Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_SNAk8RAzVJVlqGxcPI06_9G3V8.roa
File: _SNAk8RAzVJVlqGxcPI06_9G3V8.roa (raw, json)
Hash identifier: pRjJmQmaYDHm+gO0Rbx/QdlXfwHF0Vag6LlCOxL1Mic=
Subject key identifier: FD:23:40:93:C4:40:CD:52:55:96:A1:B1:70:F2:34:EB:FF:46:DD:5F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B73A1A7279E127907080ACABDE1D73AAF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_SNAk8RAzVJVlqGxcPI06_9G3V8.roa
Signing time: Sat 28 Oct 2023 00:14:15 +0000
ROA not before: Sat 28 Oct 2023 00:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:73:a1:a7:27:9e:12:79:07:08:0a:ca:bd:e1:d7:3a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 00:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd234093c440cd525596a1b170f234ebff46dd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:b6:81:76:ba:77:fd:fd:66:df:a7:33:ec:
cf:cc:0e:84:c4:22:c2:5d:c7:10:6f:5f:26:be:9b:
41:94:28:8b:45:a7:bd:e3:07:4d:3b:f8:2d:58:35:
00:8c:6d:42:fd:43:dd:96:41:03:59:c7:72:3d:eb:
05:06:a0:7d:44:80:11:e8:14:58:97:c3:bb:3e:eb:
5c:9a:78:c8:6c:c4:3f:cd:4e:4a:44:3d:40:f5:a9:
6d:c3:42:c4:a0:b8:13:13:eb:c6:1f:37:a0:45:a2:
40:5a:04:1d:85:19:24:d7:dd:00:c0:58:26:de:d6:
83:49:7a:9d:79:d7:6c:0d:22:9d:2e:35:54:5e:70:
fa:19:9e:43:d2:d8:d0:50:ac:85:f9:59:ec:c3:67:
93:38:a9:7f:dc:9e:a1:64:ab:51:e2:39:74:e9:6d:
a0:34:48:e2:cd:85:7f:b5:fd:2f:91:0f:a1:f8:22:
a8:92:2e:98:96:78:c1:ed:84:2d:de:d8:c1:43:68:
01:ca:bb:6a:bb:ed:83:01:50:6b:07:d7:26:fa:2a:
16:0e:64:80:f6:81:17:a6:78:81:44:b4:80:eb:6f:
f1:2a:d9:a8:79:f0:52:d2:bb:17:8f:ab:c4:07:15:
52:a8:02:1c:74:7b:b3:00:cb:59:3f:47:57:d9:7c:
06:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:23:40:93:C4:40:CD:52:55:96:A1:B1:70:F2:34:EB:FF:46:DD:5F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_SNAk8RAzVJVlqGxcPI06_9G3V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:1d:4f:f8:34:28:92:91:b5:b5:4c:47:66:06:df:ff:47:14:
b0:3e:12:cd:ab:a9:41:64:44:3e:3e:a2:c5:85:33:7d:d2:02:
d5:77:6d:a8:cc:39:aa:e9:b9:ea:63:56:6d:c8:58:c7:12:e9:
b1:5d:fa:c1:bc:a5:dc:66:2f:26:a6:4c:6a:b7:66:6b:dd:d9:
1e:a8:f3:65:2c:76:4a:23:47:44:88:be:d2:fc:2a:c4:0a:7a:
ab:2d:d0:d5:98:cd:23:af:65:37:00:1c:10:00:a5:0c:52:c6:
f0:50:a4:19:c0:39:30:0e:f2:8a:da:ed:6e:10:0b:72:b2:92:
f3:dd:68:ee:59:b7:9b:73:74:c0:3f:87:d0:30:8c:f0:0a:fe:
6e:eb:ed:37:63:de:63:50:b0:49:39:07:46:8c:30:e1:a4:d9:
5c:2e:77:b0:f3:fb:bf:ae:ff:0d:c5:8d:3b:fb:7b:b1:50:a0:
36:c7:d5:91:20:69:9a:35:c6:28:d6:aa:ee:c5:f9:02:a5:eb:
34:72:46:0d:47:4b:33:46:d0:69:9e:8f:38:64:d9:6a:51:1e:
92:ef:2b:31:26:de:e7:cd:53:de:df:92:5a:81:d4:17:ea:29:
67:e6:ec:7f:2a:eb:56:08:31:c7:a7:e7:34:b4:0e:ef:ba:84:
65:2e:0f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:27:52 2025 by rpki-client