Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/imdqf69FDDkNJ7l4rlFKR_5Mz-U.roa
File: imdqf69FDDkNJ7l4rlFKR_5Mz-U.roa (raw, json)
Hash identifier: qScS6f5BCbuhnVBXfyMIXxEs07Xyq0J2Q4BMJc/bMOk=
Subject key identifier: 8A:67:6A:7F:AF:45:0C:39:0D:27:B9:78:AE:51:4A:47:FE:4C:CF:E5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC0091CB7385D28DEC2F59FEE5554360C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/imdqf69FDDkNJ7l4rlFKR_5Mz-U.roa
Signing time: Sat 23 Sep 2023 03:15:37 +0000
ROA not before: Sat 23 Sep 2023 03:15:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c0:09:1c:b7:38:5d:28:de:c2:f5:9f:ee:55:54:36:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 03:15:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a676a7faf450c390d27b978ae514a47fe4ccfe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:30:ba:d7:62:55:09:a9:1b:ea:04:d9:ff:
8f:04:26:d3:27:dc:56:4c:51:cc:ee:33:60:4a:64:
a0:c7:2e:37:18:bb:dc:33:e9:eb:c1:1d:b6:e0:e0:
bc:59:eb:94:89:1c:e6:d0:e1:a7:09:cc:48:d3:12:
d9:3d:2d:a9:41:97:cb:9c:fb:71:d4:76:73:73:8c:
75:85:c6:26:7f:7b:6f:2c:8f:44:73:b8:27:92:9f:
57:3a:c0:9e:8e:4a:51:f1:9b:fb:0a:e3:48:61:02:
94:ac:94:7a:3d:4f:11:c5:1b:f4:e1:4f:0a:1e:c1:
71:31:37:11:1e:13:93:0e:c0:cb:d1:ed:42:35:9b:
7e:65:24:34:0b:34:d0:7a:26:9a:e5:43:61:5e:11:
19:a2:15:16:7d:98:19:0c:6f:22:13:ac:88:2b:07:
7f:27:9c:75:a0:27:97:0a:b6:b9:25:22:ee:2b:40:
18:9d:1d:22:97:17:82:ce:30:1a:7e:73:12:91:c6:
f1:d5:dc:bc:95:53:4c:8a:6f:54:29:64:5e:59:fd:
16:c0:a7:e6:44:1f:95:ad:f3:d1:63:c0:a3:f9:99:
e4:16:1c:7a:a2:b1:a9:dd:59:01:8a:83:99:fb:a7:
d3:f5:5a:7a:5a:b8:59:40:c1:f4:4d:86:e3:e7:a1:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:67:6A:7F:AF:45:0C:39:0D:27:B9:78:AE:51:4A:47:FE:4C:CF:E5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/imdqf69FDDkNJ7l4rlFKR_5Mz-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:ab:5d:da:78:f1:fb:e2:b3:83:97:75:14:de:58:c0:68:63:
11:3e:a7:d1:ed:fc:94:3e:7c:d2:e6:88:13:53:a9:f0:fa:6e:
23:4d:48:1d:34:30:b7:00:1d:34:21:5d:89:77:d7:2b:e1:3c:
f8:e2:6b:68:af:99:2c:9a:7e:fe:10:28:d1:74:f7:6c:d2:07:
b1:f6:b8:fb:ec:28:48:9b:29:22:aa:13:4e:75:59:15:62:ee:
be:c5:f8:f2:83:93:53:38:c3:d4:34:03:16:8a:4b:32:ef:4f:
a9:36:c5:44:15:cb:e1:17:95:9d:ec:ab:76:c5:fd:cf:ce:5a:
10:3f:89:e2:74:fa:21:65:54:24:85:58:94:d2:84:95:58:bd:
6e:e3:cb:83:22:14:22:ae:77:2a:51:3f:7f:0c:75:6b:0e:7a:
58:c2:d8:41:fa:4e:92:83:bc:95:9d:54:e7:23:0c:f4:25:63:
16:cb:cf:4f:76:ff:7d:11:d0:51:7c:e5:fa:6b:a8:0a:2c:f1:
d8:00:58:b1:f2:c1:74:eb:51:9c:16:bb:c8:42:c2:82:f3:25:
f5:c3:ff:0b:1a:91:b1:76:f5:3c:e8:c7:4c:ef:97:4f:42:d0:
ea:c5:1c:13:b7:61:60:c5:aa:b4:3f:0d:9f:a8:3f:59:bf:a6:
d0:70:42:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:35:12 2025 by rpki-client