Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rB9Dcv0Oam0-U9YUPBTrRIZuGMM.roa
File: rB9Dcv0Oam0-U9YUPBTrRIZuGMM.roa (raw, json)
Hash identifier: KVu4MeQBlp6OYZu0N+Lu/jBs6v/E4ROLvcDlaaiRSYw=
Subject key identifier: AC:1F:43:72:FD:0E:6A:6D:3E:53:D6:14:3C:14:EB:44:86:6E:18:C3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C55942375787A5A0EE5DAB5A0AD33A662
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rB9Dcv0Oam0-U9YUPBTrRIZuGMM.roa
Signing time: Sun 10 Dec 2023 21:13:40 +0000
ROA not before: Sun 10 Dec 2023 21:13:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:55:94:23:75:78:7a:5a:0e:e5:da:b5:a0:ad:33:a6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 21:13:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac1f4372fd0e6a6d3e53d6143c14eb44866e18c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4c:e8:4e:37:3f:2a:d2:76:ab:82:c1:b5:05:
06:8f:5f:cc:11:eb:16:ae:0b:40:fa:b3:10:98:52:
26:f5:8d:4c:50:c3:a1:93:05:ae:85:aa:82:0e:8f:
79:2f:4c:a2:20:03:57:38:fd:c1:1b:45:77:0c:5c:
82:d3:0e:99:b9:6a:f4:36:cb:e2:8c:34:d5:5b:9e:
53:92:c8:2c:76:11:8a:c5:bc:ff:30:5b:5e:9d:e9:
a5:3a:ff:80:02:be:ef:c7:b0:6d:1a:c5:ba:c8:bf:
b0:b3:4d:cc:2d:90:10:69:c0:be:cf:8e:22:e5:9e:
16:07:45:f4:29:b6:7c:5d:99:57:0b:c6:27:0d:0d:
39:47:56:71:ad:73:93:35:9f:20:33:4a:5b:a0:2a:
bd:f5:91:ff:e1:72:14:6b:ab:17:b8:7b:3a:61:b2:
dd:57:7e:84:84:23:c3:bb:e4:15:6f:77:8c:2d:1d:
bf:f9:18:66:56:78:66:20:fc:56:3c:89:22:ba:21:
ad:74:17:5b:98:84:39:32:98:99:1c:16:f1:27:51:
a5:72:6f:f3:56:41:49:e2:01:c0:65:a7:fe:5f:ff:
57:67:c7:5c:64:65:eb:d7:e4:23:d0:57:6d:04:e0:
cc:4b:49:14:55:58:de:53:ae:17:ad:58:c4:d5:a5:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1F:43:72:FD:0E:6A:6D:3E:53:D6:14:3C:14:EB:44:86:6E:18:C3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rB9Dcv0Oam0-U9YUPBTrRIZuGMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:13:8e:08:8d:1b:69:cd:28:89:a7:96:6b:37:e0:25:a5:ea:
2d:83:c6:e6:d1:9e:11:a2:bc:61:e8:19:c2:a6:c9:3c:25:5b:
c9:3e:63:4a:6b:bc:f0:b5:02:df:d3:d6:08:f6:8c:a1:f3:4e:
2e:03:5b:be:53:7d:20:9a:f2:3a:27:c2:09:ce:95:cd:72:1a:
03:6d:db:b2:6a:ad:f9:7e:18:a3:5c:10:79:39:c3:49:24:ba:
f2:e4:c0:b4:ec:ce:f5:2a:fe:16:75:85:13:28:de:f0:4d:60:
67:4c:ab:1a:4e:f7:ed:5e:3d:cc:e5:b2:d7:9c:8b:99:0a:95:
a6:68:75:d2:fa:ba:11:bc:42:77:b4:c1:a1:eb:6a:33:bf:27:
b4:2a:4c:11:33:a7:da:b7:ab:2a:ac:fd:33:7b:20:96:20:66:
10:16:02:7f:e1:f8:79:5b:c1:7f:97:58:e1:8b:6d:6d:33:bf:
db:07:d9:d9:5c:bb:7a:a1:a0:b8:e7:20:f0:34:2d:5d:d4:39:
e5:b4:58:13:23:a4:3d:30:aa:bd:c1:22:36:be:d2:54:9d:24:
12:af:38:14:31:ec:77:7c:d9:6a:95:a0:5b:4d:b6:90:ef:0e:
5a:dd:82:37:a9:3b:67:98:f3:c7:d3:c9:38:61:5a:25:58:30:
a9:e5:da:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:12:45 2025 by rpki-client