Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_u-8xzJQSK3Vf532FPXqkTMrjA8.roa
File: _u-8xzJQSK3Vf532FPXqkTMrjA8.roa (raw, json)
Hash identifier: 7nrsMGfXd9AUjNU8LL0s17dExR8C1574X4xlvHaKNFA=
Subject key identifier: FE:EF:BC:C7:32:50:48:AD:D5:7F:9D:F6:14:F5:EA:91:33:2B:8C:0F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFC4B2620DA954D7F4115B2AEC655AB7A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_u-8xzJQSK3Vf532FPXqkTMrjA8.roa
Signing time: Wed 04 Oct 2023 20:04:57 +0000
ROA not before: Wed 04 Oct 2023 20:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:fc4a:969f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fc:4b:26:20:da:95:4d:7f:41:15:b2:ae:c6:55:ab:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 20:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=feefbcc7325048add57f9df614f5ea91332b8c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:3f:36:f6:a3:2c:a0:fa:57:a2:ba:a4:3f:
ac:7b:22:ef:bb:23:fc:f1:13:fd:db:76:95:9e:03:
fb:6c:87:54:5b:57:85:da:25:03:d1:82:16:98:52:
29:61:66:48:7f:0c:0a:d4:df:4e:1d:49:6b:fc:33:
13:63:64:1b:55:49:3a:16:53:79:e0:50:40:ae:a6:
17:3e:04:6c:f9:84:56:32:b5:dc:c2:04:d3:69:c3:
20:dd:b1:23:fd:48:f4:7a:6b:8a:81:4f:92:b6:68:
c1:0f:69:bc:a2:0b:59:1c:8d:e2:16:c5:1e:ae:d1:
f0:0c:78:44:f4:65:a6:f6:91:c6:d4:ab:92:35:0a:
51:42:10:bf:b3:08:6c:6e:fc:e1:c3:92:ee:09:f0:
92:ea:13:b4:e7:61:7a:9a:51:8f:da:f2:31:7f:43:
1f:6b:31:6c:ef:1b:6d:42:67:dd:ab:12:0d:f4:77:
3a:bc:57:8b:4b:32:ed:14:c9:e9:e1:26:5d:5b:7f:
a2:c0:ab:72:a6:7e:a6:0f:eb:c0:2e:df:0d:c1:6f:
27:ca:99:5a:65:06:62:85:a5:bd:80:59:99:98:17:
e8:b0:8f:22:f0:ea:01:4d:4f:9b:76:31:e3:d8:37:
ff:45:f8:6f:30:e8:3a:ae:26:2f:07:c8:de:79:30:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EF:BC:C7:32:50:48:AD:D5:7F:9D:F6:14:F5:EA:91:33:2B:8C:0F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_u-8xzJQSK3Vf532FPXqkTMrjA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:01:78:05:26:58:39:73:b3:af:21:8e:a4:78:49:40:b0:2a:
ab:8a:c0:dd:fc:78:28:f2:87:e8:23:bb:c2:f4:33:5e:e0:3e:
63:3e:29:d6:01:83:21:dd:6a:82:81:bb:1c:fc:0f:c5:8b:f8:
b6:2f:9c:a9:2b:73:58:f5:7f:8f:ed:bb:b2:3e:25:4e:05:98:
f1:4a:cd:32:47:21:ac:0b:4a:5c:a8:56:dc:a9:83:43:b1:9e:
00:b1:51:59:2c:d6:10:c9:49:24:89:be:91:0e:1b:99:5b:1b:
cd:5a:6b:2d:f0:5e:e5:cf:3e:da:ec:69:b1:b9:20:6d:d0:a8:
fa:8e:ec:9d:b3:57:ab:56:ee:56:aa:ec:ae:2a:27:d6:31:f6:
81:21:6e:82:39:f3:70:63:4e:a8:e8:bb:56:5d:1c:ba:c9:73:
0f:37:1c:b4:af:e4:9e:42:3c:c0:7a:4e:2f:6d:23:f1:58:a6:
96:c2:53:bc:02:c5:dc:78:8c:57:f1:14:8d:99:b3:e4:b7:d7:
a5:92:bb:1c:aa:8d:10:59:47:45:df:c8:85:53:c2:22:7a:da:
ee:db:e6:d2:e8:2a:0e:84:b5:79:f4:95:7f:09:b7:47:9e:42:
1f:54:24:ff:24:fb:ee:8b:4c:65:c5:b8:21:8e:96:c5:29:80:
a7:51:06:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:34:35 2025 by rpki-client