Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0HVx8LVoFf3owjqgl-KMHamRGD8.roa
File: 0HVx8LVoFf3owjqgl-KMHamRGD8.roa (raw, json)
Hash identifier: LVlqlyJSqps5JP5OYgT7/W0DeLME+768yQgnXkXRQqc=
Subject key identifier: D0:75:71:F0:B5:68:15:FD:E8:C2:3A:A0:97:E2:8C:1D:A9:91:18:3F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0108C6BE410F86FE0EA6C5F72429659D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0HVx8LVoFf3owjqgl-KMHamRGD8.roa
Signing time: Fri 24 Nov 2023 11:13:21 +0000
ROA not before: Fri 24 Nov 2023 11:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:08:c6:be:41:0f:86:fe:0e:a6:c5:f7:24:29:65:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 11:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d07571f0b56815fde8c23aa097e28c1da991183f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:d7:2f:89:64:15:0b:a0:9b:44:b3:61:d8:
17:d1:bf:51:1e:35:d1:f4:58:14:94:61:1b:87:36:
d2:8d:13:c2:4a:8f:b1:fc:57:fa:ee:e9:ee:3a:35:
c9:f7:60:6e:a9:e5:81:e6:6f:25:a3:39:e3:79:47:
af:d8:3e:1a:2e:69:64:78:3f:65:33:f6:ad:ea:ce:
bc:d9:cf:a5:20:6c:7f:35:9e:6a:8e:c4:6f:27:1f:
56:51:6e:25:b4:79:eb:a3:2c:31:75:27:1a:8a:bf:
30:c5:69:7d:03:4b:6c:53:40:75:f8:f4:1c:e4:c0:
4b:88:24:83:40:8b:4c:ed:18:f9:ab:13:7b:21:e2:
26:eb:2c:8e:4e:28:53:23:3c:8a:72:bb:e0:8b:47:
dc:4d:22:11:8d:47:cf:ed:e2:2f:15:fc:c1:31:f0:
37:25:f6:fb:90:6c:58:1a:41:4f:d4:f1:f3:d5:e3:
7b:b4:6d:d0:e4:64:f4:91:c6:c6:3d:3e:1a:0c:aa:
3d:10:0c:93:19:04:04:41:16:d2:95:7c:26:2d:93:
44:8a:eb:61:e5:2d:76:ed:4e:11:2c:04:91:9f:7c:
2a:68:fc:4e:43:44:6e:73:c2:25:bc:2c:03:bf:b1:
b8:77:df:7b:e0:4e:06:43:ef:04:46:7b:11:fc:ca:
60:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:75:71:F0:B5:68:15:FD:E8:C2:3A:A0:97:E2:8C:1D:A9:91:18:3F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0HVx8LVoFf3owjqgl-KMHamRGD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c0:e4:82:21:4a:3b:d2:a7:8d:89:9f:bf:17:7a:b0:5d:0f:c3:
16:55:67:69:cf:4c:88:a7:47:fa:81:9f:b6:9a:f2:82:bb:5c:
ee:99:da:3a:9b:90:15:7e:dd:83:82:eb:9c:a7:74:63:d3:39:
4a:c1:3c:5b:c1:3f:cb:78:a8:dd:a6:54:4d:3f:25:b7:27:2a:
07:13:0f:9c:dd:55:ee:5e:da:48:91:ad:10:9b:19:a9:b2:9a:
3a:f4:1b:4f:8e:d4:55:a6:2c:d1:c7:63:d9:fb:4b:e8:2b:66:
54:ba:ae:b2:5c:f9:f6:87:c2:7a:1d:34:9c:0c:64:06:7a:74:
62:dc:37:2b:ac:1d:4b:03:fa:c3:eb:88:3f:81:dd:6b:7f:4b:
57:33:63:1c:26:62:d5:82:30:94:0e:fe:99:ab:54:7e:11:fa:
3f:b5:cd:e6:38:78:99:88:0b:1c:98:8e:1f:3b:5d:00:0a:7e:
da:10:d4:8d:50:0f:1b:99:58:45:cd:1f:de:90:7f:17:c9:2e:
6f:75:b2:bd:30:11:e5:91:3c:68:02:8a:6f:a5:2e:ff:33:fd:
66:fb:f4:d9:c1:08:58:35:c5:25:47:59:d0:d8:f2:ba:7f:26:
23:e8:1b:60:3c:a2:93:31:a4:1e:ed:06:b1:57:5e:bc:0e:3b:
15:22:1f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:43:16 2025 by rpki-client