Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/16wGj8dGseIln4las1hITNkx-Js.roa
File: 16wGj8dGseIln4las1hITNkx-Js.roa (raw, json)
Hash identifier: bL+ggW3RMGwUbGn6xZqRVC92593Hn1KpH3vBCP3zLNo=
Subject key identifier: D7:AC:06:8F:C7:46:B1:E2:25:9F:89:5A:B3:58:48:4C:D9:31:F8:9B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3E698C1FC9E8476DC15FB8695487A814
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/16wGj8dGseIln4las1hITNkx-Js.roa
Signing time: Tue 17 Oct 2023 16:13:06 +0000
ROA not before: Tue 17 Oct 2023 16:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:69:8c:1f:c9:e8:47:6d:c1:5f:b8:69:54:87:a8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 16:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7ac068fc746b1e2259f895ab358484cd931f89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:51:c5:be:93:11:cd:d3:4b:22:ef:f0:52:
44:9c:28:da:1a:53:2b:26:d2:d8:14:d8:bd:81:ef:
d0:11:6c:ed:29:a6:0c:51:6b:c4:09:46:ba:52:1f:
96:58:c9:5b:8d:31:c4:52:49:5a:2a:26:6f:bb:eb:
a0:89:72:c1:5d:f6:b8:a7:8b:05:a9:89:1b:ac:04:
6a:06:95:e4:66:e5:51:2a:ce:49:44:43:28:ff:7f:
95:ab:08:d9:f5:49:6d:83:16:f9:8b:17:99:81:d5:
de:81:92:23:eb:3b:48:ed:bd:34:b4:76:30:ce:c9:
c2:b9:a1:1c:6a:76:3d:54:d3:38:da:97:7b:82:5f:
86:f7:60:f0:5c:d0:06:ad:01:a5:3e:50:5c:da:8d:
4e:dd:57:cd:68:7b:ce:cb:2d:93:74:be:9e:d4:0f:
31:86:64:6a:d7:46:08:f7:da:84:09:7f:d4:e6:9e:
60:de:95:56:e7:1d:7b:a2:cb:dc:75:c6:2b:ee:89:
84:68:4c:69:ae:14:da:49:df:69:78:84:24:72:93:
b6:64:34:f3:65:0d:8c:58:42:86:84:eb:7e:d7:ef:
0a:6d:3e:cb:64:8a:1e:95:31:3e:bf:f8:1e:00:2a:
a3:a4:49:29:89:cb:77:4a:08:cb:f0:b9:0a:02:c7:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AC:06:8F:C7:46:B1:E2:25:9F:89:5A:B3:58:48:4C:D9:31:F8:9B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/16wGj8dGseIln4las1hITNkx-Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:30:b0:6b:8e:fa:bb:aa:56:aa:7a:30:f5:e3:b1:47:6e:d4:
5c:bd:56:ab:cd:5e:71:c6:81:16:69:13:f4:51:68:cf:a3:17:
83:c9:1d:ef:81:64:e7:df:79:25:ff:df:b4:8c:93:05:b7:c7:
7e:b8:aa:8d:d2:18:9c:ca:26:26:49:0d:66:34:21:91:55:28:
3e:a6:8a:72:1e:87:59:f7:c1:e0:ee:c6:32:07:ac:27:68:83:
04:35:08:81:1a:fe:04:f8:68:c6:f3:a3:fe:c6:f2:b9:5d:fd:
5f:61:a7:f7:d9:7b:d4:0d:f9:5b:a1:6d:26:2a:76:8b:86:1a:
b7:e4:f2:49:6a:57:b1:46:5e:b6:53:65:ed:41:3c:38:4d:49:
0a:9a:3a:88:0b:1f:23:86:ec:62:f3:36:f5:f0:a8:22:79:ad:
63:57:63:5d:ae:41:0d:d3:8e:e5:3b:6b:33:69:06:29:75:df:
3c:44:48:d4:10:b9:57:a0:7a:71:82:0b:cd:3c:83:0d:5f:3a:
f9:0f:3d:f2:7b:eb:b2:27:a1:da:ba:91:22:d4:5c:09:5c:c5:
25:e9:33:48:a4:95:43:10:19:17:45:15:e4:b8:0c:95:2b:c8:
ca:40:a8:27:c2:95:e9:c8:3a:9e:f4:81:40:e3:fd:62:d6:98:
de:f8:85:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:17 2025 by rpki-client