Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sIHt5sbJElAwwbjE7BgDg-SljDs.roa
File: sIHt5sbJElAwwbjE7BgDg-SljDs.roa (raw, json)
Hash identifier: R4W/kZThGwzhOaBRDAppM5TTi1DWtXrNv/vY9hi3de0=
Subject key identifier: B0:81:ED:E6:C6:C9:12:50:30:C1:B8:C4:EC:18:03:83:E4:A5:8C:3B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC6A84202269E7002EB283A577A7D274B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sIHt5sbJElAwwbjE7BgDg-SljDs.roa
Signing time: Mon 13 Nov 2023 03:09:57 +0000
ROA not before: Mon 13 Nov 2023 03:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c6:a8:42:02:26:9e:70:02:eb:28:3a:57:7a:7d:27:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 13 03:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b081ede6c6c9125030c1b8c4ec180383e4a58c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:81:50:4f:e0:84:77:8e:8f:83:5c:44:c4:
4e:48:c6:2f:bc:1e:60:ac:81:17:a1:be:27:68:7f:
4f:af:2a:56:f4:38:ad:8d:d9:a5:47:30:77:12:d7:
e4:21:fd:41:8a:95:2e:bc:8f:18:07:93:e9:ad:c9:
8b:b7:ad:72:61:8e:ad:ec:f6:1c:f9:2c:b1:77:dc:
02:82:17:ca:c2:4b:2e:41:dc:80:c6:5a:ca:83:cd:
5c:89:f0:cd:36:90:48:ec:12:bb:68:26:f5:14:d5:
dd:46:50:e0:a7:f8:0a:37:8a:90:7b:7a:fd:3e:41:
72:14:15:f9:38:58:b1:b3:5d:65:4e:dd:1d:fd:f6:
0a:b8:9d:a7:bb:63:d4:b9:b0:22:20:58:60:10:d6:
f2:23:b9:45:34:b1:2c:52:e3:07:e9:3e:b1:33:72:
97:4c:98:1d:3a:39:8b:55:bf:18:0c:90:dd:80:48:
d8:7c:46:54:af:17:5e:6b:b4:89:98:91:0e:3e:45:
db:e7:d7:5d:5d:d8:83:5b:05:3b:2f:77:83:9e:a4:
85:dc:bd:b7:09:d1:1b:89:e0:e2:2f:17:9b:1d:c3:
39:ec:aa:e4:a5:a0:33:a7:2d:ee:8d:1c:61:0b:4e:
0a:33:72:8c:8e:51:e2:69:e9:7b:c0:92:96:66:3d:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:81:ED:E6:C6:C9:12:50:30:C1:B8:C4:EC:18:03:83:E4:A5:8C:3B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sIHt5sbJElAwwbjE7BgDg-SljDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c5:2a:97:b2:c7:1f:93:da:c2:16:93:4f:04:c2:5d:bf:96:fd:
51:29:4f:fe:86:7c:c1:43:8c:53:25:e6:d5:de:0e:af:f8:ac:
f2:74:b0:5a:ae:a6:65:91:ae:16:e9:d7:d8:58:db:fd:10:b0:
92:a0:87:9f:fa:3e:f7:94:2a:fc:bb:42:48:09:32:ef:14:2b:
50:23:e8:a6:f2:be:6d:07:50:cf:a1:62:19:b5:ef:e3:2e:48:
4e:2f:47:8b:b8:38:cb:bc:66:c8:b0:1f:b5:9d:be:45:46:1a:
ed:5b:7a:d2:3f:79:88:39:22:25:79:65:5b:58:66:c2:3e:c1:
af:85:e3:59:39:27:41:ef:74:97:cc:b5:ad:6c:a1:f1:56:7f:
fa:21:66:5b:d2:02:61:8f:bc:e7:19:22:55:4e:62:f3:69:7f:
04:10:0d:9a:25:52:32:39:6b:6b:3b:7b:4a:96:c6:0d:1b:2a:
a0:4d:e2:23:90:65:e5:ea:bf:4d:54:68:ba:d1:31:d3:72:dd:
64:bb:4f:a4:70:bc:d1:32:0f:a4:11:5e:96:47:8f:31:95:ae:
d2:5e:f1:f4:85:b4:63:dd:05:b9:4f:5c:4e:16:86:b3:f3:d2:
c3:3f:48:f4:7e:4e:99:d4:76:b3:e8:bf:02:d3:c5:f0:0a:fb:
3d:59:19:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:14:53 2025 by rpki-client