Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S6morvajp01XpcvlZlLc6M3ZTfo.roa
File: S6morvajp01XpcvlZlLc6M3ZTfo.roa (raw, json)
Hash identifier: cwbMEcjyreOmohWhuE0lYrWKI3b7MgjiovAwnHNa2V4=
Subject key identifier: 4B:A9:A8:AE:F6:A3:A7:4D:57:A5:CB:E5:66:52:DC:E8:CD:D9:4D:FA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C65E094FC270524F1F9D4895F28565DCD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S6morvajp01XpcvlZlLc6M3ZTfo.roa
Signing time: Thu 14 Dec 2023 01:11:06 +0000
ROA not before: Thu 14 Dec 2023 01:11:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:65:e0:94:fc:27:05:24:f1:f9:d4:89:5f:28:56:5d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 01:11:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ba9a8aef6a3a74d57a5cbe56652dce8cdd94dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:ad:4d:81:0b:22:c6:57:60:56:04:83:73:
81:7e:a4:1d:02:7b:5b:8d:9a:b3:3b:fa:94:cd:48:
18:15:8d:4e:51:b7:2b:04:ff:62:22:fb:ec:2d:63:
07:ab:30:3b:0b:d6:7c:71:2f:3a:7d:c3:37:d3:aa:
67:c5:ed:8d:89:37:9f:6c:d6:22:6e:76:2a:80:e2:
e2:9d:9b:a7:f6:b7:c1:1d:85:9a:23:a4:db:e2:7a:
72:da:63:20:fc:9f:eb:aa:7a:54:84:43:25:f9:03:
2f:a2:67:ab:ad:d9:fa:d9:97:4f:58:15:a4:0b:ab:
5e:5f:6c:11:6a:87:f3:de:d8:e8:e3:f4:1f:8e:3c:
a1:99:1b:91:5c:a6:b7:42:73:bc:77:ca:84:27:5d:
ae:fc:23:8e:ca:f4:67:72:d1:b2:d4:ea:a6:ad:b4:
91:d7:67:51:36:27:23:21:18:e9:a8:c5:70:92:df:
92:d0:76:19:80:49:79:20:31:b1:d0:84:be:cf:a9:
f2:a2:4e:1c:c0:bf:f2:7b:47:16:65:d6:00:a7:ed:
11:f1:ef:dc:37:94:26:c9:08:8b:bf:e1:51:64:27:
35:d2:d6:f7:8d:c5:2f:70:74:91:f5:a3:b6:20:7b:
57:c3:eb:a7:81:b3:c3:11:65:20:66:2e:cc:74:19:
a0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A9:A8:AE:F6:A3:A7:4D:57:A5:CB:E5:66:52:DC:E8:CD:D9:4D:FA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S6morvajp01XpcvlZlLc6M3ZTfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cc:62:cd:4c:69:1d:14:6b:2a:c3:04:8e:d9:1d:11:3e:01:52:
0f:2c:94:a6:a4:9d:fb:f9:70:0b:f9:94:67:f8:0b:f0:5a:8d:
cb:0d:c9:91:3a:73:c8:c2:e4:7c:22:cc:fd:7d:a1:53:f7:e7:
49:ad:40:88:93:a7:21:9a:5e:10:f4:c2:44:fa:25:b5:f4:b2:
39:b2:13:64:3d:20:f5:4c:84:3a:23:fa:f3:3e:86:d4:8b:79:
20:c4:ef:fc:10:9e:f6:25:03:ac:2e:d7:20:af:1b:cb:be:27:
d7:55:25:af:b7:56:ea:9f:90:ac:1e:0b:a7:29:da:29:f6:29:
51:26:e4:88:83:ce:e8:22:a9:c9:86:c6:a7:0c:ae:ce:79:af:
bf:b0:7e:55:ac:8b:80:32:55:4e:27:bb:2b:66:f0:b3:9f:8d:
7d:45:f4:ba:93:fb:5b:c0:01:9e:c2:12:29:22:09:c4:ed:01:
55:7e:e8:fc:ec:70:ef:21:a1:c0:a2:f2:db:af:e4:eb:57:08:
b0:63:31:01:0c:dd:4f:5c:07:c6:48:88:96:39:de:02:57:e9:
f2:a3:bf:64:79:34:a0:57:ab:36:dd:93:8f:24:8c:b4:d4:64:
4d:9a:7d:b7:6e:33:d4:f0:2a:35:3d:b4:32:e8:f9:a3:6e:41:
8e:15:fc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:43:48 2025 by rpki-client