Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s8yHvLAPgs0l-7hvgYUVBthQvYw.roa
File: s8yHvLAPgs0l-7hvgYUVBthQvYw.roa (raw, json)
Hash identifier: 1WXFFa3dH2AvmvYz41CQ9kybBKiZWdY+0w3/HNsZVBM=
Subject key identifier: B3:CC:87:BC:B0:0F:82:CD:25:FB:B8:6F:81:85:15:06:D8:50:BD:8C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C30780743D63A2DD92B2CA7F8C22D0347
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s8yHvLAPgs0l-7hvgYUVBthQvYw.roa
Signing time: Sun 03 Dec 2023 16:17:01 +0000
ROA not before: Sun 03 Dec 2023 16:17:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:30:78:07:43:d6:3a:2d:d9:2b:2c:a7:f8:c2:2d:03:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 16:17:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3cc87bcb00f82cd25fbb86f81851506d850bd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0b:43:9e:db:3d:4f:be:eb:fc:6c:cb:02:92:
d7:1e:92:53:5e:68:52:22:50:df:34:59:a8:e9:69:
aa:c9:9f:09:bf:88:a7:26:16:1e:5c:bb:f4:3a:08:
0f:77:9f:c8:4b:10:5a:6f:75:51:cc:04:6d:00:dc:
ac:55:d1:da:bc:ed:cf:c0:22:db:e6:b4:02:c8:64:
0d:83:b1:46:56:f6:b6:02:fe:61:65:ef:d9:ed:57:
57:8d:ed:ee:5a:de:fb:a5:e0:76:db:a8:53:2e:7b:
68:33:4d:4c:05:cd:79:81:70:26:48:44:3f:9b:b9:
a2:a1:e8:bd:b9:55:89:d4:94:99:be:f1:4b:cb:2b:
c3:60:52:5d:ce:b4:19:b6:ee:85:bb:98:ac:de:1e:
6e:fa:00:40:97:b4:36:47:3d:83:47:15:6b:8c:81:
f4:03:b9:f9:8c:62:18:ca:d5:0f:8b:f7:1f:57:f7:
f2:f4:16:68:0a:40:c5:fa:09:b4:85:43:05:5b:89:
d9:4d:e1:7c:b9:f3:88:b5:c5:c1:51:0e:98:55:43:
f5:f6:66:40:25:9b:68:c9:2d:ec:92:fe:c1:39:fa:
2a:5a:97:7d:97:2b:3c:3d:e4:42:94:ac:60:f4:d6:
7e:50:54:7d:d4:09:e5:84:34:76:40:d6:b1:0a:7a:
e9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CC:87:BC:B0:0F:82:CD:25:FB:B8:6F:81:85:15:06:D8:50:BD:8C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s8yHvLAPgs0l-7hvgYUVBthQvYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:c9:78:04:7b:ec:67:96:fb:5d:01:5c:8d:b6:48:de:30:a6:
1b:da:ec:f4:22:3c:5e:16:5a:b2:91:a0:9d:2d:64:72:f3:90:
b1:5f:10:50:0e:88:d7:67:89:35:92:b5:91:bd:12:53:78:6a:
e2:85:34:ef:76:3d:94:2f:d8:f5:0e:18:66:f9:a2:8b:44:ec:
48:cd:cf:7e:0a:fe:41:22:d6:a3:a0:78:b9:4a:17:50:9a:21:
98:df:36:95:e2:5a:c3:75:30:b4:12:da:1a:f1:d9:6d:55:fb:
40:5b:69:ce:2f:58:bf:fc:9d:93:b9:de:33:3a:2c:97:ce:2d:
ca:b0:6b:dd:72:6e:15:ff:3b:e2:40:ce:32:2d:25:38:f6:75:
3c:57:b1:b2:9d:a0:98:04:a2:dd:18:f6:1d:e4:bb:37:35:0b:
d1:91:d4:cf:fd:b4:6e:52:1e:66:1f:ce:f7:dc:10:97:d2:ae:
06:86:f4:d6:6e:fa:cf:8c:e8:24:65:03:ff:2c:47:8f:24:93:
fe:d5:b7:72:09:73:68:99:e7:38:9e:1b:af:7e:44:3a:09:29:
40:07:69:ab:ba:c2:34:74:2c:e7:7b:81:69:92:9e:b8:b1:52:
a7:91:e3:23:4e:f0:47:5b:bb:52:c6:3d:58:c6:09:0f:84:73:
c6:6e:9c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:25:40 2025 by rpki-client