Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s1YbJl8HPf2tGvBOvCmAB83S6os.roa
File: s1YbJl8HPf2tGvBOvCmAB83S6os.roa (raw, json)
Hash identifier: r4fUxfF2iDIwnZjgRoSgHZ3B4riV77S+8v1n84mRinY=
Subject key identifier: B3:56:1B:26:5F:07:3D:FD:AD:1A:F0:4E:BC:29:80:07:CD:D2:EA:8B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADDA605E46FAC172DB73645CECE216095
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s1YbJl8HPf2tGvBOvCmAB83S6os.roa
Signing time: Thu 28 Sep 2023 21:15:59 +0000
ROA not before: Thu 28 Sep 2023 21:15:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dd:a6:05:e4:6f:ac:17:2d:b7:36:45:ce:ce:21:60:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 21:15:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3561b265f073dfdad1af04ebc298007cdd2ea8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:ad:28:33:7d:2d:bb:38:ce:43:f6:90:68:
e3:48:ab:54:90:0d:f3:59:7e:5c:02:75:02:b5:e8:
ec:cc:85:41:9e:f8:2e:4b:15:26:b5:de:71:5f:b3:
60:09:40:61:e1:6a:2b:ac:10:0b:34:e7:da:ed:e3:
d9:bc:0c:30:27:5e:46:bc:57:5b:9a:d8:80:dd:48:
1d:c2:1d:f9:02:2b:9a:38:89:f3:51:32:2e:c4:85:
1e:f7:c6:fa:be:74:52:0c:c8:28:89:3b:5f:79:8c:
42:b6:a3:af:a0:ef:ba:12:1d:ab:e7:53:c9:e1:97:
53:a0:f6:a8:2e:a2:f8:f9:de:23:ea:ea:83:4f:dc:
18:d2:f3:d8:5e:fb:2f:95:38:ab:44:ab:f0:d5:ba:
39:45:b1:cf:cd:16:1a:87:d7:7a:cc:95:16:7a:cb:
f8:26:e7:57:58:86:d9:f2:89:40:88:a1:01:22:41:
d4:84:fc:94:7f:b1:70:a6:6e:b7:71:f0:22:01:2b:
59:bf:74:35:f5:e7:2a:fe:25:d3:ed:7e:73:ef:dd:
55:42:06:55:b3:35:cf:e7:1b:51:65:9a:4a:c1:11:
56:a9:5b:fa:71:d6:d4:0c:8c:b0:de:5d:16:44:86:
41:66:f1:72:31:05:86:3a:b3:62:3c:ae:fb:4a:02:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:56:1B:26:5F:07:3D:FD:AD:1A:F0:4E:BC:29:80:07:CD:D2:EA:8B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s1YbJl8HPf2tGvBOvCmAB83S6os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:57:68:26:17:c6:c2:26:7b:4e:89:b2:65:a8:29:87:2c:21:
3c:a5:ae:d2:db:42:fe:91:e8:b6:92:3a:93:d8:0e:49:86:9f:
7d:1b:84:d2:04:9c:1d:87:a8:a9:31:0d:fb:d2:11:2c:b4:5d:
64:43:18:aa:a7:e7:a4:74:f0:b7:b7:b9:e1:37:fa:e0:28:ac:
c8:e0:72:e3:8d:ca:b8:86:21:2a:ca:4f:8b:68:05:ac:e6:08:
87:91:be:f6:e6:09:be:c5:62:5b:92:a5:ed:83:81:de:80:3c:
71:9d:36:13:c1:ae:c8:62:df:7f:04:72:f4:e9:46:dc:1c:b6:
53:41:e4:55:06:cf:98:bc:64:11:3c:a1:e4:9a:3d:f8:81:d1:
a9:ff:e3:d7:59:c7:d1:4e:63:fe:33:92:33:a6:fe:e3:8a:0e:
c3:6e:fb:f4:56:eb:75:c9:03:c6:24:27:62:ba:f3:a6:a5:00:
08:d2:1f:ed:90:c5:ae:c0:e1:4b:17:a1:03:86:c5:11:8d:4e:
87:a2:e8:4f:b0:00:98:23:d3:2e:08:69:a0:e0:e9:df:ce:32:
c7:0d:55:ac:99:65:1f:1d:08:29:af:10:55:41:6b:46:41:57:
35:38:4a:55:2a:e3:87:2f:9a:92:a3:76:15:35:d5:02:79:88:
00:50:75:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:12:41 2025 by rpki-client