Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jemtUYS8ShOHU4N1KmpVIQkAYWs.roa
File: jemtUYS8ShOHU4N1KmpVIQkAYWs.roa (raw, json)
Hash identifier: li+q6ZikYb3W/Opk57A6gXehn5PNIz5/dmaJ9q104t0=
Subject key identifier: 8D:E9:AD:51:84:BC:4A:13:87:53:83:75:2A:6A:55:21:09:00:61:6B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA41C8B050AE2E9E6825B6C3175846D60
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jemtUYS8ShOHU4N1KmpVIQkAYWs.roa
Signing time: Mon 06 Nov 2023 10:10:15 +0000
ROA not before: Mon 06 Nov 2023 10:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:1c:8b:05:0a:e2:e9:e6:82:5b:6c:31:75:84:6d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 6 10:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8de9ad5184bc4a13875383752a6a55210900616b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:52:82:2b:ff:f5:15:3a:59:e2:0e:9f:e8:c5:
c5:10:a8:d1:96:3c:07:52:e6:33:22:72:ea:35:0c:
63:c1:ca:61:56:24:60:b6:9d:6f:27:09:ad:84:fe:
a8:f3:00:87:ce:02:bd:fe:df:68:8b:3c:72:7c:da:
2f:b7:a1:a1:d3:15:9d:f8:4f:34:b1:1b:22:04:b4:
f0:1c:b6:bc:72:e1:58:15:57:ca:89:1b:5d:99:29:
57:89:90:97:bd:39:06:10:7e:0a:22:59:1a:e3:8a:
f8:03:4e:81:23:b1:4a:d8:ce:be:00:96:68:3e:32:
e4:99:67:6f:3b:d2:47:4d:bf:41:4a:c4:c3:52:f4:
0b:fa:6c:41:33:b1:11:1a:f9:a2:c5:50:84:7d:73:
89:8a:f6:bc:80:53:52:14:3c:f6:b7:81:d0:1a:f3:
66:72:04:6a:74:52:bc:d6:07:8f:4f:f5:a7:f3:95:
0d:c2:30:0f:70:1d:4d:78:85:42:34:03:f1:81:56:
79:6d:e6:54:04:22:7d:4a:d2:d5:2c:69:4c:8b:ec:
22:bf:cc:20:f3:3e:18:fb:81:b3:c1:1b:5c:ba:33:
db:1c:05:a4:e8:49:c9:da:b3:46:a7:bc:32:c4:58:
9a:6d:ba:13:3e:05:90:fc:58:38:5a:a4:bc:da:91:
32:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E9:AD:51:84:BC:4A:13:87:53:83:75:2A:6A:55:21:09:00:61:6B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jemtUYS8ShOHU4N1KmpVIQkAYWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b6:78:3f:49:1d:c5:02:7b:15:d6:71:7d:40:50:c5:aa:05:03:
87:21:90:50:db:63:9d:84:fb:3c:bf:4b:81:b4:5d:4b:b4:86:
a7:e2:f1:7b:0c:44:8a:a7:22:f3:f1:0f:5f:37:7d:4a:58:11:
51:b3:8f:b1:1d:48:d2:0d:7e:03:3e:a3:c6:65:3d:3b:0d:4c:
d7:65:a0:0c:b5:c6:67:15:a5:75:9a:26:00:bb:97:34:ba:9c:
5e:09:30:89:0f:e8:49:7c:db:58:4a:8a:2a:7d:bc:55:72:14:
59:b1:d5:73:50:a3:b7:44:28:4b:7a:72:07:08:47:8c:20:6c:
b2:68:97:ca:bc:92:f8:d9:36:1b:53:da:46:d9:fd:d9:27:ae:
0a:1b:7d:a0:2e:39:6b:34:b0:61:8c:e1:b6:f0:ba:4d:4a:a6:
21:64:23:ca:d1:c9:8d:5a:93:d1:a2:f1:aa:29:8a:1e:27:fe:
f7:68:1a:09:fc:fd:be:36:cd:42:d3:6c:37:ba:2a:3a:52:62:
45:29:1c:e5:22:ea:c8:18:84:cc:1f:60:2f:4d:2d:c1:7a:aa:
74:57:93:87:17:04:93:51:f7:4a:40:d6:10:d1:a8:a8:a5:36:
8a:45:bb:b4:4f:f5:52:c8:b8:6c:c8:2e:cc:68:43:60:05:a7:
d1:ab:02:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:19:23 2025 by rpki-client