Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/16A3r1N2690vZdvNZrx7ICD4ptM.roa
File: 16A3r1N2690vZdvNZrx7ICD4ptM.roa (raw, json)
Hash identifier: sxVwSJv4j8iTjQMO5W+wXz9WTg+QYxbQWeGCGZNp8m0=
Subject key identifier: D7:A0:37:AF:53:76:EB:DD:2F:65:DB:CD:66:BC:7B:20:20:F8:A6:D3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6763D9CC92E4BCB09FC645E154E8791D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/16A3r1N2690vZdvNZrx7ICD4ptM.roa
Signing time: Thu 14 Dec 2023 08:14:06 +0000
ROA not before: Thu 14 Dec 2023 08:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:63:d9:cc:92:e4:bc:b0:9f:c6:45:e1:54:e8:79:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 08:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7a037af5376ebdd2f65dbcd66bc7b2020f8a6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f1:85:fc:5f:04:ec:a0:9c:dc:63:78:0f:63:
9e:09:6d:49:b9:8a:c6:8c:47:67:65:01:8b:fe:01:
b5:d3:fd:7b:04:96:6b:13:41:ab:b6:a7:e0:34:00:
e2:05:91:6d:32:97:22:16:3b:3b:e0:cd:93:7b:96:
eb:11:c1:03:76:c9:eb:8a:95:2f:31:40:ad:fe:5d:
0f:cb:41:c1:80:45:1c:12:d8:cb:5f:a1:0f:cc:53:
3b:13:6b:c3:b1:7a:f0:42:ac:eb:ee:45:4c:55:e6:
4a:02:1a:3d:5c:9e:01:d2:eb:65:5d:06:8d:7c:86:
a8:ea:94:30:6f:d2:81:23:93:06:e1:a4:8e:b4:e5:
40:66:f0:7b:22:32:0c:99:25:a2:70:e1:b0:b5:98:
c8:23:c6:3e:56:cb:ca:d2:39:21:58:db:b3:b4:10:
0d:4b:f8:ee:6d:b1:db:bc:3c:37:85:cc:8d:4b:3b:
cc:6c:97:92:24:a8:7f:52:70:01:a9:a1:9a:50:31:
37:f0:c5:87:8f:bb:25:99:c0:b3:72:f9:25:b6:53:
10:6f:6e:3d:8a:b8:56:b7:7e:c5:ac:7d:47:40:3e:
eb:5e:b1:b8:67:8d:73:13:6d:7c:48:b6:12:86:23:
1a:74:e1:ea:2d:72:4c:be:5a:20:1d:3d:a8:62:09:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A0:37:AF:53:76:EB:DD:2F:65:DB:CD:66:BC:7B:20:20:F8:A6:D3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/16A3r1N2690vZdvNZrx7ICD4ptM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:dc:17:df:c6:aa:15:d2:a9:99:c7:db:f0:6e:43:3b:9f:97:
d5:ca:41:fe:df:38:83:8e:b4:a3:c7:e4:6d:f5:7a:fd:6d:58:
d9:b3:f0:bc:ff:08:a6:5b:69:b9:c6:fc:96:20:38:5c:4d:a6:
0c:fc:e3:80:b5:72:df:5d:7d:ef:58:6a:36:23:97:c8:6a:e9:
1b:c6:f6:0f:87:a9:97:5c:ac:f2:16:6f:ef:e0:ee:b1:a1:d0:
5b:ed:27:f4:94:f3:0f:f5:79:3e:71:7d:b3:01:24:25:93:b1:
bb:db:2b:56:4b:cd:99:90:79:4a:5e:23:d0:cd:da:90:31:2b:
34:e9:92:e8:67:ac:d1:42:a5:fe:4b:13:de:a0:f2:ac:9f:31:
e5:4f:26:86:db:be:ae:a3:24:af:db:12:1e:a9:69:11:2d:b9:
f3:53:46:06:6f:7e:1f:a8:3d:e0:5a:31:c2:a2:2f:29:08:2e:
70:ae:38:58:80:09:71:6f:eb:06:d7:b1:b5:1a:c8:b8:23:60:
ec:1a:fd:cf:e1:d8:e6:6f:a5:43:3a:fb:0f:9e:c8:fb:46:a3:
96:0e:01:c8:3d:0e:46:d5:1f:e9:ef:00:bf:86:61:a2:b3:2f:
37:97:97:67:82:82:32:84:df:63:48:36:2f:b5:08:b6:16:81:
bc:39:61:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:18:19 2025 by rpki-client