Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-tAGqkDxqtTWqTVRouAEYygNj1E.roa
File: 1-tAGqkDxqtTWqTVRouAEYygNj1E.roa (raw, json)
Hash identifier: XdY2UY7dFEXUpDSu+5t+jzT0d+BAlQpwZU48ephfqz0=
Subject key identifier: FA:D0:06:AA:40:F1:AA:D4:D6:A9:35:51:A2:E0:04:63:28:0D:8F:51
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC452D510A76F7F43296A41B137A874DB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-tAGqkDxqtTWqTVRouAEYygNj1E.roa
Signing time: Sat 23 Sep 2023 23:14:37 +0000
ROA not before: Sat 23 Sep 2023 23:14:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c4:52:d5:10:a7:6f:7f:43:29:6a:41:b1:37:a8:74:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 23:14:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fad006aa40f1aad4d6a93551a2e00463280d8f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:8e:43:36:88:be:97:0c:c1:85:34:46:fe:
9e:bb:41:03:74:ae:fd:76:58:c9:f1:77:5b:f9:a1:
e0:47:b1:7d:43:b7:e1:b2:86:bd:7d:53:26:b2:5f:
7b:de:0b:79:69:87:ff:e8:e6:69:81:8e:2c:cd:cb:
22:f9:05:8b:5d:3c:a1:24:ce:80:a2:46:31:cf:ee:
3f:be:16:11:8a:18:3b:cd:53:79:65:49:73:d9:e6:
a3:86:25:ba:b6:37:f9:a4:46:3d:b5:53:47:d8:92:
82:e5:db:f5:92:bb:20:1e:64:5b:22:f4:83:35:89:
00:f2:4a:66:09:85:a6:d1:8a:90:19:7b:a9:21:ba:
04:59:6d:64:29:d4:0a:8a:2c:cb:97:0a:df:16:12:
52:9b:3a:50:83:0c:28:75:4b:2e:95:75:09:e2:3e:
7f:42:a6:16:79:b3:dd:47:c2:7b:fa:19:6f:0e:f6:
b5:fe:a2:3a:b2:3c:16:71:84:c5:e6:e6:41:74:5c:
4f:b3:f1:1b:99:7a:81:01:92:24:3d:04:10:c0:73:
20:a3:c6:35:47:ae:32:1b:2d:ab:c4:5d:4e:87:e6:
1f:60:e2:8d:65:ee:1e:9c:19:bf:1f:5c:37:7b:0e:
7d:6c:e3:33:00:a9:9a:da:5c:3d:67:8f:e2:a5:0d:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D0:06:AA:40:F1:AA:D4:D6:A9:35:51:A2:E0:04:63:28:0D:8F:51
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-tAGqkDxqtTWqTVRouAEYygNj1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:08:f4:16:4f:7b:4a:72:90:3c:a2:5e:bc:d1:a3:43:5a:dc:
13:63:c8:fb:87:44:8b:ca:f6:1b:b4:05:e9:4b:82:64:c2:21:
f4:59:ad:44:5d:c9:3b:6e:49:f0:95:42:32:6a:ae:e0:3e:8f:
07:f5:cd:79:5f:a2:89:10:03:19:83:22:ff:d0:ee:f5:16:9d:
54:2a:34:30:df:84:60:5a:ef:20:72:b1:d7:f2:6e:88:bd:d5:
ef:5d:f4:d4:e4:9d:79:35:e3:80:88:d3:17:b5:42:4d:57:89:
61:f7:6b:ee:b4:68:7a:a3:f5:d3:48:dd:a4:c6:ba:59:59:8d:
d2:d3:4c:b7:fb:10:45:1b:e7:ae:a0:3a:0b:0c:39:8a:86:9e:
25:84:4e:6e:97:78:57:e1:d9:ff:21:54:3d:fa:c5:29:08:c3:
b9:a9:57:83:68:f2:4a:a1:32:da:80:8d:b4:19:05:ae:95:52:
2e:a1:5a:99:7d:cf:d9:39:10:78:69:af:fe:4c:7e:15:75:51:
de:fe:7d:87:03:f6:4c:e3:bf:5b:4f:ad:c8:bf:5c:ba:fa:dd:
46:e8:91:ae:c5:54:e9:c0:7d:06:a8:6f:61:06:44:35:cf:69:
f5:da:94:59:62:57:44:9e:db:9b:e8:e8:d5:98:c7:70:5f:ca:
be:33:b0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:12:50 2025 by rpki-client