Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5DVPXZF0XOpOvLWmKA8W4fbU82U.roa
File: 5DVPXZF0XOpOvLWmKA8W4fbU82U.roa (raw, json)
Hash identifier: hgu+V82GlkEtqImwBWgZC/ESNTr1kyUxczt/K+uRT1Q=
Subject key identifier: E4:35:4F:5D:91:74:5C:EA:4E:BC:B5:A6:28:0F:16:E1:F6:D4:F3:65
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B446AB7F10D72715883B7C36AC4972FA2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5DVPXZF0XOpOvLWmKA8W4fbU82U.roa
Signing time: Wed 18 Oct 2023 20:12:06 +0000
ROA not before: Wed 18 Oct 2023 20:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:44:6a:b7:f1:0d:72:71:58:83:b7:c3:6a:c4:97:2f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 20:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4354f5d91745cea4ebcb5a6280f16e1f6d4f365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:96:33:b1:af:6d:c7:f4:28:6f:ea:ab:70:
e6:12:ba:2c:2e:03:50:0d:b6:26:46:82:e7:54:af:
06:97:f5:f6:06:dc:9a:78:ad:9d:13:5b:e3:2b:91:
86:97:e0:9d:ad:6f:d4:7f:19:65:28:9f:38:7c:01:
a2:a0:f5:9a:00:8a:0e:e7:8e:60:b2:3e:a3:ba:07:
8f:67:fb:59:14:b8:63:96:2a:6a:3e:e1:00:21:73:
9c:e5:ac:a1:52:f0:cf:b0:26:2f:a9:0b:69:d5:46:
0c:eb:28:82:4c:36:e6:18:42:8d:f2:99:a8:d5:0f:
05:ff:73:e7:76:35:86:25:6b:f0:38:8a:43:8c:0d:
8a:1c:a6:06:b7:34:ef:9f:40:85:01:8b:ba:8a:6a:
ca:f0:49:f3:80:0d:6f:9c:a2:52:ec:9b:85:2c:74:
3a:60:1b:10:6a:18:c9:9d:fb:68:ea:25:87:5e:64:
f6:16:29:80:8e:01:33:d3:d4:aa:7a:1f:a1:9a:73:
73:25:e9:7a:b3:84:55:20:28:70:29:45:20:99:6c:
3a:9b:6d:44:93:51:e1:64:50:22:38:7b:4c:f3:b5:
05:74:86:be:38:5b:a1:86:67:cc:d5:0f:c4:07:74:
45:79:1f:34:5c:b8:30:ec:e4:dd:09:f3:24:5c:11:
cc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:35:4F:5D:91:74:5C:EA:4E:BC:B5:A6:28:0F:16:E1:F6:D4:F3:65
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5DVPXZF0XOpOvLWmKA8W4fbU82U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:26:ed:5e:f8:6b:a2:d6:78:34:ef:34:de:6f:5b:cc:31:ca:
59:c8:24:e2:b4:0e:bd:ef:81:6c:26:af:6b:e9:3b:54:82:1d:
d2:a5:8a:f7:32:36:cb:9e:92:b8:6c:2f:84:19:74:60:58:66:
9f:53:18:a7:8b:90:88:55:f6:ef:95:96:21:7c:26:ee:11:e3:
6f:17:01:a2:13:17:73:b7:6e:d2:a9:bd:3d:ac:69:6a:a8:a1:
91:4f:f2:ac:76:36:2c:92:19:37:36:6a:05:47:b6:85:03:5c:
f4:4a:c2:51:db:aa:79:89:fa:e5:40:a3:e9:6a:c6:78:d0:cb:
b9:21:93:11:85:f6:15:e4:a8:09:66:69:96:80:b9:4d:76:55:
99:e7:88:44:09:b9:ac:67:ef:8d:50:62:6c:b4:18:d3:82:0b:
48:04:5d:e6:f1:74:9f:25:dc:1b:50:de:53:2a:ec:17:f6:00:
57:9b:3c:e0:82:ca:d9:bf:73:c0:88:36:70:ab:92:5a:75:7c:
50:21:47:fc:b5:0d:75:56:fd:db:e1:80:65:a2:fb:42:15:16:
2a:d2:45:4a:7d:df:5d:ba:10:de:61:f5:15:53:17:e5:3f:1b:
a1:0b:6e:a7:6d:5c:10:41:8e:f6:e7:59:94:d0:9c:59:ac:1a:
01:f7:65:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:45:51 2025 by rpki-client