Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0phgOH0iakbwo6wb6H1S3V019jM.roa
File: 0phgOH0iakbwo6wb6H1S3V019jM.roa (raw, json)
Hash identifier: hwpcV+/1HJYqAr+ejEHkUM+xbPK/dC7SsB/qKb6yg1I=
Subject key identifier: D2:98:60:38:7D:22:6A:46:F0:A3:AC:1B:E8:7D:52:DD:5D:35:F6:33
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4C26CE76D3A0E534015DA9440E809C11
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0phgOH0iakbwo6wb6H1S3V019jM.roa
Signing time: Sat 09 Dec 2023 01:17:40 +0000
ROA not before: Sat 09 Dec 2023 01:17:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4c:26:ce:76:d3:a0:e5:34:01:5d:a9:44:0e:80:9c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 01:17:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d29860387d226a46f0a3ac1be87d52dd5d35f633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:18:96:cf:20:68:fc:4e:45:79:c4:1f:0e:76:
4e:70:8d:32:1f:39:11:a3:75:bf:b1:c7:22:51:0d:
56:56:5d:b5:e7:61:8d:c6:5e:60:ac:e6:10:c5:a2:
de:18:dc:39:15:cf:1c:61:d9:f2:5d:0d:eb:2c:19:
cf:0f:ad:8b:d7:ae:85:60:6d:41:62:90:b6:a0:a1:
b5:ff:ef:00:eb:c8:ae:62:d2:28:a4:37:ec:95:93:
8c:a6:64:9f:cd:11:4b:06:3a:f7:1c:76:e3:68:2b:
d0:39:17:2a:86:94:20:b5:69:bb:83:b9:02:b1:84:
f5:21:dc:97:14:03:39:c2:a6:7a:25:d6:ba:af:fc:
70:13:53:27:4c:f2:92:9d:1d:79:4f:39:03:67:b0:
35:7b:22:5f:4e:90:2f:25:0f:dc:39:b6:2f:c6:a8:
03:59:b2:7b:d5:76:b0:a4:0a:2d:84:34:2b:b2:2f:
cb:5e:9b:5f:04:2f:25:4b:80:5a:0e:6d:0c:59:1e:
b8:78:9f:4c:a6:b3:e3:d4:40:6e:c9:0c:1f:8e:3b:
2a:23:77:45:66:23:f6:88:94:b0:dd:c7:4d:53:a6:
1a:74:f8:27:87:a8:95:1c:bd:c3:4c:11:56:93:e0:
bd:3b:a3:b0:d7:ca:46:9c:14:f3:ca:0d:c8:72:92:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:98:60:38:7D:22:6A:46:F0:A3:AC:1B:E8:7D:52:DD:5D:35:F6:33
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0phgOH0iakbwo6wb6H1S3V019jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:82:41:9f:04:90:e7:58:bc:02:fc:d9:dc:8b:be:dd:80:64:
a5:c8:10:16:62:e2:62:99:c9:ae:87:0c:5a:3f:69:55:d1:97:
4d:d1:91:c2:7d:87:0d:3f:8e:4e:d7:b6:80:0d:9b:df:34:33:
ed:b2:b4:01:64:f7:a6:df:43:b9:04:53:05:31:60:23:4b:fe:
e5:73:e3:96:14:07:c5:01:e6:68:9c:bf:e3:59:b1:75:52:5e:
19:87:ec:ae:66:2c:00:3b:8a:eb:ba:18:66:5c:4f:66:3c:cf:
22:43:a4:87:21:92:23:37:90:33:3a:d1:37:3b:09:fd:11:14:
d2:f5:7b:91:b6:fa:0f:f0:60:d1:1a:85:c6:e7:be:6e:ca:a6:
4e:44:11:07:b7:a7:92:90:82:12:b0:65:b6:42:5e:f3:e2:40:
7b:f7:3b:d9:3c:de:ca:5a:9d:08:f9:48:22:e0:28:70:94:6d:
c5:95:fe:c1:a8:0c:40:13:40:33:4c:6a:69:c4:39:15:e6:fd:
1a:55:16:b6:43:42:10:6d:82:d2:20:d8:3a:79:ec:4f:9b:94:
72:4e:10:e0:90:77:7f:d4:8f:19:7e:5c:55:3f:68:99:fe:b7:
03:76:35:6d:b3:02:00:3d:f5:57:d7:74:49:f6:f8:75:cf:63:
e8:d2:cc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:11:29 2025 by rpki-client