Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2ABDQbRbXyco2N8K-rQYvKiJn1M.roa
File: 2ABDQbRbXyco2N8K-rQYvKiJn1M.roa (raw, json)
Hash identifier: OhUfvf2lS+bQnfWGk8Mxx4FogrMvJ5rFmbef5krLZus=
Subject key identifier: D8:00:43:41:B4:5B:5F:27:28:D8:DF:0A:FA:B4:18:BC:A8:89:9F:53
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C070BC6F6C068163A8F99F19C18A9F9E6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2ABDQbRbXyco2N8K-rQYvKiJn1M.roa
Signing time: Sat 25 Nov 2023 15:14:21 +0000
ROA not before: Sat 25 Nov 2023 15:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:07:0b:c6:f6:c0:68:16:3a:8f:99:f1:9c:18:a9:f9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 15:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8004341b45b5f2728d8df0afab418bca8899f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:d1:16:d6:71:3f:47:7d:db:93:70:3f:f3:
46:18:2f:5e:9c:14:d3:d7:94:5f:01:f6:b0:0f:8a:
d1:e2:95:97:68:31:42:70:60:d6:a7:e6:a3:82:9b:
a6:e9:d7:ca:e0:e2:85:67:87:de:c5:ff:29:20:e9:
ac:7f:0e:4a:fd:20:95:34:11:4a:4b:b7:88:4e:08:
d0:ee:63:59:16:5d:91:8f:23:b3:72:44:5e:ef:57:
83:0b:f7:5c:de:54:df:e7:aa:1b:9c:2c:b9:6d:5f:
99:a4:08:a3:65:be:1e:8a:72:63:ee:72:4d:9d:25:
35:c9:ec:0b:87:78:c9:d8:06:44:04:79:d9:dc:fd:
85:af:6b:aa:0e:9d:59:c6:ce:e7:81:bb:71:4d:0f:
3f:f0:99:7b:bf:ff:9a:0f:9b:3b:cc:e8:47:5f:fe:
c7:c4:35:a6:c5:43:97:f2:61:ce:a0:d1:fb:4f:ba:
8c:9a:a2:c7:5e:53:73:95:96:45:ee:75:bc:d0:d7:
8a:00:8f:21:61:b7:2a:b3:53:9e:16:f0:0f:46:a4:
19:03:bb:1f:94:01:b0:92:e1:82:a7:a5:9f:43:5e:
37:0b:52:96:12:96:fd:6a:42:76:9d:db:67:77:6d:
75:dc:b9:a0:3f:e1:80:12:9b:63:97:0f:88:cf:74:
e2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:00:43:41:B4:5B:5F:27:28:D8:DF:0A:FA:B4:18:BC:A8:89:9F:53
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2ABDQbRbXyco2N8K-rQYvKiJn1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:18:99:da:08:ef:49:be:36:f0:1d:0e:14:10:e9:0a:6d:75:
73:47:d0:91:b9:ca:9c:56:2e:91:7c:0d:05:92:40:b4:42:e7:
09:cd:a5:69:53:c5:60:d7:ea:d7:5e:f5:e0:55:6b:c4:1f:59:
02:d8:7f:9f:bb:85:f9:a6:56:40:eb:0a:59:4a:88:be:78:ea:
d5:f1:50:90:67:ad:21:fd:43:91:cc:ac:ff:7d:cc:26:70:ca:
92:9c:da:bf:fb:a4:35:d7:f0:8b:ee:af:c2:ea:e0:7c:0e:3a:
48:40:f8:18:ab:35:84:0c:7c:90:66:b5:43:06:93:4c:21:34:
30:41:a4:16:e4:5f:22:53:18:0a:a7:05:3f:b3:1a:ca:d9:75:
d7:dd:73:90:c4:5d:e1:fe:ac:1c:1d:33:89:8e:76:b5:48:80:
ca:8e:e4:cf:d7:d8:47:b2:2c:73:b0:5b:fa:da:b5:49:3c:b9:
ea:5e:43:c2:8a:e1:b9:15:3a:31:dc:1a:36:12:70:ec:70:f8:
41:26:81:62:9c:17:94:3c:7a:ea:85:53:1c:88:0c:86:23:d5:
85:64:cb:58:10:48:1d:e3:6f:b9:fd:ca:d3:71:b7:a3:a4:39:
50:6c:7d:24:52:bf:fc:74:1f:8b:aa:6a:da:34:3b:69:bb:6f:
f1:6d:6b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:04:04 2025 by rpki-client