Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3Ju6pBQWeUBS3dSKsE0XzoIsUqo.roa
File: 3Ju6pBQWeUBS3dSKsE0XzoIsUqo.roa (raw, json)
Hash identifier: PDk+99LkxU9a1p/jymJOoi3yF5rVwx4Nz125xoCaxCY=
Subject key identifier: DC:9B:BA:A4:14:16:79:40:52:DD:D4:8A:B0:4D:17:CE:82:2C:52:AA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF8738284A9AC5932285E95F7E66FDCA0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3Ju6pBQWeUBS3dSKsE0XzoIsUqo.roa
Signing time: Wed 22 Nov 2023 19:13:21 +0000
ROA not before: Wed 22 Nov 2023 19:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f8:73:82:84:a9:ac:59:32:28:5e:95:f7:e6:6f:dc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 19:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc9bbaa41416794052ddd48ab04d17ce822c52aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:0c:bb:58:1d:8d:84:9b:e8:d8:40:ca:1d:
c0:a6:b9:2d:83:e1:ef:24:94:51:8c:df:aa:d3:30:
5f:76:0e:49:ee:a8:01:de:78:fa:67:47:2a:82:0c:
da:13:1a:86:f4:b3:49:5c:2c:64:69:89:1b:e9:3f:
9f:52:6f:f6:8d:47:36:1b:5b:b0:a4:81:f1:31:8b:
c9:d6:26:a6:8f:44:69:bd:3b:c9:78:c8:65:ca:15:
fa:d5:f8:5a:68:de:06:67:b4:62:d5:d1:ff:72:a4:
6c:b4:8b:0b:92:29:db:17:4b:48:76:eb:71:95:a5:
a2:3c:02:91:82:87:31:32:7e:11:ac:35:a4:5f:ca:
eb:3d:f8:26:d8:95:0f:d1:94:3f:97:c6:89:4d:24:
d6:6b:82:bb:60:a5:7d:86:57:d6:25:bf:62:16:31:
49:77:13:f2:32:a2:f9:76:11:1f:0e:57:0f:64:cb:
1b:4a:01:89:0d:76:4a:56:35:00:ec:79:8d:be:31:
2c:db:60:6b:93:bb:9c:d9:bb:88:94:81:c5:c9:fe:
03:65:d9:f8:89:e0:65:5b:b9:a1:17:ce:eb:64:ea:
97:41:94:9d:67:ff:b0:5c:1a:d2:af:76:55:57:68:
61:09:2e:b6:5d:b4:e6:8f:00:25:69:60:c5:51:8a:
ec:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9B:BA:A4:14:16:79:40:52:DD:D4:8A:B0:4D:17:CE:82:2C:52:AA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3Ju6pBQWeUBS3dSKsE0XzoIsUqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:be:6e:4f:fb:46:25:59:c9:27:0b:c2:ba:cc:6e:e2:a3:d2:
10:79:cf:66:52:06:8b:6c:65:30:b0:b9:00:0d:43:33:25:5d:
b8:71:78:c5:6c:bb:e1:6d:ae:9c:77:0b:97:44:c2:17:56:3f:
74:b4:0c:a8:d9:fb:85:f1:2b:3c:b0:5a:8d:cd:a3:0d:9a:60:
5d:73:7d:ab:8a:a2:49:0e:6d:d4:69:60:97:87:4a:57:02:c0:
27:21:35:8d:1f:7b:17:24:3d:a5:20:04:4d:b7:fa:0a:e3:16:
6f:a0:83:d9:5b:75:b8:78:1b:8a:42:52:44:20:5c:0e:34:66:
62:18:d1:02:67:94:13:4b:ee:41:10:f9:77:a7:e8:46:00:ff:
23:e8:5c:04:12:f2:f7:50:da:c3:17:77:00:59:bf:90:ac:12:
f6:26:c4:c3:82:f7:46:26:60:99:57:f3:6b:be:f5:0e:12:28:
d8:9a:20:5b:9b:8e:91:7b:a5:60:79:2b:2d:de:7e:ee:36:4e:
e5:c4:3b:a9:ff:11:7c:03:84:db:2c:0b:e2:c7:7c:7d:ff:92:
71:7c:c7:6b:06:32:03:ab:5d:7f:22:e5:45:a9:8e:78:4b:dd:
a0:01:ed:c2:d8:a6:79:98:e3:30:de:e1:94:6e:0f:15:16:0b:
c8:63:7e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:55:48 2025 by rpki-client