Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IevYhaJzTPf2NSJfJPhwc0MkTy8.roa
File: IevYhaJzTPf2NSJfJPhwc0MkTy8.roa (raw, json)
Hash identifier: uvG5EdRPAPEQEVLCtvDBSdzsRFpBNGr4nQWwAzkFCDQ=
Subject key identifier: 21:EB:D8:85:A2:73:4C:F7:F6:35:22:5F:24:F8:70:73:43:24:4F:2F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8EAB0B3BDC0C0C1BF8378D4A2F5E2E74
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IevYhaJzTPf2NSJfJPhwc0MkTy8.roa
Signing time: Thu 02 Nov 2023 06:14:16 +0000
ROA not before: Thu 02 Nov 2023 06:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8e:ab:0b:3b:dc:0c:0c:1b:f8:37:8d:4a:2f:5e:2e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 06:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21ebd885a2734cf7f635225f24f8707343244f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:45:96:56:77:0c:e6:90:d7:98:56:02:8e:bf:
5e:80:d6:fa:1e:6b:96:4e:9c:26:83:ca:90:15:9f:
2a:44:e0:d0:61:37:e6:ea:69:92:3e:90:53:6e:10:
f9:72:95:21:4a:ae:a6:4c:f5:38:60:16:f8:f4:79:
00:74:3d:ed:1d:dd:eb:0d:12:b1:ce:5e:9b:b1:26:
d9:a9:74:85:89:91:5f:a1:8d:e9:87:7c:5e:2c:b7:
4a:d8:26:8e:e5:c1:2e:35:32:bc:f4:4b:a6:f5:c4:
cf:cc:84:7d:fc:bb:8a:1d:7d:fe:fb:22:26:24:ea:
ff:92:19:80:ed:84:fc:1e:b7:0f:c6:bf:21:07:73:
bf:07:e3:e3:d5:c5:32:22:6e:67:1d:07:33:13:04:
f3:2b:cc:98:2a:0e:19:54:ec:34:c8:6d:ac:53:6e:
2b:a5:df:7a:67:fd:48:b4:aa:51:11:8f:92:8c:ec:
f2:1e:39:56:2d:d7:0e:54:8d:e8:b8:dc:c2:90:7a:
df:7b:14:b5:8f:6c:65:30:49:77:a6:e6:81:29:f8:
b1:5e:84:6f:08:bc:38:42:12:ec:f4:0a:d0:9b:89:
09:40:fb:5f:ef:35:10:97:50:89:0e:aa:c9:66:ea:
a0:8c:90:d7:64:cc:cf:2c:c1:44:1a:3d:d3:e8:71:
8a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EB:D8:85:A2:73:4C:F7:F6:35:22:5F:24:F8:70:73:43:24:4F:2F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IevYhaJzTPf2NSJfJPhwc0MkTy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:c7:ec:b1:29:b2:1c:d9:c4:6e:ae:d7:7b:5e:79:72:b6:4c:
02:a8:82:25:49:28:53:61:f3:b3:61:c2:96:b3:d1:5c:70:da:
60:fb:88:f7:23:ef:d3:5e:a1:78:c7:52:02:13:a6:4e:46:d4:
2d:7f:60:4a:7d:9a:fc:6e:09:74:12:90:f2:56:39:e7:79:3e:
b7:65:33:c8:8e:9e:63:c7:31:60:6a:f8:de:2c:c1:d7:e9:44:
d5:e0:25:b8:e8:17:1c:18:ce:5e:30:d0:81:9f:68:97:02:7d:
d8:60:1c:68:b7:2c:18:fa:d6:40:61:da:29:04:2d:4f:9f:4b:
64:6d:88:8e:4a:62:66:3f:3e:1d:2c:cc:d1:10:e7:5c:03:48:
df:a3:64:99:09:d6:a3:81:17:83:3a:a8:6c:0c:25:3e:d0:e9:
01:17:c4:ad:4e:45:dc:b4:9c:90:ee:e2:08:6f:ce:6c:26:b9:
f6:7d:a5:a9:52:03:7d:b2:b7:07:1f:ad:60:6f:e1:03:a6:2c:
22:7d:87:f6:ce:df:84:f3:67:8e:ec:5a:04:66:7f:2d:f5:54:
66:64:1d:98:77:4a:c0:54:40:52:71:b3:c2:12:85:db:f9:58:
c7:9a:0d:b4:10:95:b2:29:f5:30:9a:47:f8:8d:7a:38:f9:cd:
b5:39:84:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:10:35 2025 by rpki-client