Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/52q0JSCdLd7LYQ6coVJISqpYQzg.roa
File: 52q0JSCdLd7LYQ6coVJISqpYQzg.roa (raw, json)
Hash identifier: WKK6N9uBZdgtxh/lH27Eu9d2rQ31k5RIFZUVzm3WiEo=
Subject key identifier: E7:6A:B4:25:20:9D:2D:DE:CB:61:0E:9C:A1:52:48:4A:AA:58:43:38
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5F3C747298D0086A874D5FFE7FF9739A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/52q0JSCdLd7LYQ6coVJISqpYQzg.roa
Signing time: Tue 12 Dec 2023 18:14:06 +0000
ROA not before: Tue 12 Dec 2023 18:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5f:3c:74:72:98:d0:08:6a:87:4d:5f:fe:7f:f9:73:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 18:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e76ab425209d2ddecb610e9ca152484aaa584338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:4e:bf:f8:c5:84:15:d0:ac:b0:1d:fa:50:
5c:96:f7:85:f3:21:81:2e:a5:26:fe:59:02:42:89:
b2:db:38:cf:b9:7c:c3:69:be:d1:fc:0b:d9:ae:bb:
eb:1d:40:da:38:cd:ca:2b:d9:af:9a:62:f9:b7:00:
77:59:09:7a:2a:7f:0a:86:57:00:ac:5b:f8:9b:cf:
cf:58:ad:9b:f8:fd:4b:40:eb:46:c1:e8:f8:d1:16:
0e:73:08:58:aa:65:b2:52:18:79:8c:c9:fe:ee:ee:
cb:62:1a:67:fc:84:6e:dd:ad:06:e5:dd:07:c6:2a:
66:e1:ef:99:d9:83:98:c2:eb:90:e6:79:33:d9:15:
65:36:9a:cb:34:45:e1:b2:3a:e4:73:10:2b:0d:cf:
e0:95:59:33:ba:de:87:42:5c:ad:54:94:7f:fb:3e:
c4:fc:78:24:3d:45:02:7e:a7:01:e8:bb:82:06:62:
b3:d0:c1:9f:ab:9c:40:48:07:58:85:f0:bb:16:58:
c6:0a:63:6a:7b:c8:46:56:a1:0c:82:7a:5b:e8:d9:
9e:d6:aa:c0:eb:b5:90:65:fe:28:3a:d1:a4:09:db:
14:c0:90:ad:9c:bd:2a:21:01:da:17:61:f9:ee:bb:
c7:0b:81:5f:97:68:54:c0:3e:e6:91:55:18:21:f8:
1f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6A:B4:25:20:9D:2D:DE:CB:61:0E:9C:A1:52:48:4A:AA:58:43:38
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/52q0JSCdLd7LYQ6coVJISqpYQzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:6b:3c:e1:06:9a:32:98:88:66:27:68:05:32:c6:13:53:a2:
41:85:aa:37:3e:80:d7:33:9f:22:d6:8d:d9:6c:69:57:f4:c1:
1a:83:0b:1a:79:c9:c1:9a:ef:0c:7a:cb:b5:4b:be:28:7b:9d:
b2:a3:4e:20:a0:99:c6:e0:63:2e:69:bd:eb:2a:f9:1f:3d:f0:
cd:30:70:0f:3b:4b:5c:6f:07:f3:31:99:e7:8f:fb:9c:e6:17:
45:e5:e5:70:ab:bb:9c:d0:40:3c:05:d0:12:fd:04:9a:04:0e:
e1:9c:19:39:15:b7:3c:d7:d6:cf:c4:93:ba:09:06:fe:30:74:
f7:8b:fd:a4:28:d7:01:26:fd:65:a1:90:1e:49:84:c5:6d:4a:
da:02:12:90:33:13:56:73:54:af:56:a5:b8:b4:6c:bd:f9:c7:
29:67:e2:4d:c7:9f:9b:12:3f:ff:a4:86:7d:f1:88:91:19:e7:
98:92:0f:6d:28:49:4c:4b:f4:5a:08:96:e3:a1:c5:db:1a:5f:
e4:70:3d:e6:bc:b8:2d:b1:9e:94:1f:5a:b2:a8:4c:85:5d:b5:
5b:81:1b:e9:a0:8f:df:8d:2c:c2:31:b1:6a:c8:ab:33:9a:7a:
b5:12:14:2d:34:9e:66:4d:13:fb:72:d2:d5:26:31:af:c0:37:
31:eb:28:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:47:33 2025 by rpki-client