Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IRECLFwD0dWflBPmx0oC0mK_ASM.roa
File: IRECLFwD0dWflBPmx0oC0mK_ASM.roa (raw, json)
Hash identifier: PN0BdqAnmlaXD8F+2Oyc0X9SEYE+YH18JToL9WbjrJM=
Subject key identifier: 21:11:02:2C:5C:03:D1:D5:9F:94:13:E6:C7:4A:02:D2:62:BF:01:23
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C450D9F414C8537D834C1DEB584A4AD48
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IRECLFwD0dWflBPmx0oC0mK_ASM.roa
Signing time: Thu 07 Dec 2023 16:12:49 +0000
ROA not before: Thu 07 Dec 2023 16:12:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:45:0d:9f:41:4c:85:37:d8:34:c1:de:b5:84:a4:ad:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 16:12:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2111022c5c03d1d59f9413e6c74a02d262bf0123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:5c:99:d4:5a:f5:9e:2c:20:1c:13:e2:29:
84:ed:5d:ee:b7:8b:0f:d7:63:b4:d5:33:33:60:86:
10:8a:86:94:12:9b:94:fd:3c:0c:f1:d9:39:39:e2:
0c:40:15:69:0a:30:d8:ab:3d:9b:be:20:0b:9e:d8:
e2:01:fb:cb:78:25:f1:cc:73:c2:77:f5:69:66:a3:
21:04:05:73:a8:ad:a5:84:0d:64:01:f1:b7:85:d8:
fe:e4:9d:07:f6:8c:5b:49:fe:c5:d2:36:9f:ee:c1:
cc:f5:c6:9e:eb:40:c9:39:d8:17:90:26:b8:2a:d3:
f3:de:21:df:ce:41:c2:c2:35:50:98:60:15:0d:4a:
9c:a6:78:67:26:9d:7e:66:ed:b2:87:a7:91:c7:e7:
0c:ab:67:89:fa:eb:30:f7:7d:7b:01:8b:82:6f:d3:
d7:06:65:a2:93:f6:33:44:13:1a:38:58:9c:56:db:
ca:35:e4:22:e9:30:3b:8f:8d:15:68:de:1e:bb:80:
59:ac:4e:b2:53:be:b4:c8:c4:7b:55:a1:0d:27:ba:
25:e5:b8:0d:2d:e3:33:f2:bb:67:2b:56:d4:bf:91:
76:5c:17:12:25:92:4c:59:52:f3:e9:e9:33:3c:b9:
d9:f9:31:1c:6e:ce:81:b4:4c:a6:4d:74:77:17:3f:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:11:02:2C:5C:03:D1:D5:9F:94:13:E6:C7:4A:02:D2:62:BF:01:23
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IRECLFwD0dWflBPmx0oC0mK_ASM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:5e:5c:14:4e:45:6d:e4:20:5c:35:2a:8b:5b:13:98:70:22:
eb:05:e8:8c:8a:1b:ba:d2:05:18:d0:91:ea:7a:eb:e9:8d:ab:
b0:33:c4:96:bd:fb:a2:71:07:15:67:4d:0f:ac:5d:1c:c0:5c:
fb:42:ad:87:d4:9a:56:ef:76:cc:42:9f:63:d7:05:53:aa:38:
f2:a6:50:1f:94:1f:f0:73:49:40:ed:11:dc:29:22:85:c9:8e:
d5:36:f9:89:89:83:db:02:c3:8d:17:9d:3a:bb:75:0a:aa:d3:
29:70:45:cf:74:c0:ac:80:37:76:bb:66:c7:41:5e:06:07:4d:
7c:87:aa:85:b1:e7:92:9f:84:a5:55:63:ef:fa:5b:37:f8:35:
77:5f:5d:0d:2c:39:2a:07:bf:c1:9a:2c:d8:ed:ce:f7:28:90:
07:17:43:59:2e:8b:f2:6f:14:5e:45:6c:47:87:24:84:ec:00:
51:41:58:ca:a9:4a:41:65:e4:0b:7b:d2:a0:af:9f:f1:ab:82:
ee:fa:33:37:15:ab:ac:2d:05:f7:36:62:23:95:db:ef:7f:31:
12:b0:f9:5d:8d:48:5b:0c:05:7b:c5:23:c4:9a:05:6d:f4:7c:
00:69:0f:27:63:93:9d:0c:21:4c:ea:5e:75:81:0d:81:c0:1c:
dd:ab:e0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:07:10 2025 by rpki-client