:d2:41:12:0b:c9:b6:94:2b:38:5b:40:9b:19:16:f4:
ba:13:b5:03:48:7a:e5:57:5f:43:42:cd:e9:87:f3:50:b0:e6:
ea:79:ac:85:dc:1e:a1:79:11:df:52:4d:fc:41:be:81:48:6d:
33:66:ae:63:d8:fb:00:d8:2f:bd:e7:8d:cb:29:69:3d:bd:48:
16:69:ac:5a:63:03:8c:16:89:e8:a7:dc:17:88:e3:13:8a:98:
20:a4:18:dd:f0:60:25:c9:30:f6:81:0d:9c:d0:0f:e3:22:0b:
d2:48:e6:3b:e4:b2:0e:88:7b:44:86:e6:fe:7f:e1:79:35:a9:
1a:52:24:49:a0:ca:dd:46:ea:26:7b:2a:17:f3:88:60:73:ec:
5b:bd:17:61:bb:c3:42:c7:fb:8b:9b:fd:c8:a0:39:6a:9f:7d:
21:74:14:1d:65:cc:80:9e:56:e9:65:f4:af:be:9a:ab:ef:ed:
b2:85:80:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:09:28 2025 by rpki-client