Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7ZxSTpL1Ys9A7MC8B2RTw3RP81U.roa
File: 7ZxSTpL1Ys9A7MC8B2RTw3RP81U.roa (raw, json)
Hash identifier: Z1MWV/KTxjxdEPd9WnVwxuDC9V/NYymix8pVKTR2j8I=
Subject key identifier: ED:9C:52:4E:92:F5:62:CF:40:EC:C0:BC:07:64:53:C3:74:4F:F3:55
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C164A639F1B3801006A2F7E260274B1C5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7ZxSTpL1Ys9A7MC8B2RTw3RP81U.roa
Signing time: Tue 28 Nov 2023 14:17:03 +0000
ROA not before: Tue 28 Nov 2023 14:17:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:16:4a:63:9f:1b:38:01:00:6a:2f:7e:26:02:74:b1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 14:17:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed9c524e92f562cf40ecc0bc076453c3744ff355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:21:8b:59:cf:98:47:24:9b:16:0c:6f:6b:
13:ce:53:4f:23:12:ed:2e:30:8b:3e:e5:4f:69:31:
b7:61:2e:24:1a:84:7b:4c:7f:3b:8b:f0:6a:45:58:
f4:0a:c0:28:9a:f2:52:5d:0f:ad:42:ad:96:45:de:
37:a3:71:87:98:d9:c3:1d:0a:b9:33:80:06:71:30:
29:21:16:35:7c:39:70:46:bc:c7:2d:bb:6b:90:91:
cb:99:35:1b:b6:be:4e:12:75:38:f0:90:76:4f:e2:
80:d4:af:13:84:57:d6:17:8d:74:63:a3:77:5a:f5:
92:b0:aa:1b:ae:5e:02:ab:c5:bd:e3:1e:9b:fc:a9:
0d:74:ac:47:c8:39:a8:8a:0e:ce:f7:ca:0c:9c:c0:
ca:ee:c9:3e:10:78:1c:90:cf:d7:c4:8d:ba:bc:06:
dc:2e:9a:89:85:41:b5:fa:c6:d8:54:64:27:17:b3:
d0:ca:09:ab:4d:ac:ba:a5:c0:43:d9:bc:a3:8b:75:
37:d7:eb:c7:4b:6e:e4:da:57:43:a4:d0:a1:be:dc:
da:bc:f1:c1:1b:8b:67:28:78:60:f2:19:19:0e:c7:
97:da:1a:64:1c:a7:41:07:bc:a1:2f:16:e0:d8:fe:
a8:72:cf:74:16:97:6e:62:73:2e:43:39:00:19:62:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9C:52:4E:92:F5:62:CF:40:EC:C0:BC:07:64:53:C3:74:4F:F3:55
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7ZxSTpL1Ys9A7MC8B2RTw3RP81U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:34:bd:eb:89:27:bc:bb:91:b0:fb:b6:f8:c0:25:24:77:bc:
48:61:47:70:13:25:61:f3:ab:6b:6d:57:db:25:af:b6:f0:8a:
c0:86:5b:38:52:a5:9e:3c:d3:eb:d5:48:65:dc:43:b9:cb:ce:
4f:2f:2b:c3:72:bd:d8:52:c5:b3:d2:7c:61:40:02:43:78:93:
35:a8:3f:07:b7:52:e9:80:51:95:5e:d7:5e:fa:8a:fa:d4:2c:
1f:16:11:02:6c:38:92:89:82:b8:87:75:1e:4e:05:26:07:ab:
fc:6c:81:26:c9:e7:90:fd:47:c8:03:fa:ee:a1:cb:31:d0:9e:
0d:e3:2d:97:58:49:56:84:da:8f:15:72:5e:57:d9:16:1c:11:
25:a0:32:e9:71:ee:d2:9c:1d:7a:9d:b9:73:cd:45:3f:a4:85:
6f:e3:c1:9c:ce:af:89:9e:a3:2e:f1:d5:e7:3a:f5:f8:bf:13:
93:c7:0b:db:98:cb:4c:96:3a:af:e1:26:18:b3:07:cb:79:d9:
66:67:3a:28:60:80:61:44:d7:ad:9c:ee:73:5a:43:21:c0:ed:
6c:9d:78:ed:9f:78:ee:70:c2:03:db:20:b4:27:ff:0b:5d:49:
3d:df:1d:9a:3e:20:e8:11:33:91:83:78:54:4b:ba:a1:b1:e5:
c4:a5:e5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:23 2025 by rpki-client