Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Sj0VZX6PXoH6soJywkVxJHS7sME.roa
File: Sj0VZX6PXoH6soJywkVxJHS7sME.roa (raw, json)
Hash identifier: ee7ySRtL9GwFtfbhX1sEUIDREqPPH0NOTpgtbiFrIHA=
Subject key identifier: 4A:3D:15:65:7E:8F:5E:81:FA:B2:82:72:C2:45:71:24:74:BB:B0:C1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9EBFD085DB45D01FF38F229D695142E2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Sj0VZX6PXoH6soJywkVxJHS7sME.roa
Signing time: Sun 05 Nov 2023 09:10:52 +0000
ROA not before: Sun 05 Nov 2023 09:10:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:9eb9:cc11/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9e:bf:d0:85:db:45:d0:1f:f3:8f:22:9d:69:51:42:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 09:10:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a3d15657e8f5e81fab28272c245712474bbb0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:66:63:1f:d5:c3:0c:0b:13:d0:4e:2b:cd:
e9:cf:1e:38:38:73:5d:e4:a3:f7:b5:da:d3:fe:39:
a7:1e:b9:a5:08:bf:9c:4e:44:f8:95:0e:41:c4:f6:
66:1a:04:4c:38:e9:fe:4d:cc:2c:26:c5:c7:14:4a:
75:38:a3:e5:43:b3:84:1d:53:d4:43:10:e5:a5:db:
0d:fb:f3:c2:19:52:cd:3f:2b:0f:70:0b:7d:d8:59:
5f:30:91:35:e0:0c:cf:4e:6e:ca:53:80:09:29:08:
d0:6a:ad:99:15:9d:61:de:c5:4d:88:e7:61:82:e8:
4f:e6:1c:60:59:ce:15:46:94:75:d5:ac:67:15:69:
22:ed:af:9f:de:17:8a:7a:42:4a:9d:52:df:8b:66:
3a:3a:46:dd:e9:69:bb:92:86:6a:bf:97:4a:98:a7:
63:93:e9:16:d2:a1:b3:d5:48:fa:6b:53:ae:ac:4e:
08:cb:6c:ef:54:a0:c1:cf:de:e5:bb:10:f2:94:6f:
31:77:e6:b1:aa:09:ca:2b:1e:0f:dc:9b:bb:66:95:
a4:2d:11:2f:e9:5b:e5:8e:42:48:61:d6:09:fe:0a:
c1:0a:6e:5f:1f:aa:60:65:57:3b:92:ce:5e:09:b7:
0a:68:38:cc:bd:95:9c:8e:96:f7:e2:ed:95:88:1b:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3D:15:65:7E:8F:5E:81:FA:B2:82:72:C2:45:71:24:74:BB:B0:C1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Sj0VZX6PXoH6soJywkVxJHS7sME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:53:25:04:ae:d8:01:22:14:be:f7:4e:28:f1:ff:63:c5:9b:
5a:2e:54:c2:9c:c9:a4:16:ea:f0:6f:4d:47:cb:22:e9:45:a7:
e5:2f:da:cb:c8:dc:4d:00:f7:2c:91:9d:98:44:a9:94:a3:82:
ef:0d:07:ec:6e:a8:5c:3e:d8:51:83:01:9c:6a:d9:23:b5:25:
1c:37:e6:a2:29:fc:b2:6c:7c:b1:e4:4b:fe:21:95:50:47:ba:
b7:fa:c5:50:e7:9b:46:f8:f5:f2:9c:b5:b1:73:99:3b:de:07:
4f:3e:c5:f0:47:f1:72:8b:f2:80:81:26:2b:67:82:8b:e1:12:
79:bd:95:f1:90:c0:99:3b:a3:d1:5c:62:24:5b:61:1a:0b:f5:
fa:be:ef:77:5a:7b:fc:96:f5:68:a3:fd:d0:74:b8:01:65:de:
ff:0e:1d:eb:30:70:82:3b:63:be:c5:68:c7:79:14:0f:c2:5c:
47:be:a7:9d:d6:e5:64:ab:9d:7f:97:22:01:90:90:dd:9a:ed:
b8:a6:38:ef:af:32:ab:68:d2:35:09:2b:58:2b:eb:8f:5d:7c:
b4:1f:16:4c:4b:7d:ab:f8:ae:51:a4:3e:cb:0f:94:6c:07:4d:
65:01:50:c5:fd:45:e8:cf:ec:9c:b8:f9:b5:f0:9a:a9:8c:1c:
29:1f:78:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:09:50 2025 by rpki-client