Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tj6ZBCh_IbBI55PFbKVd3LG0fmY.roa
File: tj6ZBCh_IbBI55PFbKVd3LG0fmY.roa (raw, json)
Hash identifier: bMxa7LxoLgJP0PIiDsRPUqEQR3kuG4NCRaBChdgwq/8=
Subject key identifier: B6:3E:99:04:28:7F:21:B0:48:E7:93:C5:6C:A5:5D:DC:B1:B4:7E:66
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE1EED468F43E0F9252A676E64A57B616
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tj6ZBCh_IbBI55PFbKVd3LG0fmY.roa
Signing time: Fri 29 Sep 2023 17:13:59 +0000
ROA not before: Fri 29 Sep 2023 17:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e1:ee:d4:68:f4:3e:0f:92:52:a6:76:e6:4a:57:b6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 29 17:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b63e9904287f21b048e793c56ca55ddcb1b47e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:f3:67:40:15:2e:9c:fa:0e:83:24:fc:cd:
b0:8d:84:27:c7:3e:13:0c:69:72:c1:d5:7b:bc:de:
d0:56:41:17:8b:08:d7:83:fd:7a:5d:5f:d7:cb:b9:
bc:d5:41:9a:66:2d:a5:5d:f2:bd:32:44:64:2b:3c:
b6:75:63:a6:ab:f8:d8:5d:e4:2e:2d:42:e4:ad:22:
52:9e:d7:8d:41:eb:03:20:44:f6:ff:39:b5:f2:c3:
0d:f8:69:92:2b:b7:27:40:65:cc:d5:38:ba:80:cf:
4c:3e:c1:57:ad:ba:2b:c3:98:f0:cb:6f:05:5f:f8:
b7:dd:13:62:01:e5:25:96:cf:0e:b9:1c:6f:9b:40:
4b:96:19:e3:74:c2:8b:25:2d:72:2f:0a:b3:08:45:
ee:0f:21:e0:5d:91:8f:30:f6:e2:82:b3:48:a5:29:
75:4d:38:04:8d:9a:08:b4:2d:c6:9a:24:48:93:85:
26:b8:db:f4:67:bc:c9:32:97:af:c5:ed:a2:63:42:
72:a3:54:e4:f7:1a:0e:c5:f9:61:a7:59:6b:da:79:
f7:6a:1d:e7:22:94:71:7c:d9:94:54:d2:26:4f:ed:
eb:8a:d1:45:82:b8:bb:4d:f8:ae:4f:b6:e7:4b:0b:
e1:bd:de:d0:90:7a:bc:d1:fb:20:f2:e8:f5:16:4a:
93:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3E:99:04:28:7F:21:B0:48:E7:93:C5:6C:A5:5D:DC:B1:B4:7E:66
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tj6ZBCh_IbBI55PFbKVd3LG0fmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c1:f9:bd:cd:d4:62:6b:7e:1e:6a:ea:d0:82:ca:c2:05:ca:f3:
3a:db:3b:f7:ba:77:42:5a:0d:5e:05:66:d6:b9:d4:48:fd:63:
44:73:bd:81:b5:d6:7b:6e:f2:18:9e:ee:46:79:17:a2:2f:95:
7e:66:62:7e:cf:0b:c9:11:96:b5:cb:cf:46:98:fc:60:c0:cd:
d9:63:51:89:48:43:fa:42:5d:ca:8b:ca:6c:73:3c:ff:11:f4:
69:cf:8b:bf:4a:3f:53:31:05:82:49:5b:a5:84:fc:e3:f0:20:
df:30:2e:cd:b1:8e:55:61:0a:28:de:26:47:29:a1:39:f9:ac:
1c:44:db:68:89:e7:3e:1d:0c:28:bb:04:fa:96:7e:54:6d:b5:
5f:78:18:34:2c:69:40:40:41:48:c2:1d:f7:11:68:f6:cb:50:
b2:f2:c3:19:09:57:fc:7c:ac:19:b7:8f:5a:dc:76:d8:65:64:
d9:7f:44:85:23:c8:15:c1:af:b6:a4:e1:8b:e4:36:c4:dd:e3:
92:60:71:eb:bf:ba:3b:34:71:51:1d:25:a2:a6:2d:45:22:a7:
09:c5:c0:77:70:1d:33:0c:26:42:81:01:85:1f:07:7e:be:d4:
2d:f4:26:47:93:33:88:7f:ba:8b:a7:cf:95:26:8f:a4:cc:03:
38:00:71:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:10:46 2025 by rpki-client