Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1LePeaPgKWeVdgsnGXZJ8iwuoEQ.roa
File: 1LePeaPgKWeVdgsnGXZJ8iwuoEQ.roa (raw, json)
Hash identifier: OJCnrLD8jivkP9oNgqbZDNx6jhk8i8D98rm8AXga77Q=
Subject key identifier: D4:B7:8F:79:A3:E0:29:67:95:76:0B:27:19:76:49:F2:2C:2E:A0:44
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB0575DB211A8E30F6CB995724D896976
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1LePeaPgKWeVdgsnGXZJ8iwuoEQ.roa
Signing time: Wed 08 Nov 2023 19:09:57 +0000
ROA not before: Wed 08 Nov 2023 19:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b0:57:5d:b2:11:a8:e3:0f:6c:b9:95:72:4d:89:69:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 19:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4b78f79a3e0296795760b27197649f22c2ea044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8c:06:b4:aa:c2:b4:06:75:97:07:ae:fa:bb:
49:19:fe:8f:79:4d:3a:f0:e0:c3:6a:ed:b7:98:97:
02:a3:81:8b:13:8a:98:17:b4:6a:bf:f5:bd:91:9e:
a6:55:5c:1a:89:06:e7:64:9a:e9:e6:66:7c:cb:91:
50:89:d2:3a:5b:c8:81:fd:62:55:0d:04:ff:3a:24:
83:ab:43:38:26:01:b2:ae:a6:95:40:6f:b3:1d:82:
ee:4d:ea:ad:54:fd:d0:39:00:19:56:49:4b:ac:2b:
c6:9c:2b:62:6d:ea:2f:de:5b:b9:44:5b:7e:37:bc:
95:61:27:6a:0b:35:dd:20:d3:21:c4:16:1c:94:5d:
a4:6b:a1:c2:61:55:d9:d9:34:17:89:d9:67:03:15:
e8:e4:03:5b:82:7f:0c:c5:f0:09:8e:62:d3:b6:49:
04:bb:5f:49:50:48:f8:03:33:1c:fe:60:80:f5:1a:
f6:0c:31:c8:13:ba:08:1d:ff:36:e9:3a:09:c8:a7:
1a:74:6a:45:9e:15:da:ba:c4:8a:cc:3f:4c:e4:f3:
b1:1c:a2:45:48:75:22:ca:e7:c8:fe:b2:0e:bb:3d:
94:9a:62:fc:c9:df:74:14:43:c9:cc:96:02:39:c9:
8d:dc:10:34:e2:36:d1:35:28:24:45:7a:58:bc:ff:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B7:8F:79:A3:E0:29:67:95:76:0B:27:19:76:49:F2:2C:2E:A0:44
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1LePeaPgKWeVdgsnGXZJ8iwuoEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:4d:0f:6f:90:8c:1b:75:3a:76:ee:7a:23:8b:e0:3b:46:80:
ea:b6:e8:ae:52:69:7a:e9:d7:0a:14:98:13:8e:9a:d1:ad:54:
53:ed:4a:43:e6:8e:c3:8c:bf:ba:01:ca:33:e9:84:4d:6b:01:
8f:c5:76:7a:0b:fd:59:3e:81:94:7d:35:a3:0d:14:66:c6:63:
ac:88:9a:d1:cc:57:2e:94:31:3a:17:43:78:d9:c7:38:10:73:
01:b2:71:02:44:fe:a7:40:91:6d:01:3d:f3:cc:70:47:fa:b3:
06:21:c5:04:e4:80:a3:42:46:85:5d:94:4c:77:91:40:8c:fd:
b5:de:9b:8d:e0:4e:cb:d8:6d:29:70:7f:66:cf:64:b4:b0:51:
27:f9:38:72:88:fd:bb:63:ee:a2:83:88:45:fc:2f:c9:88:54:
15:c1:f6:f7:db:39:1b:9a:49:7f:27:8c:3e:61:c3:8d:aa:98:
d0:49:0b:b1:6c:a4:f5:ff:01:fa:c8:ae:b0:90:df:2f:e8:b4:
4a:ec:9e:cd:cf:a1:18:aa:f4:86:61:ad:dd:8e:87:06:41:2d:
5c:f6:67:75:92:5a:53:87:b0:47:6b:53:9c:1e:f5:d2:c7:25:
58:1a:df:80:37:61:07:b8:24:d9:3e:0e:6e:00:ec:65:dd:58:
42:7b:86:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:09 2025 by rpki-client