Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4oXRnPJInEO5QYme-B6TgDud9nE.roa
File: 4oXRnPJInEO5QYme-B6TgDud9nE.roa (raw, json)
Hash identifier: vzPjKNFrbkXFVNWxdjbMHbdWWDPNnsSPy1QU5FgXOKA=
Subject key identifier: E2:85:D1:9C:F2:48:9C:43:B9:41:89:9E:F8:1E:93:80:3B:9D:F6:71
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C78585EA302B5EDEFE09069694662384A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4oXRnPJInEO5QYme-B6TgDud9nE.roa
Signing time: Sun 17 Dec 2023 15:15:06 +0000
ROA not before: Sun 17 Dec 2023 15:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:78:58:5e:a3:02:b5:ed:ef:e0:90:69:69:46:62:38:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 17 15:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e285d19cf2489c43b941899ef81e93803b9df671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:e9:0a:61:8e:0f:6d:4a:d6:3f:8c:9d:19:
05:b8:40:5b:9a:43:3c:5f:3d:45:72:55:9a:ad:67:
bd:6d:10:d6:47:5d:cb:9e:b5:25:df:be:04:e3:66:
74:e9:90:c7:95:ad:4b:bd:ce:1e:47:fe:80:93:8e:
02:be:37:70:11:b1:51:a7:18:8a:fd:1d:36:6c:ec:
e2:b4:78:03:d9:32:26:87:b9:9c:5b:1b:e7:5a:69:
24:68:ab:1e:86:dc:6d:63:b3:aa:83:ff:f4:26:52:
1d:46:10:a5:2d:4e:e7:9b:9f:df:8c:c3:de:69:b8:
ad:11:b0:bd:0c:d6:d3:44:86:5e:d1:60:07:01:50:
01:5b:6c:ff:07:b4:1f:e1:32:de:fb:00:ec:56:a2:
ff:8c:12:d9:6a:61:3e:b6:7b:5e:f1:ee:45:b9:e0:
01:33:6a:be:4f:87:91:b5:d6:cf:35:ba:ab:20:91:
99:f2:04:ed:5d:49:e5:f0:cd:8c:9d:03:49:ee:ef:
36:00:35:d8:bb:cb:c9:b0:b1:b2:34:ff:96:e4:fd:
a0:b1:17:23:97:72:55:70:cb:67:73:b7:aa:c0:5e:
0e:df:f9:ed:1a:df:a2:5a:4c:63:7f:bc:93:c4:58:
5c:07:cc:9a:2d:ac:b8:4e:4d:6c:c1:3e:e8:d7:2d:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:85:D1:9C:F2:48:9C:43:B9:41:89:9E:F8:1E:93:80:3B:9D:F6:71
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4oXRnPJInEO5QYme-B6TgDud9nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:e2:fc:73:a4:2f:bb:02:ab:58:5d:01:29:43:67:75:58:fb:
21:c8:a3:04:40:74:40:5f:c0:01:bd:0b:79:a3:ee:c7:20:2e:
81:fb:02:58:45:cb:51:52:9e:f0:fc:27:d1:08:3a:97:28:26:
33:ea:49:1c:04:fe:98:b0:cd:ce:bf:a3:6d:24:e5:70:55:dd:
a8:3d:c9:14:18:28:5b:05:7d:77:31:76:4e:83:6e:f7:6e:7c:
96:7e:a3:ba:3a:05:81:82:25:30:35:c3:1c:83:79:cd:86:ae:
d2:31:cf:af:a6:5d:1a:b7:8f:a9:6d:68:78:14:a3:0b:db:3d:
9d:b6:62:f7:8d:b7:d9:54:83:1f:a8:e4:30:6e:e9:94:eb:3c:
f2:47:36:42:85:9f:71:3f:fd:4f:5b:7a:c9:3e:99:1c:7a:bc:
29:25:73:c3:3d:96:6d:7f:a6:83:3c:76:78:20:59:fa:23:7c:
9a:5e:7e:29:04:28:3b:15:8d:8c:b0:b2:a5:13:e9:a5:df:e6:
0f:bf:fe:57:a1:a4:b2:75:7d:65:4a:1e:15:23:75:a7:ab:e3:
a8:66:c4:95:05:f7:41:a5:df:ff:3d:32:c8:28:09:e9:8a:b7:
26:b0:5b:1d:89:3e:40:15:64:bd:f9:04:9a:70:a6:9b:6b:db:
85:8e:58:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:38:33 2025 by rpki-client