Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iJNahqBz0RK0pId6eENqgIdJtF8.roa
File: iJNahqBz0RK0pId6eENqgIdJtF8.roa (raw, json)
Hash identifier: yjMjwWIRQ5CzsCjlSP0q1ZUP3ugxGq2cJvZA1vBNHyo=
Subject key identifier: 88:93:5A:86:A0:73:D1:12:B4:A4:87:7A:78:43:6A:80:87:49:B4:5F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0AAB5AA6C226F292991AA6B6A035F62D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iJNahqBz0RK0pId6eENqgIdJtF8.roa
Signing time: Sat 07 Oct 2023 15:04:43 +0000
ROA not before: Sat 07 Oct 2023 15:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:aaa:f89c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0a:ab:5a:a6:c2:26:f2:92:99:1a:a6:b6:a0:35:f6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 15:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88935a86a073d112b4a4877a78436a808749b45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cd:99:59:19:90:50:d2:29:67:8a:8c:f5:2a:
6c:d7:9e:2e:f1:8f:89:36:5a:0d:0c:e5:05:ab:82:
be:85:e9:46:76:7e:02:fc:e4:4b:1e:90:9c:34:ca:
65:4c:4b:1b:c6:4e:7a:1f:6f:05:f0:f0:8a:b7:b2:
d7:e8:ca:68:50:bf:33:6c:dd:7d:31:65:76:61:a0:
79:fd:5e:eb:40:d7:91:d9:f9:2a:bb:19:85:02:73:
53:f1:d0:3a:87:54:71:77:26:70:d3:01:b6:8b:bd:
4e:fe:f4:51:6f:29:59:5e:b2:95:cf:b0:d4:c1:db:
fd:d2:0a:dc:9a:c7:0b:19:77:0c:2c:0e:c5:4f:64:
8d:a1:0f:f3:dd:89:e3:fb:de:b1:26:9d:79:ed:38:
81:89:a2:ea:ea:be:25:a1:71:f6:97:44:16:b4:60:
3e:5a:8e:10:12:7a:c5:b9:2c:97:26:46:45:6b:39:
45:93:4f:1e:d3:19:0a:55:88:70:8f:d1:f8:93:32:
28:d5:5e:04:c5:34:d6:33:b5:5c:3f:07:3f:f8:62:
09:69:b6:ac:d0:cc:12:06:b1:7d:c5:6e:e8:a2:e2:
00:c5:06:0f:45:f6:ef:f1:1f:9d:6f:31:41:7b:c4:
35:69:fb:bd:2f:a1:1e:66:6e:ca:17:36:d6:a6:07:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:93:5A:86:A0:73:D1:12:B4:A4:87:7A:78:43:6A:80:87:49:B4:5F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iJNahqBz0RK0pId6eENqgIdJtF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:43:d9:a3:6b:1b:4d:f2:a2:94:77:3b:cb:72:d3:d6:78:5f:
40:df:18:39:31:01:63:e8:94:38:16:e5:f7:57:96:e4:7f:34:
7e:2a:24:10:62:46:ed:f3:d0:eb:8d:7b:93:ad:2c:70:17:6a:
58:86:6a:11:99:00:0d:36:3e:65:0e:1d:29:ac:4c:cc:31:ec:
5b:8d:09:82:2d:e3:d3:5d:72:7c:fc:bf:90:20:5a:4e:e8:ba:
ea:7e:85:a0:13:46:ae:6b:55:4b:40:d4:6e:71:58:5c:5a:33:
0a:d5:e3:63:94:b7:e4:5e:76:f3:8b:07:2e:44:3e:fd:cb:d5:
2e:c3:26:51:46:a4:b4:66:84:89:0c:57:ed:dc:61:b0:da:47:
86:07:bc:98:af:23:0d:5f:23:89:1b:cb:69:46:77:10:94:b6:
05:b1:08:b0:eb:f1:80:1f:8c:2f:5d:95:ce:70:4d:71:51:c6:
2d:d7:49:18:45:fa:6a:41:e0:76:e4:ba:9d:54:97:ad:84:d4:
31:70:47:19:17:a3:c2:9b:81:f4:5b:0c:9e:10:f9:02:ad:ff:
b8:a7:b0:2c:50:7c:ff:8f:55:1e:20:1b:ad:81:f1:27:7d:e6:
32:75:9e:be:40:c8:3e:6e:17:8a:61:db:70:1f:18:0c:68:4d:
15:d1:76:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 06:04:50 2025 by rpki-client