Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4lPwUeQVmFPxN0Li7a4_DpEi0Ro.roa
File: 4lPwUeQVmFPxN0Li7a4_DpEi0Ro.roa (raw, json)
Hash identifier: ryxNx03vOaj5I3dpU6wV4UR2tIj7mUJufR7BPz7B0aE=
Subject key identifier: E2:53:F0:51:E4:15:98:53:F1:37:42:E2:ED:AE:3F:0E:91:22:D1:1A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C039BF46881768CD552F71A6B4921422A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4lPwUeQVmFPxN0Li7a4_DpEi0Ro.roa
Signing time: Fri 24 Nov 2023 23:13:21 +0000
ROA not before: Fri 24 Nov 2023 23:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:03:9b:f4:68:81:76:8c:d5:52:f7:1a:6b:49:21:42:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 23:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e253f051e4159853f13742e2edae3f0e9122d11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:8b:d7:69:84:f8:26:ab:a4:71:d2:21:52:
fc:04:0c:62:a1:7a:6a:ef:0f:6f:03:00:5e:77:00:
9f:74:ee:9a:17:a4:25:4b:75:bc:ad:3d:d9:0b:85:
97:bc:d1:04:00:e2:e2:ee:8c:29:b8:74:86:34:95:
38:28:ee:b6:0a:ba:82:21:5b:fd:ae:11:9a:6c:92:
63:81:9d:9d:39:9f:87:e9:15:8c:53:b0:cf:0e:a6:
4e:00:fc:ad:6a:6a:c7:b7:b4:7b:45:9c:94:cf:ac:
97:8e:83:75:31:62:79:8f:65:56:eb:1f:ae:d6:47:
99:29:b0:a5:d7:9d:b0:e5:3b:2e:b8:05:0c:5d:5f:
5b:eb:e6:80:20:70:67:b0:de:2e:41:a7:dd:f3:40:
64:5a:a5:b4:a6:57:45:49:5d:79:ae:13:ee:dd:ba:
fd:55:cd:8a:b5:63:b5:04:63:c5:e9:19:a4:1e:7d:
2c:93:0e:ec:94:af:58:df:c9:78:2d:24:88:c5:aa:
15:50:f5:08:16:3b:df:33:00:af:31:22:80:5f:08:
f9:f8:62:87:25:de:da:41:c2:9b:4b:92:29:f5:a1:
30:ee:f0:dd:e5:c9:31:8e:ff:e3:ce:c7:b4:5a:04:
e7:90:d6:f6:86:31:9b:23:88:d7:0e:36:b9:0f:ce:
67:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:53:F0:51:E4:15:98:53:F1:37:42:E2:ED:AE:3F:0E:91:22:D1:1A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4lPwUeQVmFPxN0Li7a4_DpEi0Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:8d:ac:77:b7:cc:51:8e:a1:71:fb:51:54:c7:92:3a:5b:54:
8e:93:4d:0a:6e:9b:1b:97:3e:2a:90:2b:2e:45:03:aa:4a:d4:
9f:ed:eb:14:9f:74:cc:4c:38:83:d6:d7:cb:f4:62:7b:c5:ec:
d1:2d:5e:14:48:85:03:4e:7a:6b:67:47:58:15:76:24:f7:21:
99:52:54:0a:61:0b:4d:84:2b:46:82:13:6a:87:f1:07:b0:fd:
47:ed:1e:c5:05:99:b0:1a:79:3d:a8:4e:ae:07:c0:d8:81:bf:
7e:33:8c:c9:0b:41:50:0e:3b:da:28:c3:d7:2a:16:b4:eb:c0:
f3:a1:11:78:0e:2a:a3:f9:e1:cd:37:d6:04:b3:80:2a:90:41:
2e:5e:e9:5c:b9:06:b9:58:34:0e:5d:44:ca:cb:1d:1b:35:85:
ea:7a:d2:fb:59:2c:27:0c:5a:7a:0f:ac:a2:e5:fc:92:68:f3:
f2:82:79:43:a7:83:81:36:fb:52:0e:b8:60:f8:d8:48:7e:43:
fd:b2:49:c1:ad:7b:83:72:14:eb:a2:79:e0:f6:39:b1:58:25:
b8:c6:72:bf:61:8b:12:8d:42:f6:e6:23:e9:9e:7a:b7:2e:6c:
a8:33:6b:c1:05:62:f5:65:05:c0:ae:3a:17:74:2e:cc:bd:22:
1a:0e:a8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:46:28 2025 by rpki-client