Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0_xC2qlypQ--0VjBqgxAVOBE-F8.roa
File: 0_xC2qlypQ--0VjBqgxAVOBE-F8.roa (raw, json)
Hash identifier: tfzTtyqYAKtfn6QX77FOzr2fONbPA4G8OLYcPFfkBTA=
Subject key identifier: D3:FC:42:DA:A9:72:A5:0F:BE:D1:58:C1:AA:0C:40:54:E0:44:F8:5F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE822DF82387B57DD33C1B6639C7FBACC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0_xC2qlypQ--0VjBqgxAVOBE-F8.roa
Signing time: Sun 19 Nov 2023 15:11:21 +0000
ROA not before: Sun 19 Nov 2023 15:11:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e8:22:df:82:38:7b:57:dd:33:c1:b6:63:9c:7f:ba:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 15:11:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3fc42daa972a50fbed158c1aa0c4054e044f85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:0b:2f:3d:d4:b3:0e:bf:d0:df:d3:3d:c7:
25:ac:3e:dc:0d:b9:86:33:4c:ca:65:2a:fb:67:bb:
10:83:f3:b1:cb:b2:2d:3b:72:2d:33:a2:7a:f3:dc:
57:26:a7:6f:12:75:0b:96:51:82:8d:d9:2a:9a:39:
db:a0:6b:a1:e6:8e:77:32:81:9f:a1:01:96:28:81:
0e:39:fc:57:17:34:62:08:49:00:22:84:5e:74:26:
b0:b6:e7:7f:a5:1b:20:e9:2c:8d:47:a8:64:19:33:
2c:2c:c4:ed:42:09:6c:39:e0:8d:1c:86:30:b5:9c:
2f:81:4a:c6:d8:9a:6d:6a:32:b7:66:05:84:90:86:
00:52:f8:84:fa:c0:4a:9d:47:97:25:bf:b6:c8:50:
5e:00:10:99:23:c6:69:92:a1:cd:a8:e9:d4:ce:8f:
83:b5:32:d4:86:86:d9:c8:87:2f:bb:f4:6e:73:bf:
9e:68:2f:34:92:e1:ea:f2:e4:f3:36:ba:44:0e:41:
0d:13:a8:1b:06:ad:e3:3d:c6:8b:d7:7f:94:6f:20:
9a:9d:01:84:fc:4a:91:ec:eb:66:a7:ca:91:3d:43:
24:32:85:f3:23:9b:90:66:f9:7b:14:74:da:5b:9b:
46:b1:6d:85:a8:11:a9:2d:8a:3a:24:5b:21:0f:74:
c9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FC:42:DA:A9:72:A5:0F:BE:D1:58:C1:AA:0C:40:54:E0:44:F8:5F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0_xC2qlypQ--0VjBqgxAVOBE-F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:39:3b:19:fe:1b:bc:5b:f4:33:3d:5b:72:dd:c9:5d:44:14:
91:a8:70:d1:7c:7b:90:ca:a9:b0:a7:e5:d2:c8:3b:89:5d:a0:
08:2b:d2:55:df:3f:3c:6f:3b:14:14:d7:0c:e9:3a:48:7e:9b:
4a:b1:5f:32:13:b9:c3:9a:e5:71:30:ba:48:5e:da:bb:b2:e9:
63:08:a8:e0:46:23:91:ff:1f:28:04:78:c2:b4:44:dd:e3:a2:
52:81:f8:2f:d7:6b:32:50:0b:1f:c6:df:dc:c5:c2:c0:f7:f0:
e0:0d:35:a5:58:a6:5c:0c:5a:af:db:55:4a:68:7a:7b:45:36:
d6:22:8b:9f:14:89:42:7f:2b:de:a2:70:1c:9e:42:ab:5a:04:
a7:7d:32:5a:77:60:17:31:72:46:d5:ff:72:8f:f1:80:51:74:
b4:77:62:25:c1:09:68:54:b0:f0:6c:56:72:bb:50:b4:af:1a:
68:2c:fd:c0:f0:88:d8:58:d4:f2:2b:1c:46:a7:b8:92:44:39:
6d:2b:e5:e3:8b:a9:7a:a6:06:a7:d5:5c:fd:5d:ee:14:c2:f9:
72:fa:0a:c0:fb:be:53:09:26:74:4c:6e:c7:a0:b5:76:14:f4:
3c:fa:d8:55:2b:92:e7:86:ed:f6:8a:5f:87:a2:f8:12:89:2c:
aa:53:eb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:11:13 2025 by rpki-client