Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3DY5Ds_UyNU1MbiMuGljToRL1sk.roa
File: 3DY5Ds_UyNU1MbiMuGljToRL1sk.roa (raw, json)
Hash identifier: bkpgA6Xuoaq29tX2KFOi9ux35shy/gd/XuhXvrUovBY=
Subject key identifier: DC:36:39:0E:CF:D4:C8:D5:35:31:B8:8C:B8:69:63:4E:84:4B:D6:C9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1236336EFACB891674008257E5CE3402
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3DY5Ds_UyNU1MbiMuGljToRL1sk.roa
Signing time: Mon 09 Oct 2023 02:13:43 +0000
ROA not before: Mon 09 Oct 2023 02:13:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:12:36:33:6e:fa:cb:89:16:74:00:82:57:e5:ce:34:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 9 02:13:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc36390ecfd4c8d53531b88cb869634e844bd6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:72:d1:01:21:6c:ee:02:97:29:61:3a:a6:78:
27:16:b5:0b:6d:05:7b:f3:78:55:a8:4d:bc:40:57:
9f:7a:7f:34:f0:fe:e0:3c:24:fb:23:74:49:ce:04:
85:ec:8e:48:46:23:47:24:c1:be:a9:83:72:33:ea:
9c:fb:3d:f5:39:53:37:71:d0:b1:2e:4a:0f:ba:1d:
45:1a:1b:ff:a3:2c:67:5e:7e:e4:51:0e:55:fb:68:
2e:66:d3:63:44:4a:6b:89:d9:73:da:bb:f4:f1:69:
41:ce:da:73:6f:1c:23:5e:2b:05:00:9f:d6:17:f8:
9c:cb:3d:d4:ec:f0:6f:49:2b:4c:d6:5f:74:d4:b9:
05:10:ba:57:48:c5:ef:da:05:b8:f2:07:eb:1a:d7:
6d:6f:ab:7a:62:51:c1:15:fb:04:cb:b1:30:09:be:
51:63:53:3c:c4:a0:d8:2d:d9:3c:e0:a1:24:b6:07:
c0:05:85:b1:ae:26:04:d4:64:4e:fe:42:a5:24:b0:
16:a2:c1:56:ae:ef:bb:3f:09:ae:71:85:f7:94:bd:
b4:36:73:31:8b:1a:4c:2c:fe:b0:0b:7b:e7:07:d9:
d5:48:6e:cc:5d:c4:ef:0f:c8:f4:aa:a9:a6:14:17:
68:2b:52:c0:7a:67:46:1e:87:2a:6b:80:31:8f:bc:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:36:39:0E:CF:D4:C8:D5:35:31:B8:8C:B8:69:63:4E:84:4B:D6:C9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3DY5Ds_UyNU1MbiMuGljToRL1sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:ed:fa:86:34:85:08:93:e1:25:07:85:a9:6a:cd:c1:39:9a:
91:6e:86:d9:9b:48:38:81:10:e0:01:90:92:56:f9:d2:18:17:
28:71:3a:66:bb:b5:6b:6e:b3:54:95:60:c6:fa:d9:35:27:37:
06:9c:b7:e0:65:31:40:f3:59:11:38:1d:07:ea:9b:d3:a3:f2:
94:ac:80:16:1a:5f:5d:50:dc:00:a0:f2:2d:df:9f:0d:49:20:
e9:08:26:eb:14:a3:dd:19:87:02:05:ab:1f:e4:17:da:47:98:
3f:34:f1:90:fd:10:59:33:09:8b:06:c6:2b:b9:a0:00:76:08:
35:e6:f3:53:fe:60:89:dd:29:d3:1f:c5:46:94:d9:3c:b8:dd:
12:6b:61:1c:5a:4e:b0:9d:63:98:08:8f:92:1d:d4:71:1a:96:
2a:0f:a1:44:e1:31:83:8b:fe:90:2a:ea:ad:4c:8b:83:7e:85:
10:cc:25:16:0c:d4:41:3e:db:fa:d5:16:9f:ff:0d:f4:98:d0:
dc:a7:8b:3e:5c:79:dd:ab:67:ea:d9:04:d7:d2:7b:d1:13:8a:
e9:61:27:9e:28:71:18:c4:a7:b1:bd:2a:4c:3e:4b:6e:6d:d7:
a7:e2:75:1b:e7:24:e3:bb:50:b7:8f:43:c3:16:37:b5:ca:c5:
c2:01:52:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:19:07 2025 by rpki-client