Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4qDIL7xJoEFgToVNtRsx_cWRVm0.roa
File: 4qDIL7xJoEFgToVNtRsx_cWRVm0.roa (raw, json)
Hash identifier: CZmdoBys61WNzuOI/FACx2axzD0WJ9EQNg9Z3vxVX3U=
Subject key identifier: E2:A0:C8:2F:BC:49:A0:41:60:4E:85:4D:B5:1B:31:FD:C5:91:56:6D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF497EC414C9564FDA32A2DCB785E23C2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4qDIL7xJoEFgToVNtRsx_cWRVm0.roa
Signing time: Tue 03 Oct 2023 08:11:51 +0000
ROA not before: Tue 03 Oct 2023 08:11:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:97:ec:41:4c:95:64:fd:a3:2a:2d:cb:78:5e:23:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 3 08:11:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2a0c82fbc49a041604e854db51b31fdc591566d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:54:0e:20:fc:2d:fa:ae:07:4c:d5:61:96:
79:26:99:b5:76:05:c7:5a:21:7b:22:14:ef:85:62:
41:8c:09:d4:fd:93:c7:31:89:e8:4f:2c:6b:3b:60:
bb:58:09:11:c5:1e:d3:2e:33:10:97:19:dc:bf:b9:
28:cb:15:85:a2:9a:6b:c5:10:79:00:1b:3d:59:14:
43:f7:94:17:30:a6:8d:df:04:1b:28:8e:1c:e6:69:
0d:53:c7:06:a1:20:af:0c:34:1e:62:4a:32:b0:0e:
50:e1:c6:12:8d:1d:27:fc:ab:e2:1d:50:7a:9a:e2:
a5:ad:07:77:53:1c:7c:33:88:5f:e4:8e:c3:55:e7:
1f:fd:b2:3f:2f:66:27:71:bf:c7:66:42:18:12:6c:
2a:dc:4b:9c:bd:54:c0:20:17:62:2d:d5:d9:98:80:
69:1b:17:82:33:24:8d:e8:d8:61:e6:b8:12:33:08:
11:26:ee:70:86:1a:a0:65:fa:3d:ce:e4:87:52:ac:
52:78:6c:62:10:09:18:cf:64:64:78:01:e8:e1:31:
db:e4:4e:96:38:97:f7:8e:d6:76:d5:a8:73:e2:8e:
2e:4f:9f:cc:3a:18:54:59:e1:ce:c5:58:10:15:cb:
b3:1b:b0:83:a9:e5:af:79:b1:64:46:f0:2d:6a:25:
11:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A0:C8:2F:BC:49:A0:41:60:4E:85:4D:B5:1B:31:FD:C5:91:56:6D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4qDIL7xJoEFgToVNtRsx_cWRVm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:ee:54:70:14:98:1f:64:5d:76:d6:73:f2:05:8f:f5:66:96:
8b:42:30:7d:09:f6:bf:e0:e6:4b:ec:23:af:73:26:14:27:01:
06:dd:00:07:d9:37:8b:12:90:8a:dd:11:42:ab:9c:90:e3:6a:
b7:aa:42:fc:cf:f1:41:20:b1:ce:ac:44:48:13:d8:16:78:45:
2c:8a:7a:a1:3d:70:1f:d5:bb:ab:70:e6:bc:99:e6:fd:48:83:
07:d4:26:f8:f6:d7:13:72:dd:06:4d:bb:98:ab:18:f1:7b:60:
2d:f5:b3:ab:51:d4:18:a5:1a:cd:14:ae:40:f0:b9:57:3c:7b:
f6:8f:4d:32:fa:9d:11:28:96:90:4b:3e:a8:31:44:41:a9:05:
43:32:a4:20:86:e9:09:02:d6:26:4d:13:3d:13:45:b3:f1:3a:
46:eb:04:a4:f4:19:42:ab:b2:12:c9:c1:ae:a2:d1:0d:00:01:
00:fa:a0:9d:e0:51:32:79:85:53:3c:f1:35:96:55:9f:a2:da:
d5:af:e2:65:51:a9:a8:a7:08:a3:65:8d:ad:d0:d5:45:e1:2f:
ae:b8:8f:a5:d8:fe:a3:d1:12:63:f3:e3:68:9c:06:0b:6d:e4:
9d:a2:8a:14:8c:01:05:68:6a:77:ff:b6:87:61:a4:8f:f8:5d:
f3:c7:e0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:07 2025 by rpki-client