Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4Vdi2C0eB7F57FIIYCEGd8aroK8.roa
File: 4Vdi2C0eB7F57FIIYCEGd8aroK8.roa (raw, json)
Hash identifier: AFyeLO2E42gTuKo0poxAn/BnF9Dk2zodwtYhUS5hjl4=
Subject key identifier: E1:57:62:D8:2D:1E:07:B1:79:EC:52:08:60:21:06:77:C6:AB:A0:AF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF72298D6052EA61F98CF62394CB7277C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4Vdi2C0eB7F57FIIYCEGd8aroK8.roa
Signing time: Wed 22 Nov 2023 13:05:21 +0000
ROA not before: Wed 22 Nov 2023 13:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:f721:db00/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f7:22:98:d6:05:2e:a6:1f:98:cf:62:39:4c:b7:27:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 13:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e15762d82d1e07b179ec520860210677c6aba0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:67:d9:72:62:4f:63:4d:28:0d:5b:0b:85:18:
82:df:a5:33:f6:84:54:77:46:23:83:2b:8d:a7:34:
6d:cf:23:37:81:b6:a4:2d:a8:50:12:a6:9e:30:38:
d0:0b:d5:42:0e:e5:c7:40:01:9a:02:05:00:e6:be:
f7:89:30:a8:6a:b5:a4:ab:1c:6e:11:bd:91:dc:c6:
84:92:c7:b2:cd:13:5c:44:43:bf:31:13:32:4d:a3:
71:df:cf:ff:6f:d1:c0:78:91:94:3c:0e:ad:a3:60:
56:0e:75:35:f4:fe:e8:24:10:41:f2:29:1b:4e:7a:
fc:79:30:58:d4:ea:fe:78:e0:5c:49:37:30:16:fc:
e5:09:87:d1:03:f4:33:ad:94:ff:c6:60:54:a6:71:
2b:c0:d7:38:bb:3e:26:ef:cf:9a:d9:4a:3b:3e:91:
61:5e:e3:69:be:f1:e1:a1:b8:1e:fa:b0:5d:e1:9e:
b9:9e:d2:1c:d2:91:7c:e5:a4:c0:f4:3a:c8:4c:65:
67:ea:26:82:e8:b9:0e:f4:db:c1:c5:67:98:fe:b4:
c5:96:cc:e2:fa:ff:07:3c:c8:a9:9b:47:b6:02:d8:
21:8a:e9:5e:6f:08:97:54:73:ec:5e:4a:fc:45:66:
ba:1f:b6:85:6b:c3:3e:05:08:b9:d1:e0:4f:ac:96:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:57:62:D8:2D:1E:07:B1:79:EC:52:08:60:21:06:77:C6:AB:A0:AF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4Vdi2C0eB7F57FIIYCEGd8aroK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:fc:45:c9:7c:4c:d5:c0:69:70:6d:d0:07:ad:b8:60:5b:00:
b8:cc:c6:61:72:84:e6:7d:20:4e:c8:83:1e:37:8b:44:f7:8b:
db:3c:c4:bc:c8:7d:c8:4a:b9:49:63:25:ed:8a:67:90:00:27:
f9:83:ef:5f:35:1e:a0:20:50:fa:c9:f7:f3:12:33:df:b3:15:
7b:1e:4c:b6:03:96:cf:3a:1e:7f:51:57:b2:6e:9d:9f:38:39:
72:d7:70:c9:3f:bb:be:88:43:05:7a:d5:69:40:1a:c5:15:a4:
bf:5a:c3:6e:5b:5d:15:05:52:07:db:64:24:db:03:f7:95:38:
64:b2:c1:f5:b4:c9:f1:16:6a:98:14:e3:60:f9:9d:17:3d:df:
6c:99:2c:f2:06:1d:fa:b8:7e:05:26:a3:d9:81:01:cd:4a:88:
e5:aa:9d:3e:4f:21:5d:82:ad:9c:12:e7:46:51:3e:45:fb:7b:
36:fa:85:68:32:a7:79:cb:84:ee:3a:35:f1:19:17:2a:a9:5e:
51:69:99:ea:8e:d6:4e:ae:3f:db:8d:34:60:93:43:92:a9:18:
8b:b7:58:d3:04:99:b4:00:41:62:91:93:fb:91:1d:c0:1e:18:
25:62:00:2e:25:bf:5b:5c:76:30:d8:2b:e1:dc:fb:75:46:ca:
04:6b:68:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:23 2025 by rpki-client