Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jiicl9tARUtMZASnd00JpNy_JJ8.roa
File: jiicl9tARUtMZASnd00JpNy_JJ8.roa (raw, json)
Hash identifier: gDxRFdp7uEOFw2E5DWxZEuSWcZdRrbNIfMACm7Ki/30=
Subject key identifier: 8E:28:9C:97:DB:40:45:4B:4C:64:04:A7:77:4D:09:A4:DC:BF:24:9F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B71E68ACCECEAB1EDC82EE0F4A8D1B284
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jiicl9tARUtMZASnd00JpNy_JJ8.roa
Signing time: Fri 27 Oct 2023 16:10:15 +0000
ROA not before: Fri 27 Oct 2023 16:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:e6:8a:cc:ec:ea:b1:ed:c8:2e:e0:f4:a8:d1:b2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 27 16:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e289c97db40454b4c6404a7774d09a4dcbf249f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d1:a4:d3:ee:61:45:e4:aa:dd:f1:27:1d:8f:
e8:7b:8a:8a:74:b5:f3:80:bb:47:fe:2d:08:4d:15:
f6:95:19:c9:ac:a9:bb:ee:f9:37:4a:e8:0e:c6:59:
cb:a8:7b:82:93:b4:c7:f5:87:36:a3:28:01:94:cb:
12:1f:b1:af:b9:07:b4:33:f4:2a:2d:05:ab:bd:e7:
b0:f2:77:9a:92:5b:bf:37:a3:58:f1:5c:0f:1d:8d:
fd:9b:7f:79:91:1c:47:ab:22:f1:f3:4b:79:4d:de:
dc:34:b2:d1:60:52:b3:d6:f3:c5:58:3f:84:ad:2d:
df:57:a5:2e:00:9e:10:0e:d8:d3:b3:5b:bb:51:61:
40:88:f0:2a:8c:a0:33:08:44:c3:39:25:a6:6c:f3:
db:f4:ac:92:dc:70:fb:8c:4a:53:69:22:7a:bb:cd:
65:e3:11:e0:39:e3:88:b1:3f:ac:66:88:c7:35:20:
c2:12:1f:94:79:07:0a:4f:19:83:9a:40:c1:b1:f9:
51:02:42:81:cd:b9:e3:33:97:95:db:4c:fc:a4:d5:
fa:c0:91:7f:b5:cd:8b:a1:b9:ea:60:29:a4:cc:1b:
bd:23:57:e2:3c:34:0a:25:7d:67:b8:26:a7:e4:1a:
db:79:48:14:92:a0:17:99:ca:23:97:54:9e:19:88:
82:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:28:9C:97:DB:40:45:4B:4C:64:04:A7:77:4D:09:A4:DC:BF:24:9F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jiicl9tARUtMZASnd00JpNy_JJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d0:0c:b0:9b:05:40:9c:34:0a:cc:83:cd:8d:57:23:c8:41:47:
f0:9a:23:75:14:85:51:20:fa:0f:0c:8f:11:ca:a3:f8:73:a9:
19:4d:6c:bd:2d:10:54:cc:34:35:9d:83:23:87:e9:5b:80:e4:
10:8b:68:98:50:07:83:ca:6e:da:9e:94:9e:8c:ef:0e:60:23:
c5:52:95:d8:59:d4:3d:d8:cc:c5:33:0b:0a:dd:c4:31:1a:3d:
e5:f0:e7:df:a9:44:1d:94:18:71:b4:2f:1a:75:92:d4:5e:90:
32:a2:c3:78:f8:77:fd:67:89:de:19:2f:62:14:c9:73:bb:e8:
bb:af:0c:d7:61:cd:72:b3:8e:dc:0d:aa:c1:dd:d8:4c:1c:68:
d8:ff:ed:08:99:b1:6e:26:96:a2:2a:98:47:5b:1e:42:d7:a6:
e2:81:e2:1f:1e:b7:1c:bc:75:8b:89:93:74:15:d8:00:2d:6d:
d8:c3:62:ac:1e:20:a2:56:3d:37:33:4a:42:49:88:ff:54:8b:
e8:02:e8:dd:ab:cc:8f:f6:df:16:8b:b9:c7:ea:0f:4a:a2:18:
5f:cf:6f:e3:c7:f5:97:76:ff:94:57:e8:ab:8f:7a:a2:9b:3f:
fa:3a:1b:9a:66:3d:23:39:b0:3a:31:82:96:c5:aa:39:b9:e6:
75:3b:49:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:35:40 2025 by rpki-client