Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/saljinvM5ovr0Y0hc5nZwp2TWfE.roa
File: saljinvM5ovr0Y0hc5nZwp2TWfE.roa (raw, json)
Hash identifier: LRyPQm0X9IVbB0FgXD6oOGDt+iPo5h4DC0c5V2EoDa0=
Subject key identifier: B1:A9:63:8A:7B:CC:E6:8B:EB:D1:8D:21:73:99:D9:C2:9D:93:59:F1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAF0F9B610084951D7814C5D4245D2EFB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/saljinvM5ovr0Y0hc5nZwp2TWfE.roa
Signing time: Wed 08 Nov 2023 13:11:57 +0000
ROA not before: Wed 08 Nov 2023 13:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:af:0f:9b:61:00:84:95:1d:78:14:c5:d4:24:5d:2e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 13:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1a9638a7bcce68bebd18d217399d9c29d9359f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:95:0b:ce:d9:88:37:f9:77:6f:aa:55:1c:31:
5b:2b:7e:c3:57:6c:cb:68:47:ef:6d:0f:2a:f8:cd:
e4:3e:f5:19:17:92:64:de:7a:fe:b9:77:f1:d6:31:
84:56:3c:b6:e1:0d:a6:38:94:11:4b:dd:39:5d:75:
da:1a:ad:80:10:29:1a:0a:54:f2:e1:43:72:67:1a:
29:5b:f2:ff:1f:84:ed:6c:54:d9:e5:8d:95:3b:6a:
89:15:31:7f:57:b0:77:2d:b4:d0:2f:a9:e6:ca:af:
1d:08:d3:d0:d6:41:9d:4d:77:55:49:17:62:70:68:
28:99:8c:ca:e4:4b:1d:91:b1:46:8a:9b:60:ef:dd:
52:84:de:8b:5a:b9:6a:0e:29:45:f2:43:6a:be:90:
3c:a8:cf:da:86:fc:8c:2c:ba:83:05:a8:4a:3e:58:
23:47:64:33:f4:66:ae:6c:90:d9:9a:f5:06:3e:2f:
8a:69:dc:91:63:d1:db:00:5a:99:28:ff:39:0b:40:
ee:46:ba:5d:2d:68:f5:a5:6f:9a:c7:75:76:27:cc:
f4:4a:35:38:06:34:f0:61:88:57:ed:07:10:65:71:
d9:92:52:78:02:00:07:b0:07:03:06:3c:4d:f1:16:
f6:c6:8c:52:7f:eb:2d:ff:e4:1c:b4:b7:39:dd:4b:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A9:63:8A:7B:CC:E6:8B:EB:D1:8D:21:73:99:D9:C2:9D:93:59:F1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/saljinvM5ovr0Y0hc5nZwp2TWfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:c6:53:ac:34:64:71:be:06:fc:6f:d5:ef:2a:ab:ac:21:c0:
98:2a:96:e8:3f:b8:b3:88:e4:9b:bf:7b:01:de:d5:6f:af:60:
9d:cf:57:5c:ce:01:5e:47:47:ef:a9:55:d5:cf:92:2e:59:25:
8b:a8:50:bf:04:2e:87:17:67:24:bc:50:65:57:70:1c:bb:68:
fc:3e:23:54:4a:c6:13:82:0f:29:ec:5b:f5:32:15:9a:2c:d9:
b9:2d:06:5d:52:9f:1b:ed:15:7d:28:f4:19:62:42:36:6f:af:
60:52:44:b0:af:68:21:f4:91:e7:b6:4c:ed:22:dd:2d:03:4b:
e1:13:85:3b:2a:6f:32:d4:8a:b2:d6:b4:ae:4f:0f:de:88:6c:
19:5b:2e:f0:ac:82:a9:68:cf:b7:bd:cb:0e:a4:0b:65:69:75:
f7:8f:2a:b3:31:d9:86:a5:b8:fb:9d:7a:16:21:7c:5a:b0:72:
59:64:f5:04:6b:55:96:56:37:57:f3:ae:97:20:49:b2:21:de:
56:77:63:4b:cd:70:7f:60:ae:e5:73:36:e7:ec:0b:93:56:9c:
e8:20:74:ae:86:c4:2e:b5:5c:be:ee:f8:32:1e:2c:ba:42:27:
8a:48:39:b4:8d:96:ca:bc:c8:a9:b7:99:9e:f0:2e:88:df:38:
86:9c:47:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:27:37 2025 by rpki-client