Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0dqO4OLA6MPQzIqpYk0uBO5X-8Q.roa
File: 0dqO4OLA6MPQzIqpYk0uBO5X-8Q.roa (raw, json)
Hash identifier: sbqCMz9V2dym39QzUi0OAZU/MIODIaHcUNuZ+LA5YSo=
Subject key identifier: D1:DA:8E:E0:E2:C0:E8:C3:D0:CC:8A:A9:62:4D:2E:04:EE:57:FB:C4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4431F8FEBF2A8B87DAB27F4A70D0DD63
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0dqO4OLA6MPQzIqpYk0uBO5X-8Q.roa
Signing time: Thu 07 Dec 2023 12:12:54 +0000
ROA not before: Thu 07 Dec 2023 12:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:31:f8:fe:bf:2a:8b:87:da:b2:7f:4a:70:d0:dd:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 12:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1da8ee0e2c0e8c3d0cc8aa9624d2e04ee57fbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:6b:bf:99:cd:3d:a9:8d:99:92:fa:5d:93:
79:26:e3:fc:71:04:45:a9:6b:82:dc:d8:12:14:0f:
d5:c1:30:c4:a1:fb:21:b2:9b:16:ac:d0:98:25:9c:
fa:78:ae:48:6a:dc:45:c2:ac:de:3b:06:5e:89:20:
5c:b6:2c:14:82:21:75:84:f0:b3:be:ce:f1:f1:c1:
20:0d:78:f4:f9:c7:c5:46:db:74:0e:c2:ec:84:71:
15:ca:2f:35:ce:42:1f:05:88:cf:db:87:13:79:31:
99:6a:8d:81:0d:dd:02:f3:c0:b9:5e:0d:7d:92:71:
5d:37:6e:31:40:e8:99:3d:04:e8:37:eb:4b:5d:4d:
7e:a8:e0:fa:80:45:ee:8a:e4:1f:08:44:5f:84:17:
4c:a2:46:c8:d9:3a:a3:35:96:01:9f:23:f2:b8:b0:
04:c3:37:31:c2:97:cb:6d:67:9e:a6:79:f1:17:97:
7f:3e:8e:dc:3d:05:b9:68:cf:22:04:56:d0:c4:1c:
ae:71:99:37:92:8f:cb:a7:89:52:bd:b9:04:84:d0:
70:fa:d8:07:df:6f:05:09:81:d0:d5:32:c8:30:df:
f3:c1:8c:2e:ec:de:56:da:ac:78:e1:90:73:b2:fa:
dc:84:9e:9b:1a:93:ad:65:c1:9a:9c:4f:3c:76:56:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DA:8E:E0:E2:C0:E8:C3:D0:CC:8A:A9:62:4D:2E:04:EE:57:FB:C4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0dqO4OLA6MPQzIqpYk0uBO5X-8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:67:a9:09:3b:d0:90:ce:86:6a:78:bf:d7:0b:ac:70:9b:82:
c9:ee:9b:b7:c5:07:32:d2:b2:ae:af:17:10:4a:6a:73:a1:42:
b7:40:2d:22:e2:27:ed:72:29:79:26:99:17:48:33:5c:95:b5:
29:45:e2:01:6a:0e:b5:9b:e4:cc:59:51:99:56:e1:3c:5d:2e:
d3:d1:14:69:9e:61:2c:49:11:74:e1:b2:dc:18:9d:5f:6c:6c:
a7:5d:12:de:b8:8b:60:36:86:ed:f8:da:d6:a6:5e:7e:56:ff:
84:96:0b:4d:78:64:1a:8f:73:6d:c5:23:d2:d9:ae:e3:41:1a:
bb:15:22:a2:98:8a:93:12:5d:3c:3e:d5:59:9c:a9:7c:ab:55:
9e:d7:a3:00:fb:34:7c:26:a3:9c:11:c4:d9:6e:93:e6:09:16:
f6:f5:0b:92:b3:fc:ca:1e:58:16:b6:a2:6d:d3:86:16:ff:b6:
8c:78:82:4f:db:75:82:59:14:58:7a:4a:98:57:7a:9c:ac:ce:
95:ea:f2:5e:fb:12:ff:d5:18:11:03:7e:13:e3:46:50:ac:22:
dc:e8:22:dd:d0:57:bd:32:0c:93:da:be:5e:10:dc:26:64:ce:
b2:88:a4:73:00:67:f0:f1:cf:72:99:7a:d2:4b:07:59:c9:45:
dd:67:31:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:53 2025 by rpki-client