Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jDVxxMzITe3-ZVOUdqCDwZc4akU.roa
File: jDVxxMzITe3-ZVOUdqCDwZc4akU.roa (raw, json)
Hash identifier: rCXKsrGnp1cWKL3upuDG57iPVY+CVSiO4xSvmWsuMio=
Subject key identifier: 8C:35:71:C4:CC:C8:4D:ED:FE:65:53:94:76:A0:83:C1:97:38:6A:45
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4AAA4A99904700D8F1EC27003FCBF6D0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jDVxxMzITe3-ZVOUdqCDwZc4akU.roa
Signing time: Fri 20 Oct 2023 01:19:16 +0000
ROA not before: Fri 20 Oct 2023 01:19:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4a:aa:4a:99:90:47:00:d8:f1:ec:27:00:3f:cb:f6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 20 01:19:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c3571c4ccc84dedfe65539476a083c197386a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:2d:0c:75:46:30:5e:b8:a8:24:b4:80:80:
6b:f9:84:55:21:09:c8:28:a3:e6:53:ef:f3:f4:c5:
d9:9e:8b:64:ea:ef:c5:21:5d:a3:45:81:98:72:cf:
7d:a9:3b:79:a2:31:5c:42:0f:42:03:12:30:0b:27:
d3:5d:a6:26:75:2c:c8:04:c8:c2:c1:79:53:eb:53:
b3:b3:a7:b4:01:3f:84:47:3d:bc:48:a0:e8:53:13:
34:39:80:8b:c7:b8:07:3c:a2:a9:da:54:4b:83:e0:
61:20:bc:27:af:35:80:fa:1b:2c:a7:99:7c:80:67:
5d:7d:ce:46:f6:0d:7b:1c:2f:d0:aa:06:40:ed:18:
6c:e5:de:16:a5:73:55:3c:72:cd:b6:7e:fc:4d:f2:
de:f9:9f:37:04:5d:39:bd:44:53:8a:f5:25:b9:b2:
88:d6:76:db:35:60:0f:7e:67:78:af:ea:fa:24:19:
d4:f5:3a:f0:a4:c1:97:00:66:c3:f0:ae:e3:1f:d7:
67:ec:97:a1:de:de:5d:0d:9c:9c:3f:92:12:8c:12:
11:82:0e:0e:c7:2b:ac:6d:c3:4c:ac:64:ef:f3:2a:
65:e3:98:a3:7b:90:ce:ab:ab:82:2d:c7:fd:16:ff:
4a:23:7c:73:6f:25:ed:1a:96:4e:cc:1e:6c:23:b6:
84:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:35:71:C4:CC:C8:4D:ED:FE:65:53:94:76:A0:83:C1:97:38:6A:45
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jDVxxMzITe3-ZVOUdqCDwZc4akU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:68:7f:64:ca:7f:a5:f7:05:5e:fd:49:12:90:8c:80:15:76:
f4:48:94:28:d6:43:b9:2c:ff:a5:24:d4:53:f8:42:67:46:29:
ad:ac:51:34:5d:25:66:1e:ba:66:3c:3c:8e:dd:c1:a5:06:c4:
f3:b8:e9:1f:78:ba:61:fc:c0:12:99:28:48:58:be:4b:20:27:
3b:ca:9e:79:86:1c:e0:de:45:20:96:85:76:92:93:79:39:b0:
d9:90:fd:4b:82:de:c2:3e:5f:c6:50:40:4f:09:7e:05:14:67:
5a:06:f4:4c:50:11:e2:b8:04:db:56:59:0b:43:47:6a:1a:c9:
2f:4d:7e:1e:96:af:70:ff:ea:68:50:2b:44:0a:a3:06:f7:6d:
aa:31:41:31:5f:7f:3a:26:61:08:42:c4:f7:3c:3b:2e:91:21:
a7:cc:9e:c3:46:05:b2:fc:75:07:99:17:86:d2:cd:a2:66:3d:
99:72:f7:19:bb:58:50:ce:c3:5c:5a:64:ed:e1:b2:56:e8:5e:
c0:0b:32:15:e9:a7:97:3d:20:88:0a:fd:e0:34:c8:7f:90:96:
38:5b:96:ac:26:87:8c:1f:cc:c5:03:55:4a:fa:4b:f2:5f:55:
c1:4a:20:54:10:c0:a7:2e:fb:67:56:ca:07:f6:92:e5:16:b2:
33:d7:14:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:18:30 2025 by rpki-client