Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RjvDcoRuGEj8uSuk_4dq1L-1Y18.roa
File: RjvDcoRuGEj8uSuk_4dq1L-1Y18.roa (raw, json)
Hash identifier: PfM6jB7HX0tqzxvBHeX3XoNbPRGJt7xJ0jqLS44iCgg=
Subject key identifier: 46:3B:C3:72:84:6E:18:48:FC:B9:2B:A4:FF:87:6A:D4:BF:B5:63:5F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE66F79B864C13CFA42227D13F18FE41B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RjvDcoRuGEj8uSuk_4dq1L-1Y18.roa
Signing time: Sat 30 Sep 2023 14:12:59 +0000
ROA not before: Sat 30 Sep 2023 14:12:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e6:6f:79:b8:64:c1:3c:fa:42:22:7d:13:f1:8f:e4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 14:12:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=463bc372846e1848fcb92ba4ff876ad4bfb5635f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:2c:97:61:95:c4:ad:ef:9b:b5:28:a3:c5:
75:3d:84:16:6e:4b:d4:41:94:9b:14:ba:8f:88:75:
53:a9:23:bc:f2:95:ed:a9:de:35:af:81:08:a1:a2:
83:7d:52:97:49:b3:5f:15:72:3c:e2:ed:ef:86:14:
39:71:dc:62:a6:e9:58:39:cc:dd:e0:64:ac:fc:99:
11:5f:18:34:1d:f4:d4:9b:4f:6d:46:1f:6c:a5:34:
aa:51:8d:ca:a2:14:78:c7:53:82:22:c1:71:4a:3e:
51:05:f2:1e:6c:d3:06:8e:aa:35:7f:c2:87:2d:01:
f9:b3:52:91:55:0f:b6:a6:61:3e:7c:91:60:6f:05:
9a:98:46:f9:84:3c:70:17:4f:83:44:f2:2f:10:c4:
70:64:8b:f7:b6:40:e5:f6:e1:f7:21:a5:0c:f0:f4:
70:b4:2f:cd:d5:80:1e:e6:bd:ac:6a:c2:3a:df:57:
a2:9c:54:c8:ed:ce:87:b5:b8:fa:de:0a:cb:ec:2b:
8e:fa:5b:98:92:25:57:fa:7d:90:51:28:dd:19:c2:
72:c1:11:45:d0:22:80:d2:a0:3c:f4:be:6c:0a:1d:
ec:14:3e:a7:27:1e:c5:c0:1a:59:7f:8e:df:41:02:
b1:f3:8b:48:b1:39:e3:7f:d7:4a:22:8c:94:af:0f:
a2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3B:C3:72:84:6E:18:48:FC:B9:2B:A4:FF:87:6A:D4:BF:B5:63:5F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RjvDcoRuGEj8uSuk_4dq1L-1Y18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:29:01:9d:62:d5:e5:0a:d3:e0:b6:91:3f:9b:d2:65:31:64:
ef:34:0d:43:f2:7a:ec:ef:ea:8c:13:b4:31:e7:5d:dd:86:41:
80:35:8b:70:45:d5:21:8b:a4:7e:e3:c6:3f:57:f8:4e:a3:08:
27:44:f4:00:7c:43:ab:64:f1:1a:17:c2:77:86:8b:4d:00:67:
a4:7b:1c:dc:3e:87:2e:58:00:60:dc:57:22:cd:8d:6c:23:2e:
b1:28:e0:e3:48:7a:7f:1d:bd:a6:7c:af:3e:68:29:90:5c:e3:
8e:30:bb:ed:14:78:b9:ee:ae:ad:2b:d0:a0:57:bc:11:6d:0b:
f1:a8:f0:a9:2c:a0:aa:cb:25:8d:0e:58:ad:04:c0:83:48:89:
bd:e0:fd:b0:ac:2c:f0:7b:9d:bb:c6:cc:b7:3f:cc:d3:ff:1b:
1a:54:a5:b8:47:a1:3a:46:dd:68:04:ab:8d:0a:ef:a3:c9:cd:
19:7e:6b:7c:23:be:48:db:31:88:b1:83:5d:95:e7:9a:55:59:
01:1a:a2:e7:d5:e8:c2:b4:4a:d9:a9:33:56:82:5e:51:0a:a4:
81:c1:9f:35:90:23:41:97:3e:9d:2b:e5:b4:fc:9b:c5:56:9e:
fa:b3:62:a8:c1:ec:e2:06:92:12:4c:99:e7:ce:de:4f:65:30:
ff:cd:2c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:46:39 2025 by rpki-client