Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-PUBL9hCEf7s-BaO3_B791vEBd4.roa
File: 1-PUBL9hCEf7s-BaO3_B791vEBd4.roa (raw, json)
Hash identifier: qFxPRX+r+6bqPz/9fnYIEChFxXzLYJI/XN0rmKniBGM=
Subject key identifier: F8:F5:01:2F:D8:42:11:FE:EC:F8:16:8E:DF:F0:7B:F7:5B:C4:05:DE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5F048EBF2A743E1FB84AD6833F4EB448
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-PUBL9hCEf7s-BaO3_B791vEBd4.roa
Signing time: Tue 24 Oct 2023 00:10:15 +0000
ROA not before: Tue 24 Oct 2023 00:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5f:04:8e:bf:2a:74:3e:1f:b8:4a:d6:83:3f:4e:b4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 00:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8f5012fd84211feecf8168edff07bf75bc405de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:ee:8d:4d:b5:da:51:c8:6b:4f:c5:6f:8e:
f2:e5:78:c1:d6:14:f6:72:ed:fc:d5:bd:3c:94:81:
65:05:5f:e6:42:71:2f:be:51:98:13:fe:46:16:ba:
b7:b4:4d:a3:f2:06:58:c0:c4:fc:86:5d:c7:b6:51:
bd:e9:fb:f9:b2:7a:4e:fe:a1:0f:16:eb:04:ca:bf:
f9:d3:c8:d3:67:1a:69:9d:d6:59:33:21:c6:fc:6f:
e6:f9:78:8c:68:f2:8c:fb:02:45:58:e9:55:67:89:
d9:77:ad:55:6d:88:d3:bb:3d:42:c5:69:73:85:da:
28:3a:04:c0:77:1f:06:b2:bd:f3:e8:c2:f9:fd:55:
68:53:36:20:b6:33:5b:6f:17:b9:a8:c6:52:15:f0:
a4:26:65:13:43:5d:8a:d7:f2:88:be:ed:39:6e:b7:
83:b2:9a:57:53:7e:86:99:4e:74:03:72:38:d4:9f:
06:fd:67:a3:02:80:e4:cc:35:0a:05:bf:27:6c:7a:
82:12:a5:23:e6:96:44:f3:b0:f7:94:10:ae:b5:d0:
61:0f:a6:70:4f:0b:2a:62:2e:f2:93:61:b9:6e:5f:
90:af:fc:2e:fa:d3:0f:60:6f:ee:60:20:f7:e7:d5:
7f:f2:b3:24:26:f7:99:49:50:b6:b0:ae:b8:39:23:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F5:01:2F:D8:42:11:FE:EC:F8:16:8E:DF:F0:7B:F7:5B:C4:05:DE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-PUBL9hCEf7s-BaO3_B791vEBd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:7d:fe:f0:a0:81:2d:4d:b7:4d:b4:72:4a:4e:6f:ec:e4:62:
68:eb:3e:9d:e5:c5:53:aa:e2:c3:e7:58:c9:95:b5:08:3b:a3:
3b:a1:e6:80:4a:76:b6:49:9c:85:df:d7:6c:cf:db:80:e1:9d:
74:d2:99:10:77:72:38:24:0c:a6:3d:e2:6a:dc:dd:b8:0c:9e:
80:83:77:3c:38:49:c0:07:91:e7:8e:b3:06:11:31:ad:2f:83:
4f:ed:03:79:31:b2:e3:42:3f:62:af:fc:8a:99:75:e7:6c:ba:
ef:8b:f7:75:6d:c6:18:7e:51:05:d4:09:7c:1e:08:bd:7b:91:
f8:8a:cb:10:84:87:c9:24:31:29:b0:16:06:05:d9:70:5d:b9:
16:16:f6:0a:0c:30:93:fa:c0:5b:88:21:4b:25:fa:45:a1:fb:
5c:b3:21:f5:64:3a:e1:75:82:19:6c:71:c6:19:b5:44:2e:dc:
61:f6:35:65:51:6c:2f:e6:2f:28:aa:b6:c7:2d:93:cf:1e:f5:
87:44:40:0f:7e:d5:03:32:eb:ae:3d:03:24:00:79:9b:ac:58:
c6:c7:fe:fd:ad:42:5c:e6:d0:da:2b:48:fe:19:7b:7c:63:a5:
a3:42:e0:fe:aa:ec:02:9e:d2:af:0c:6a:6b:15:74:b8:03:25:
06:f0:e2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:49:54 2025 by rpki-client