Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7DTJRGAWv0JQqDJrgx7qYaC80no.roa
File: 7DTJRGAWv0JQqDJrgx7qYaC80no.roa (raw, json)
Hash identifier: wjjtLbVcip7wa5a9B7tw/s6aTq+S9eSXn+3M0HyHQgg=
Subject key identifier: EC:34:C9:44:60:16:BF:42:50:A8:32:6B:83:1E:EA:61:A0:BC:D2:7A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C84C7A83260CEDBFFEAD4EC5B34E2D08A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7DTJRGAWv0JQqDJrgx7qYaC80no.roa
Signing time: Wed 20 Dec 2023 01:12:06 +0000
ROA not before: Wed 20 Dec 2023 01:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:84:c7:a8:32:60:ce:db:ff:ea:d4:ec:5b:34:e2:d0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 20 01:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec34c9446016bf4250a8326b831eea61a0bcd27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:e2:41:f1:8f:cf:54:87:3c:e7:74:3d:e9:
98:c6:1d:52:f2:b6:9c:99:e6:d1:0c:fc:6e:2c:6f:
22:17:ba:61:59:c1:68:e3:e5:1b:98:d0:41:9d:17:
36:79:38:d5:f6:ff:d4:56:e6:84:96:85:f8:d0:11:
3f:52:a7:b7:50:ef:f6:4b:e7:4d:30:55:b6:28:db:
fa:bf:6e:5c:cb:03:09:f9:03:49:0e:73:fa:51:d5:
ec:b3:79:aa:74:ba:f2:4c:44:59:58:d1:70:63:8a:
f5:11:d3:28:ea:a7:36:c7:03:e1:28:94:fa:98:e7:
aa:d9:a7:ed:ef:79:fe:12:d4:64:09:d3:f0:c0:05:
7d:ca:96:28:2c:ab:8b:3f:e2:4c:6c:f1:e3:02:58:
ed:6b:a2:c6:e7:23:7f:d9:c7:5f:5d:7b:28:05:42:
5c:87:3c:76:be:55:99:58:fd:a2:a8:67:6c:3c:47:
3c:45:22:ef:16:fc:87:d5:83:73:88:08:f5:40:c1:
ca:7c:0d:1a:b2:7d:da:e7:74:a2:24:f2:ea:15:67:
9d:88:78:06:b9:a2:7a:b4:37:a2:c8:e5:08:58:24:
58:c1:72:3f:ec:6d:40:8b:3b:7c:ee:54:75:26:c3:
0a:dc:53:ce:94:4e:49:50:7b:2e:da:04:02:b3:94:
83:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:34:C9:44:60:16:BF:42:50:A8:32:6B:83:1E:EA:61:A0:BC:D2:7A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7DTJRGAWv0JQqDJrgx7qYaC80no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:95:0a:9c:eb:55:d7:81:80:a7:12:6f:b8:6b:53:a4:12:1f:
4f:34:3b:30:0d:21:81:12:a4:bf:22:af:94:9f:25:19:2b:89:
db:84:00:39:3d:00:82:52:67:36:13:bb:f7:8a:11:e0:3e:a4:
94:04:10:89:5f:36:b8:94:b1:38:20:72:86:b2:ca:29:8c:aa:
3b:05:b6:9b:04:17:6c:c8:87:1d:f7:b2:a4:dd:be:e7:92:fd:
12:fa:a1:fe:38:ab:68:92:0e:1d:c7:10:de:cd:0f:a5:f8:8f:
f6:36:83:df:f4:b1:f9:31:a6:b9:dd:d9:ed:8a:dc:a1:a5:e2:
94:57:af:41:ee:f3:58:1f:4d:4e:41:34:26:1e:10:cc:ac:3b:
89:ac:79:97:40:f3:b8:69:d1:35:32:80:e5:12:fa:ba:2c:87:
3c:37:a9:73:de:66:a0:84:87:c5:65:65:a1:00:08:fe:53:49:
18:ca:c5:ef:e4:a0:07:0a:51:a3:99:ad:bf:2c:13:c8:f1:68:
b7:21:61:01:06:3b:f1:19:78:2f:b5:a1:ad:7f:b1:ce:3b:32:
de:c9:a9:03:8b:18:ba:5b:a4:bd:01:66:e4:f2:63:43:a4:2a:
b7:21:a5:d4:9c:ca:29:88:ac:ba:0d:45:ff:31:15:2f:2e:6b:
63:46:75:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:56:37 2025 by rpki-client