Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-DAaWvfkyu6RmLKJo4dyMT0nSSU.roa
File: 1-DAaWvfkyu6RmLKJo4dyMT0nSSU.roa (raw, json)
Hash identifier: bO09P7tFiB84olTNr6ygQ34Fw0H0/wny7eDmuYqQmos=
Subject key identifier: F8:30:1A:5A:F7:E4:CA:EE:91:98:B2:89:A3:87:72:31:3D:27:49:25
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B49CE8FD389DEE04ADF239E882C0039F2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-DAaWvfkyu6RmLKJo4dyMT0nSSU.roa
Signing time: Thu 19 Oct 2023 21:19:15 +0000
ROA not before: Thu 19 Oct 2023 21:19:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:49:ce:8f:d3:89:de:e0:4a:df:23:9e:88:2c:00:39:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 21:19:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8301a5af7e4caee9198b289a38772313d274925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:55:94:65:a5:5d:d6:b3:d7:05:2a:1d:01:
23:04:10:da:de:b4:b8:e1:d4:d3:e2:7f:99:a2:92:
60:9c:50:43:a0:3a:4b:94:6c:3a:04:78:a2:cd:21:
c3:52:ef:00:59:0b:d1:b9:85:6f:37:74:0f:42:2c:
00:40:97:6a:9e:90:b7:9e:f4:6d:9b:64:6e:67:c0:
15:22:43:e2:00:a9:00:6f:65:4b:9c:14:ad:e1:9a:
5d:1c:ea:fe:22:09:df:f3:bd:d5:14:26:2a:2a:81:
88:38:bd:2a:78:24:7b:de:62:c1:c6:e0:dc:0b:44:
fe:37:61:d2:23:79:b4:24:7f:58:da:af:d4:56:23:
d8:20:14:bf:09:45:e2:5d:c8:77:27:b1:7e:38:f0:
e3:ec:52:6d:03:7b:d5:76:f3:b9:b0:3c:ad:82:3a:
89:e0:bc:aa:0c:6a:e3:eb:50:62:d4:58:72:7e:b2:
ef:d8:b0:8b:d4:14:e7:73:dc:ed:4d:54:55:69:6a:
f2:14:88:ac:2e:70:ce:25:ed:7e:26:6b:50:19:f8:
1b:3e:7d:7c:13:55:60:37:82:3a:3b:f0:ec:49:27:
98:49:ef:8c:b0:2a:9a:fc:e4:a5:47:4c:d8:83:7c:
9e:60:ab:1f:3b:ab:8d:04:ca:5b:08:78:02:2e:26:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:30:1A:5A:F7:E4:CA:EE:91:98:B2:89:A3:87:72:31:3D:27:49:25
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-DAaWvfkyu6RmLKJo4dyMT0nSSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:df:50:6e:74:dc:81:0d:d6:be:b3:61:74:ab:2e:1a:a5:f3:
7b:2f:a2:eb:bf:cf:db:7a:41:69:f9:4a:90:7b:cb:71:27:b0:
82:91:dd:cc:a1:ca:2f:94:5a:b6:f1:57:64:82:a4:ad:b0:98:
4b:fc:30:a1:61:7a:00:3d:ce:38:a4:2f:6d:b7:e4:cb:60:93:
d7:dd:a2:d8:0d:f1:02:51:0b:b5:03:cf:cf:ac:42:16:c6:7e:
66:a8:bd:3e:d2:c0:aa:c3:37:04:12:6d:bd:9d:4a:f0:03:21:
2c:40:83:4e:f4:77:81:54:69:9e:ff:19:3a:71:c9:d5:fc:5c:
0e:5e:c9:5b:17:e1:1f:04:2a:16:fd:e9:57:27:5b:ca:99:49:
bc:3c:cd:2d:24:57:ec:33:07:46:7e:f4:b5:44:b8:b2:9a:96:
cd:19:c6:87:31:ae:ca:f8:a0:1f:66:25:06:08:90:fa:60:b7:
9c:1d:3f:a2:d9:c4:1f:48:f5:91:dd:25:75:ef:36:6c:e6:7b:
16:2d:9f:02:8e:cf:af:83:12:10:be:93:ee:53:bb:27:00:86:
48:75:fc:43:b2:76:2a:3a:25:43:74:c4:84:4b:49:a1:9f:e8:
bd:95:1d:1c:d5:c7:c1:5d:68:0c:0c:ad:ae:e5:0e:2d:1f:30:
fb:96:96:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:17:01 2025 by rpki-client