Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iBSxRptFDSVn69cwIgLxMT_kzcU.roa
File: iBSxRptFDSVn69cwIgLxMT_kzcU.roa (raw, json)
Hash identifier: xg8dW4d0L8pzDHEvUgzYnRb8eEVuxg7KOd5HADqphdU=
Subject key identifier: 88:14:B1:46:9B:45:0D:25:67:EB:D7:30:22:02:F1:31:3F:E4:CD:C5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B288571A7A5406BF3C2D25995B0AD6B54
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iBSxRptFDSVn69cwIgLxMT_kzcU.roa
Signing time: Fri 13 Oct 2023 10:11:55 +0000
ROA not before: Fri 13 Oct 2023 10:11:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:85:71:a7:a5:40:6b:f3:c2:d2:59:95:b0:ad:6b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 10:11:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8814b1469b450d2567ebd7302202f1313fe4cdc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:a2:d0:d3:2b:ff:be:a3:21:23:a8:99:da:
23:13:e5:e7:b7:c0:24:db:50:9f:b2:09:0d:95:71:
73:b8:10:71:61:47:40:1a:19:01:45:af:56:76:65:
45:23:72:05:a4:c0:2c:cd:d2:fd:ba:19:8e:d5:f2:
d7:76:72:99:43:c8:b7:a4:58:bb:f8:76:3b:46:09:
4c:bf:b2:9a:f0:0b:7e:65:05:cb:ae:5b:65:49:a2:
1f:ef:f3:fc:a4:b3:e7:76:5e:b0:6b:95:e6:a3:ab:
f5:6e:d5:79:48:d8:ca:15:f6:7e:03:40:e3:df:a2:
8f:12:b5:15:c1:6a:be:59:73:89:b7:1d:61:2d:cf:
a7:6e:82:1d:cf:56:45:fb:c4:bb:1a:25:67:8c:ed:
f2:30:ed:7f:6b:c3:cc:49:9c:20:ed:ba:bd:74:d7:
64:03:e9:e5:7c:42:d9:17:f0:c6:aa:12:a2:b1:73:
93:19:52:d2:2b:50:db:d3:48:83:69:7c:52:c8:2f:
c0:67:58:76:e1:07:70:26:d0:5a:2f:ce:fb:5c:93:
15:06:9c:74:9e:e9:4d:86:09:2b:1f:8a:44:8f:98:
e1:6d:80:a6:32:f3:a6:bf:90:2d:90:21:5b:51:65:
fd:2a:35:41:78:42:0f:f6:05:bd:fc:73:ac:c1:6d:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:14:B1:46:9B:45:0D:25:67:EB:D7:30:22:02:F1:31:3F:E4:CD:C5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iBSxRptFDSVn69cwIgLxMT_kzcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:57:00:95:ad:4c:b1:1e:ca:81:7c:7e:e2:cc:88:48:65:18:
e4:b6:d3:e9:ca:10:da:da:ab:a0:f0:33:d4:9f:4b:d7:49:f8:
58:3d:ca:dc:ec:43:28:08:66:fc:19:75:c5:7a:50:5f:e6:1f:
49:bf:cf:97:a5:cb:80:e1:c6:40:6a:9e:e3:64:6d:57:d4:ba:
b7:35:9e:4a:57:63:4f:00:4d:bc:15:b8:b2:10:5b:c1:a1:59:
2f:0c:42:b6:59:0f:73:fd:8e:fb:52:7a:f4:84:69:b0:6c:eb:
9b:3e:f6:aa:e8:1d:a8:97:ac:c9:bf:21:98:9b:45:e1:33:60:
a9:4f:e7:d3:a2:65:d8:2b:26:27:69:be:7f:91:da:b4:a3:42:
3f:5e:0b:e2:98:a5:d1:ea:0a:25:cc:1d:01:b7:8d:db:91:3a:
39:f9:0a:a3:10:b6:19:d7:8d:8e:45:3c:82:bb:f0:43:b7:ad:
25:00:f9:31:4b:ff:1f:cf:82:60:cd:62:fc:4a:d1:a0:1c:41:
68:80:02:ed:bd:08:14:0b:86:22:ee:e8:16:be:2e:cd:68:a2:
32:b0:37:d2:12:74:a1:4c:39:66:07:28:d0:5f:46:05:b7:5e:
0a:fc:05:3a:e6:49:87:a1:5a:18:f0:2f:11:6a:4f:21:07:4d:
66:27:95:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:31:23 2025 by rpki-client