Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d-0IbvSgnW_FLpGc0nD6qkqQYoM.roa
File: d-0IbvSgnW_FLpGc0nD6qkqQYoM.roa (raw, json)
Hash identifier: CkaBWhm4qssS/yba+LHsO/wUVZoSKxDVR3lq0ylk79k=
Subject key identifier: 77:ED:08:6E:F4:A0:9D:6F:C5:2E:91:9C:D2:70:FA:AA:4A:90:62:83
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0325DA0A98B7C9321CF4651DB4A0C547
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d-0IbvSgnW_FLpGc0nD6qkqQYoM.roa
Signing time: Fri 24 Nov 2023 21:04:21 +0000
ROA not before: Fri 24 Nov 2023 21:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:325:77e6/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:03:25:da:0a:98:b7:c9:32:1c:f4:65:1d:b4:a0:c5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 21:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77ed086ef4a09d6fc52e919cd270faaa4a906283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:a3:33:a8:6b:1f:e4:cd:b3:17:33:47:4a:
78:85:76:c3:48:50:44:af:76:1d:2a:c5:c2:94:77:
ff:ab:b7:3b:62:d0:5e:53:47:2e:5a:15:9f:70:ad:
0d:78:e8:0b:04:ad:b4:c7:4a:9f:7f:be:bd:1a:ff:
8f:c7:16:56:e8:a3:ef:8b:0f:55:f6:b0:8a:1b:b9:
10:de:24:28:fc:3f:05:b7:23:78:b5:dd:ff:b5:06:
d0:38:1a:5b:4c:aa:33:56:29:90:7c:7a:15:70:42:
68:15:84:ac:db:61:b0:74:44:e6:4f:32:4b:c2:2f:
5d:f8:65:18:0a:10:82:70:98:f9:b5:cc:18:b3:21:
d1:1f:4f:6e:13:60:55:50:fd:21:28:cb:70:c6:a3:
24:1b:5b:cc:07:50:eb:51:f0:4b:d7:9f:2d:f3:a4:
49:4e:26:35:8e:46:22:ba:63:f6:31:3e:c6:d0:09:
e2:e1:eb:0e:b2:99:64:1a:ce:b5:37:97:ab:02:7e:
ff:93:08:c9:f1:8e:df:7a:3e:ee:e9:90:79:ee:77:
f2:4f:91:6f:39:34:bf:f4:1f:a2:db:67:40:59:a2:
60:f0:2f:75:10:ca:a6:de:99:12:95:b9:75:9e:fa:
be:32:c4:72:0c:97:cd:44:f8:f2:ef:d3:4e:75:8f:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:ED:08:6E:F4:A0:9D:6F:C5:2E:91:9C:D2:70:FA:AA:4A:90:62:83
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d-0IbvSgnW_FLpGc0nD6qkqQYoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:72:63:78:11:fa:6f:72:5c:16:36:89:a0:6b:4a:07:55:22:
44:e7:c5:e6:ab:b8:79:14:fb:2d:7d:47:09:98:d9:7f:bb:85:
c8:b9:e8:93:ae:cc:e4:f1:58:29:f5:db:c6:de:45:61:98:ba:
ee:c5:c6:60:2e:eb:5b:ad:15:89:dd:42:46:84:50:98:51:6a:
88:8d:c2:73:41:8f:d6:43:26:04:10:0a:14:50:d4:70:93:af:
a9:58:4c:c6:9a:70:de:b0:74:92:fb:a6:a7:43:2a:03:04:ab:
5b:41:4e:ee:ba:78:f9:3a:87:52:4d:b3:a9:2a:8b:6c:ed:40:
f4:e0:7c:4f:73:15:5f:13:61:f8:82:41:55:18:f2:17:26:d9:
44:29:1b:8b:dd:05:ad:02:fe:c4:04:01:62:b4:fa:e1:28:bc:
0c:cc:1a:93:a4:c7:fa:42:3b:34:f3:03:f3:35:a1:6c:c5:6c:
d7:85:76:19:b5:64:42:f5:49:65:68:30:d1:b6:5d:8b:aa:ab:
0f:5a:4c:7f:93:7f:a0:f6:fc:ad:6d:73:a5:35:f5:83:37:19:
52:bd:fb:04:73:3a:ae:2d:cc:8b:67:2d:e4:ef:00:8b:68:f4:
25:ce:f2:ac:0b:59:2b:fa:59:1c:84:d7:a9:35:c3:2d:fc:63:
a6:a6:e7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:59:26 2025 by rpki-client