Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4O_g7O9k1KXZ217fTPrpHaKd1GQ.roa
File: 4O_g7O9k1KXZ217fTPrpHaKd1GQ.roa (raw, json)
Hash identifier: 2kLobhiCwK1f6tfJ0no84UA+bf5CR6iE6QX3123tz6A=
Subject key identifier: E0:EF:E0:EC:EF:64:D4:A5:D9:DB:5E:DF:4C:FA:E9:1D:A2:9D:D4:64
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B875636563AA9368E6110FAA09B516A47
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4O_g7O9k1KXZ217fTPrpHaKd1GQ.roa
Signing time: Tue 31 Oct 2023 20:04:15 +0000
ROA not before: Tue 31 Oct 2023 20:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:8756:1f7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:87:56:36:56:3a:a9:36:8e:61:10:fa:a0:9b:51:6a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 20:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0efe0ecef64d4a5d9db5edf4cfae91da29dd464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:36:c3:78:c3:a5:db:1e:88:29:2f:71:1e:
e1:06:91:92:00:7f:6a:b5:cb:53:df:41:a2:69:b8:
95:83:31:db:6b:b4:e4:6b:1d:87:bd:ca:8f:fd:8c:
e9:ca:04:cf:25:f3:61:61:f2:b4:7e:35:dd:3f:2c:
74:54:bb:59:ce:67:2e:a9:bb:dd:ee:23:5f:e8:a8:
70:d8:7d:13:e3:1e:eb:11:1f:e0:71:e8:45:0f:c9:
a3:51:92:64:fc:2d:a1:58:42:68:b8:60:64:1d:62:
27:25:86:59:52:39:fd:22:4a:a9:a6:1f:4a:4d:11:
c5:72:30:1c:21:64:a9:46:90:7a:31:bb:4e:ef:04:
a5:21:9a:be:5b:f0:43:ef:4f:70:33:f3:5c:42:de:
e1:08:b9:b1:28:a3:4f:c9:b0:16:84:9f:56:e8:0b:
4b:cd:c1:34:43:45:28:44:0f:b2:f4:a5:f5:b8:11:
d3:26:99:59:c1:5f:1f:cc:00:96:a0:5f:5b:61:a2:
dd:f8:be:ef:5f:1f:17:44:c4:e5:48:bc:6b:a0:1c:
66:34:ca:05:0b:af:a7:a0:1b:90:96:d5:99:bf:8c:
9e:13:6f:aa:47:cb:6c:9f:da:a9:25:e2:34:32:09:
14:3f:d0:17:6a:8a:4f:59:17:c7:9a:a7:5c:a9:8c:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EF:E0:EC:EF:64:D4:A5:D9:DB:5E:DF:4C:FA:E9:1D:A2:9D:D4:64
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4O_g7O9k1KXZ217fTPrpHaKd1GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:8e:28:67:22:f8:91:ca:47:bd:41:7e:c5:30:08:a6:0c:28:
eb:7f:f8:12:24:87:c1:39:12:fa:03:3f:97:ee:94:ee:eb:6c:
77:89:5b:da:e2:a7:84:a2:23:95:ab:57:69:3b:ee:e4:f8:dd:
2e:77:6f:c7:22:d2:a1:ba:bc:d1:99:70:48:0e:2b:c1:ff:cd:
68:c3:12:36:d8:62:22:db:e4:2c:ba:f8:9a:be:30:fb:91:95:
ba:fe:cd:25:77:76:90:c6:df:f3:7e:be:10:ad:25:52:0a:78:
1d:c3:b6:6c:77:e5:70:cc:2f:b4:a5:ef:6e:5e:d5:96:29:bc:
e4:ab:9e:4f:65:d7:44:f6:4f:54:57:ac:6c:6d:c2:0a:a0:b9:
df:20:59:4b:88:a5:b1:65:62:f0:ae:76:5d:8b:57:fa:ca:99:
cb:c7:12:53:6c:84:dd:2e:99:e1:d5:03:dd:10:a3:9c:9c:64:
20:33:7c:4d:1e:29:13:1f:d9:b6:d5:15:cd:34:10:be:df:ca:
97:6d:06:89:bb:33:8b:ef:67:85:d3:ba:48:2a:21:76:2f:e2:
c6:ec:9d:ea:6e:aa:71:5c:54:40:cc:9f:2a:74:46:f1:79:36:
7e:63:f0:d5:7e:98:7a:1f:89:8e:11:3e:66:36:24:05:65:ee:
ba:e7:f4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:23:38 2025 by rpki-client