Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ahbgBJPmHWpeJql0lTt52YAVXnk.roa
File: ahbgBJPmHWpeJql0lTt52YAVXnk.roa (raw, json)
Hash identifier: 3NxNFHW4ipagVxc+il4Sn368xwKQXKxWpF30A06dVfQ=
Subject key identifier: 6A:16:E0:04:93:E6:1D:6A:5E:26:A9:74:95:3B:79:D9:80:15:5E:79
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADBADFCF1DF6B30C2E7716CD7D62EA088
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ahbgBJPmHWpeJql0lTt52YAVXnk.roa
Signing time: Thu 28 Sep 2023 12:05:27 +0000
ROA not before: Thu 28 Sep 2023 12:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:dbad:2976/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:ad:fc:f1:df:6b:30:c2:e7:71:6c:d7:d6:2e:a0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 12:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a16e00493e61d6a5e26a974953b79d980155e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:5a:e9:c7:19:e4:08:d1:1e:13:41:08:9e:
15:3c:29:95:56:31:d2:41:df:fe:ae:48:6f:1b:70:
83:07:78:c4:23:08:a3:29:6e:a5:d2:57:d6:a4:c9:
56:a6:83:d5:2b:74:4a:76:72:89:c4:51:55:37:ec:
09:98:7b:9e:28:e1:f9:63:52:e9:2c:26:07:31:e2:
7b:63:d0:07:97:16:e2:45:3c:30:70:0e:bb:d2:cd:
58:c7:28:50:4b:6d:42:ef:56:81:44:fb:67:e4:1c:
fa:ee:44:be:1f:fd:6d:53:73:21:36:ab:e3:70:20:
2c:ef:a2:9f:db:90:70:cc:72:07:94:92:c8:85:3d:
d2:2a:00:b0:54:f3:bc:26:95:41:e5:a0:7d:a7:07:
9a:12:24:02:2a:d9:36:55:45:40:60:36:6c:c9:26:
4f:af:42:01:2f:6e:60:06:bf:26:1e:d4:fc:dd:96:
a3:a5:cd:30:bd:3e:1f:59:fd:e9:22:e9:0b:ff:5a:
d0:7f:f5:88:7c:69:ff:04:1f:a0:80:43:06:92:aa:
b9:85:bd:ed:54:7c:66:10:78:cb:ea:f8:d5:b4:72:
f0:75:63:bc:99:c5:47:e4:d3:76:9c:e5:6a:64:33:
28:e9:a2:dd:9c:f4:c5:9a:45:c1:d8:51:06:2a:37:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:16:E0:04:93:E6:1D:6A:5E:26:A9:74:95:3B:79:D9:80:15:5E:79
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ahbgBJPmHWpeJql0lTt52YAVXnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:a7:97:03:ee:d9:11:8f:9d:8b:8f:a3:15:91:3e:b4:25:fb:
a5:43:ac:9c:d5:78:32:d8:0a:34:cb:16:f3:0a:5a:22:02:0b:
86:37:7a:fa:a8:76:fc:ba:b0:1b:1b:5c:e6:47:7e:87:cf:a7:
78:10:df:f6:4e:4b:4c:96:72:77:61:8a:fb:8a:28:15:39:52:
d5:f9:60:e0:ae:23:d2:a8:75:13:c7:93:ac:e9:35:07:d7:c2:
ed:9d:7d:ce:f5:98:8d:d3:df:2e:b0:d4:5f:50:4a:f1:94:e3:
73:a4:f2:e7:b2:40:f8:46:16:cd:f3:92:06:6d:4e:b9:ed:c1:
54:24:b2:fe:83:37:01:ad:95:a6:64:72:5e:a5:5b:c5:b0:e8:
f0:4a:d4:69:8e:ff:09:29:a5:eb:53:35:bc:6c:f1:87:7b:97:
17:5f:55:cc:d7:2d:8e:aa:6c:40:0c:24:de:2d:2a:ad:34:67:
8b:4c:93:17:51:6e:ae:ba:21:4c:fc:33:f0:2a:df:54:53:4a:
a3:cf:a5:47:29:82:1f:5e:0a:3b:e7:a4:10:09:ef:00:fe:a5:
da:35:52:26:56:27:7e:00:5d:8e:09:9f:7f:de:e5:79:8e:0b:
f7:b6:8a:35:f0:48:72:40:b0:8c:d1:ef:c5:a7:6f:56:c3:71:
a2:9d:2b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:30:29 2025 by rpki-client