Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4A34AosOuZvCeINHQchEReXAc48.roa
File: 4A34AosOuZvCeINHQchEReXAc48.roa (raw, json)
Hash identifier: X/x4LBtbFGUxFspSF8iSy/WNI0e8y9E1loSSZWnCcXU=
Subject key identifier: E0:0D:F8:02:8B:0E:B9:9B:C2:78:83:47:41:C8:44:45:E5:C0:73:8F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF195B3275F61D92C265F46388A1FFD49
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4A34AosOuZvCeINHQchEReXAc48.roa
Signing time: Tue 21 Nov 2023 11:13:21 +0000
ROA not before: Tue 21 Nov 2023 11:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:95:b3:27:5f:61:d9:2c:26:5f:46:38:8a:1f:fd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 11:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e00df8028b0eb99bc278834741c84445e5c0738f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9b:21:9b:19:a8:0b:29:aa:5d:8f:6f:68:48:
35:78:da:d0:1c:fe:b8:a2:f7:4c:de:e3:f7:04:99:
08:6b:a4:bf:9d:cd:63:1b:c2:bc:99:c2:0b:7c:aa:
cb:13:78:fd:c2:db:b6:3c:dc:fe:16:45:48:e0:dd:
c1:dd:eb:3c:4f:3a:74:d5:26:8d:d2:7b:b8:6d:a6:
e8:b4:44:d0:e6:c8:b6:00:b9:60:c3:5f:f0:11:e4:
57:4d:19:a0:7e:1e:c7:55:94:a4:ef:10:de:a6:c7:
f2:d1:21:1e:08:3d:29:f8:27:dd:55:7d:f8:d1:ef:
e9:a1:de:5a:ce:43:ea:02:ef:b7:0d:79:34:20:a1:
d7:78:b9:d1:dd:1e:42:69:05:09:75:97:bd:21:3f:
eb:72:84:b8:cf:13:1c:9e:1d:69:2c:13:7f:04:9f:
b4:2a:88:b8:e7:b3:00:2e:f4:24:77:0a:a4:06:6e:
2e:d8:fd:84:93:89:20:29:d1:83:21:4f:49:f5:51:
ea:bc:08:01:09:ee:1c:e5:0f:f3:41:df:43:b3:b1:
09:f1:8c:0e:79:49:14:9b:29:32:ba:20:7d:b4:81:
cb:87:95:8e:d2:ba:2f:da:33:59:30:a5:55:7b:fe:
83:a4:ce:6c:ab:10:16:e5:c2:bf:11:94:36:54:c0:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0D:F8:02:8B:0E:B9:9B:C2:78:83:47:41:C8:44:45:E5:C0:73:8F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4A34AosOuZvCeINHQchEReXAc48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:af:3d:68:21:44:ea:04:61:b1:c2:d0:d5:c7:8b:bf:3f:25:
b6:f1:7b:a7:11:11:f8:d5:dd:21:c0:89:0c:68:d5:31:77:4e:
9a:a6:d3:5b:d4:bb:d0:fa:d0:78:5f:be:4f:75:32:fb:63:96:
21:e7:00:a8:fd:2f:65:b7:d3:18:81:fd:9e:36:64:7e:db:3c:
3e:e6:cc:76:ed:6d:fc:f0:c9:49:81:4e:17:1a:8b:c4:10:25:
a2:c6:ba:30:24:9a:6b:ba:31:e9:5a:0d:27:a2:db:cb:2f:14:
54:fa:63:ba:15:db:b4:22:39:cc:d6:e3:3a:10:e1:3c:6a:04:
98:21:62:c7:f3:84:6a:c5:77:bf:96:4f:94:8a:3c:aa:f3:06:
5b:d3:d4:67:54:58:6f:41:eb:17:7a:41:aa:07:8a:a2:c2:fb:
44:11:af:6c:ca:bd:f8:62:48:ce:0a:8d:e6:45:c5:ed:5f:d3:
2c:0e:e0:5a:e2:b6:22:e7:74:96:ac:a4:6d:a4:24:b0:12:77:
fb:1c:dd:e3:e4:0f:b4:af:14:33:91:f8:92:44:ce:d9:fb:cd:
df:c3:97:92:df:57:29:13:c2:23:c7:e0:83:1f:40:e0:1d:8d:
0c:c9:f4:6d:92:7f:67:b4:0b:72:83:bb:e7:fa:29:9f:88:b4:
fa:4e:8c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:45:00 2025 by rpki-client