Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iGg9LkBUYfJ2XB2oWVAa8j0vXJo.roa
File: iGg9LkBUYfJ2XB2oWVAa8j0vXJo.roa (raw, json)
Hash identifier: Yyr2o3f0vi7fYLblfLCjotmRu6zd1QOt+lG6Jj+N1dE=
Subject key identifier: 88:68:3D:2E:40:54:61:F2:76:5C:1D:A8:59:50:1A:F2:3D:2F:5C:9A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B89B86FF0D9280FA6E4792A41FD4661C8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iGg9LkBUYfJ2XB2oWVAa8j0vXJo.roa
Signing time: Wed 01 Nov 2023 07:10:47 +0000
ROA not before: Wed 01 Nov 2023 07:10:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:89b2:84d3/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:b8:6f:f0:d9:28:0f:a6:e4:79:2a:41:fd:46:61:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 07:10:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88683d2e405461f2765c1da859501af23d2f5c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:03:f8:8c:a7:03:dc:7f:9f:85:d4:fd:6f:
e1:a4:cc:c2:58:60:55:f2:35:83:f3:f9:6d:16:9f:
a1:04:3e:f1:5f:da:59:da:3c:99:ae:86:7f:04:ae:
aa:d9:01:92:31:81:76:4a:be:03:fd:4b:83:95:7a:
7d:a6:9a:a2:e0:ca:0a:d0:5b:c4:95:8f:7f:64:4b:
2b:eb:67:fd:c3:9f:a5:bb:7f:fd:d8:d2:68:09:c8:
05:c2:27:db:17:17:0d:95:f9:fd:c1:6b:1c:87:01:
78:5a:53:3c:ef:64:1a:77:eb:da:4a:f6:58:cf:40:
9e:a4:3b:1a:46:30:71:7c:03:ce:9d:ea:69:53:b4:
04:60:39:63:9c:e7:58:34:ed:42:62:04:d5:e1:73:
15:3d:e0:79:92:72:cc:ca:5c:ec:04:0d:3d:3b:ef:
d4:d4:4d:76:86:e1:3b:f1:2f:43:90:0b:30:be:c0:
4c:79:29:71:40:05:af:5e:ea:ab:2f:4f:76:7a:41:
c3:f1:3e:6d:fb:ac:cc:5f:4d:e4:be:5a:81:54:ce:
94:46:46:6d:11:c5:88:8d:a7:d8:62:99:9e:c5:d1:
17:c7:1c:13:9d:2e:06:d0:ea:ed:97:20:6e:7c:49:
b3:d3:12:3b:db:9f:3f:f6:42:44:19:2f:b3:1e:2d:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:68:3D:2E:40:54:61:F2:76:5C:1D:A8:59:50:1A:F2:3D:2F:5C:9A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iGg9LkBUYfJ2XB2oWVAa8j0vXJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:0c:0d:71:62:16:a6:c8:bf:38:8f:a9:de:a8:e2:14:76:5f:
cb:8c:ba:49:fb:ed:7e:1b:fe:77:2a:5e:ba:b0:c7:d7:b9:7b:
90:fc:52:35:95:a8:33:49:73:d9:b6:6e:6a:cb:0d:0d:39:56:
5f:0d:3a:0d:67:5d:62:12:76:c6:8d:be:e4:35:cd:1d:00:8a:
e6:e2:d5:5e:43:11:ec:5b:80:1c:94:31:1b:be:0c:c0:64:90:
32:e4:ee:23:7a:f2:f4:e0:a6:84:ba:fb:87:b4:06:53:52:18:
9a:d7:50:21:00:91:1a:c5:19:a2:ed:50:2c:bd:0f:63:c2:66:
a3:45:64:47:2a:6c:2e:13:41:23:ad:e6:79:cb:fc:84:31:23:
6f:52:47:9a:8b:72:81:2c:35:be:da:fe:dd:dc:3d:d6:11:0f:
35:f1:14:dc:ff:b8:ca:01:82:dc:f7:94:8b:46:fb:9d:48:45:
7d:63:38:93:35:de:e8:d1:a0:4e:a0:4d:0c:cd:d5:a6:54:da:
c3:93:c0:71:6a:b7:e0:d6:06:0e:79:4f:8c:0d:77:24:6e:ed:
1c:0e:3a:ac:4f:c2:78:1b:13:3a:ef:a8:10:c8:82:d2:85:82:
17:7c:ba:44:bf:07:9b:e2:c0:e3:4c:a5:3e:94:9b:b0:fc:f2:
fb:c0:2b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:18:14 2025 by rpki-client