Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4zQmcL-vjTAUxkKY-EUmHhrn8v0.roa
File: 4zQmcL-vjTAUxkKY-EUmHhrn8v0.roa (raw, json)
Hash identifier: k3PXLsuSlxNMSA4YiQExh59/rLcIK/huHo2x5vrdG9I=
Subject key identifier: E3:34:26:70:BF:AF:8D:30:14:C6:42:98:F8:45:26:1E:1A:E7:F2:FD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5E579195281DB9C0F5789BE6C57DDDEE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4zQmcL-vjTAUxkKY-EUmHhrn8v0.roa
Signing time: Tue 12 Dec 2023 14:04:06 +0000
ROA not before: Tue 12 Dec 2023 14:04:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:5e57:7d84/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:57:91:95:28:1d:b9:c0:f5:78:9b:e6:c5:7d:dd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 14:04:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3342670bfaf8d3014c64298f845261e1ae7f2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6b:e5:37:be:24:e8:b2:15:c9:7e:0e:21:d4:
03:4e:3e:e7:ae:ff:b8:e0:4c:bf:da:f1:67:68:cf:
11:95:8d:68:84:1a:e4:32:00:a2:2a:e3:d4:cb:66:
00:4a:f1:12:36:21:06:c1:9f:52:33:d9:76:1a:72:
3e:0c:52:5f:c4:1e:ad:28:d8:44:22:22:37:73:af:
96:d6:27:cf:e5:42:9a:24:24:bd:07:51:a6:ad:1b:
32:aa:89:44:6d:e1:48:07:93:e9:c4:7f:80:4a:55:
5a:03:c3:19:db:d1:9b:be:dc:80:d4:a9:6f:89:24:
01:ad:76:7d:4e:a9:8f:33:86:f5:ff:57:29:91:87:
dc:f6:47:47:44:27:0a:20:fb:a8:28:40:fb:ce:e0:
e6:8e:c5:49:ed:3c:aa:16:ee:c3:9a:c3:9d:6b:ba:
d8:74:e1:ec:47:8a:46:e2:c0:39:63:5c:ca:6b:4a:
9f:1f:a4:42:78:1f:0b:b9:34:17:58:a1:6c:39:0b:
a4:2a:b1:48:eb:b7:75:90:d4:a6:0e:15:c5:4f:43:
b9:28:18:2b:71:ab:39:4c:1a:07:60:b0:7a:12:43:
5c:1f:a8:ac:92:83:4b:b3:79:51:ef:c4:21:79:89:
36:8d:5c:a9:bf:10:c5:09:81:03:59:08:4b:ef:75:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:34:26:70:BF:AF:8D:30:14:C6:42:98:F8:45:26:1E:1A:E7:F2:FD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4zQmcL-vjTAUxkKY-EUmHhrn8v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:c5:72:1f:6d:2f:c1:35:7f:61:62:8b:2c:8b:10:f7:4a:b8:
0b:e7:3e:7f:df:7d:6a:b7:43:3b:72:fa:25:37:82:c9:aa:e2:
b0:06:52:b6:65:57:16:b1:2a:9d:81:f5:16:75:87:03:32:ce:
f8:8c:f0:a0:5c:00:0d:0a:78:b6:12:f0:98:0e:34:79:d9:01:
76:aa:fa:a3:7b:85:b1:d6:cb:e2:fb:81:3b:d3:df:98:0a:5e:
af:d8:f7:8c:b2:27:5e:7f:08:23:85:5e:c5:c3:30:9f:26:0b:
dd:6c:77:ad:13:28:33:b4:ef:fd:5c:7b:0c:71:7f:c4:09:1b:
5f:28:10:8e:36:79:d6:3f:19:22:f4:2a:f1:f4:39:a7:20:36:
0f:4e:eb:d6:1d:f1:1c:d9:23:0e:e3:1f:64:bd:3d:96:b9:0a:
cc:31:31:fc:4a:4a:61:7d:95:1f:c5:19:54:1c:53:fc:b7:b9:
70:d6:90:11:10:fa:fc:8e:12:e3:2f:92:24:79:19:cf:b9:24:
14:87:b6:aa:43:80:c2:dd:8f:91:e3:73:b2:17:4f:5b:71:86:
df:ce:20:80:be:4c:71:2c:26:df:4d:c9:85:19:97:6c:13:e3:
2a:06:22:7a:f8:3d:46:d3:e8:26:bf:34:1a:e6:cd:ed:49:b8:
69:23:73:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:27:46 2025 by rpki-client