Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3Lpz0ZB5d2-cJjw15O9YrjISpAI.roa
File: 3Lpz0ZB5d2-cJjw15O9YrjISpAI.roa (raw, json)
Hash identifier: fcoCt3wPG+HAyysk2JV7HpxujhkYpJZY4Piscpq9x1s=
Subject key identifier: DC:BA:73:D1:90:79:77:6F:9C:26:3C:35:E4:EF:58:AE:32:12:A4:02
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6982B6827C7574E60EC2191F41D8DD16
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3Lpz0ZB5d2-cJjw15O9YrjISpAI.roa
Signing time: Thu 26 Oct 2023 01:04:15 +0000
ROA not before: Thu 26 Oct 2023 01:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:6982:963b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:69:82:b6:82:7c:75:74:e6:0e:c2:19:1f:41:d8:dd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 01:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcba73d19079776f9c263c35e4ef58ae3212a402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a1:1e:af:9c:97:44:ac:26:8c:0d:d7:8b:fb:
24:84:cf:05:e9:7a:09:b5:9b:6d:f6:73:2b:6d:58:
64:46:7f:e3:63:d5:86:ae:ae:0a:0f:b3:51:ee:f9:
93:ae:0e:94:f8:fd:f1:37:30:33:3d:f3:8f:40:9d:
d3:0e:43:f5:62:34:6a:8c:12:71:52:61:2b:64:de:
8a:a0:e8:61:e0:08:99:af:87:4a:f3:53:29:ae:a4:
6e:c4:29:6e:c4:75:a9:07:1f:c4:9a:d4:76:b3:aa:
46:bf:ed:7c:ef:84:ae:4a:18:79:aa:2f:87:4e:72:
bf:f7:36:ae:eb:f5:d3:06:43:1b:01:b3:21:fd:be:
d5:1c:e3:17:e2:1e:a3:7e:b7:11:89:5f:e6:28:4f:
6a:53:2a:dd:c0:35:00:5d:b1:60:92:0d:ae:31:69:
8c:b8:07:b7:a2:c0:02:f7:45:1d:0d:78:fd:01:69:
67:0d:34:bf:65:bb:21:57:ee:f0:99:5e:da:cd:1c:
93:58:dd:07:12:c6:8f:3b:a8:97:0c:83:aa:2d:f9:
29:ec:87:87:75:5c:32:3f:13:fd:31:78:27:d8:05:
0f:c5:ad:06:40:89:b8:59:e1:ff:4c:1f:c5:0d:e9:
1b:d4:c2:50:e0:77:b2:28:a3:a3:c3:2f:d0:93:af:
c2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BA:73:D1:90:79:77:6F:9C:26:3C:35:E4:EF:58:AE:32:12:A4:02
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3Lpz0ZB5d2-cJjw15O9YrjISpAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:27:cb:19:13:10:f7:d0:5d:f9:b1:eb:dc:cd:62:3d:c0:b3:
81:51:c0:30:ad:7d:58:58:ea:27:ce:f8:26:98:86:d7:b1:03:
f4:34:6e:d2:4f:ae:b8:ed:31:15:53:26:95:67:27:a8:76:f8:
81:8f:2c:17:f7:bd:67:20:80:ad:c4:4f:10:90:ce:4b:1e:ac:
4a:37:75:9a:10:fb:38:6e:40:37:f4:e5:cc:4c:2c:55:73:c8:
85:67:86:a9:07:07:5e:e3:79:92:a7:bb:61:0a:63:a6:fa:57:
73:dc:dd:cc:a9:99:09:e9:c4:74:b6:0e:75:4b:a3:4a:99:ac:
07:5a:ec:f6:c7:89:1f:fb:3e:24:7c:8e:99:f9:29:a4:9a:ef:
19:2c:c6:bb:8d:1b:2c:35:48:c7:c4:17:bd:d5:69:66:7c:a3:
12:3d:f8:22:12:7f:e7:6a:d4:28:79:c4:6e:ac:bd:fe:ea:b2:
7b:38:ed:e2:51:c9:b0:1c:74:61:72:77:44:5b:dd:af:73:45:
32:b7:b1:03:fa:3d:1a:b1:d7:2d:2d:42:9d:08:dd:1c:92:09:
62:ed:08:b5:19:e7:4a:53:0f:3a:d2:38:e8:05:ea:33:71:0c:
a6:f3:de:58:1a:ba:57:91:15:b0:d7:af:d7:1c:12:86:f5:e3:
91:2a:8d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:42 2025 by rpki-client