Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JMhob7JR37L1Eb7rGNtfjivQ3N8.roa
File: JMhob7JR37L1Eb7rGNtfjivQ3N8.roa (raw, json)
Hash identifier: kTmbZWW4aQMP8ZKwUo4h2iKjrwaR+LNwSJp9RUyNisU=
Subject key identifier: 24:C8:68:6F:B2:51:DF:B2:F5:11:BE:EB:18:DB:5F:8E:2B:D0:DC:DF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4CC7052F40FCA9CE6184E916CF6D5F6D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JMhob7JR37L1Eb7rGNtfjivQ3N8.roa
Signing time: Sat 09 Dec 2023 04:12:40 +0000
ROA not before: Sat 09 Dec 2023 04:12:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4c:c7:05:2f:40:fc:a9:ce:61:84:e9:16:cf:6d:5f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 04:12:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24c8686fb251dfb2f511beeb18db5f8e2bd0dcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:ab:81:e8:fd:ac:7a:6d:e7:78:64:9b:42:
37:ee:35:dc:71:fb:59:ee:3c:28:b0:9b:a5:dd:9e:
cc:a1:66:5b:21:38:79:33:eb:ee:8f:5f:ae:24:ef:
2e:f8:c2:02:16:1d:a2:42:c4:57:48:25:25:7a:ec:
d7:33:ad:3d:ec:73:24:17:a5:54:9b:08:1b:44:7f:
14:5c:a2:35:5b:4b:6e:0c:eb:35:b3:53:e4:59:55:
4b:df:f2:a1:62:ea:92:86:38:cf:44:cf:d1:2f:6f:
e0:6e:f5:01:55:37:0b:e8:0d:6b:22:c1:53:7f:86:
f0:64:7b:07:da:2f:d9:29:22:21:d2:c9:76:a3:f2:
3e:cc:60:ce:2a:38:4d:1e:1b:ef:99:2e:fd:34:5b:
64:c6:74:8f:fc:b3:40:3b:b4:d8:22:9b:6c:d6:f7:
13:c7:18:e9:a1:c5:b1:6e:de:4e:d3:d0:c4:42:d7:
f7:ae:ce:d0:b2:72:ea:36:f5:30:42:59:55:dd:79:
3d:0d:4b:e7:7a:bb:88:1f:79:d0:21:04:80:a7:a2:
35:39:33:ad:2b:8c:b1:a6:5b:1e:d7:3e:bf:3a:3c:
4d:79:81:67:03:11:6d:f8:b8:0b:81:78:a8:c4:fd:
2e:25:d7:0b:1c:da:60:ca:74:f1:74:88:e2:c2:6b:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C8:68:6F:B2:51:DF:B2:F5:11:BE:EB:18:DB:5F:8E:2B:D0:DC:DF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JMhob7JR37L1Eb7rGNtfjivQ3N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:fd:a1:f0:cb:bb:e3:2d:15:8e:a0:35:de:f0:76:de:4d:53:
a7:cc:e7:b0:e8:87:84:78:64:f9:a4:ef:17:94:b9:f6:39:6f:
65:91:4c:1d:1b:62:2e:1c:ed:2b:75:20:71:0a:00:b7:c3:e2:
74:e5:36:c5:46:d7:c8:30:82:e6:d4:67:30:d1:f0:80:a8:59:
90:41:f8:a0:cb:cc:90:06:b5:3b:42:c7:01:3f:2d:77:ce:82:
00:6c:90:dc:d4:ab:ac:55:a1:e6:91:e7:de:8d:a7:4e:a3:d0:
b0:e8:a1:c8:cb:4c:47:e2:9c:7a:31:84:9d:da:12:30:dc:22:
7c:3b:a5:11:2e:57:3e:eb:5a:54:7a:cc:05:71:6a:8c:4b:6d:
91:c6:47:87:dc:c9:99:ac:17:82:59:0d:8c:a0:00:23:16:59:
27:02:c9:3a:61:8f:ba:ca:d6:64:63:cf:e4:a9:ab:7f:4e:fa:
79:1e:4f:20:43:80:21:95:b6:42:aa:ae:c2:cf:58:39:dc:b8:
83:1e:66:3c:4c:d3:cc:31:d3:61:c1:3c:21:82:01:60:bd:bb:
4e:68:ca:33:15:31:98:9c:78:a0:80:23:72:e2:b8:ba:3b:7c:
fe:06:04:3d:25:e7:9e:94:f3:88:83:56:d8:af:59:ef:f4:73:
30:f8:2d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:17:31 2025 by rpki-client