Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8sobKz5esAH8v07OaUiTbKZ_otQ.roa
File: 8sobKz5esAH8v07OaUiTbKZ_otQ.roa (raw, json)
Hash identifier: YEFmy4NKJRTwTnBnfMjgWjrl54I9qVl7gHH4JCACdX8=
Subject key identifier: F2:CA:1B:2B:3E:5E:B0:01:FC:BF:4E:CE:69:48:93:6C:A6:7F:A2:D4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C07E5ABB9CBAB975D7B4382070634F4EA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8sobKz5esAH8v07OaUiTbKZ_otQ.roa
Signing time: Sat 25 Nov 2023 19:12:21 +0000
ROA not before: Sat 25 Nov 2023 19:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:07:e5:ab:b9:cb:ab:97:5d:7b:43:82:07:06:34:f4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 19:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2ca1b2b3e5eb001fcbf4ece6948936ca67fa2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:fd:05:83:e2:4a:9b:65:7d:78:ec:3c:24:
4f:da:19:94:f0:21:25:f5:ff:02:fd:eb:8c:4e:c7:
af:9c:1a:df:14:e4:59:2a:78:94:6d:28:a5:15:bc:
6d:f2:2d:7d:80:f2:7d:69:1c:41:54:27:96:07:34:
78:11:96:fe:a0:ec:13:54:52:8a:15:94:66:45:9b:
e3:d3:60:87:a1:7c:4e:b7:88:6f:95:52:f3:32:c2:
3d:f9:2f:c7:39:2b:36:d2:c8:7a:59:3a:4b:11:ad:
9b:ce:13:e8:2b:fc:a5:af:7d:09:98:15:50:b3:ad:
21:22:72:28:e4:ce:32:7e:97:db:44:36:81:d7:28:
56:e9:f2:d9:82:10:20:b7:70:fe:1c:39:87:92:8a:
45:9d:7e:ac:b5:bb:e6:27:a6:0c:dc:5e:7e:cc:d0:
e2:9d:37:20:a0:18:13:eb:1c:3c:6d:65:4a:16:fb:
72:7a:86:7f:66:c9:67:7c:0c:ed:d6:bd:60:2e:e5:
01:bb:80:6f:9c:ce:f5:f1:43:32:d2:e7:af:af:b3:
08:6e:26:52:0c:78:eb:61:91:6d:75:69:59:41:5e:
fe:35:56:bc:b9:12:d2:2e:ad:a3:7e:10:1f:26:97:
0b:20:93:b9:ca:f0:70:80:b1:e2:2c:30:61:23:1a:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CA:1B:2B:3E:5E:B0:01:FC:BF:4E:CE:69:48:93:6C:A6:7F:A2:D4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8sobKz5esAH8v07OaUiTbKZ_otQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:5d:b9:8b:a2:36:a1:42:d2:a9:27:f8:12:34:dc:7f:7f:06:
5b:9a:3c:d4:7b:76:f0:60:97:64:eb:82:9b:d1:ce:54:2d:5a:
a9:46:17:5f:40:e1:1d:ef:9b:45:a9:99:e0:a1:42:4a:61:29:
5e:5e:06:3e:9d:3f:2e:5c:59:24:13:08:60:bc:73:69:95:be:
b8:d7:e1:a9:7a:08:4b:83:87:1b:47:de:a2:bf:03:1c:c3:9e:
79:dd:17:db:e9:83:59:44:5d:b3:cc:0b:30:b7:da:80:ad:c7:
e2:a1:ea:3d:d4:3e:ad:ac:b5:fe:88:9b:b5:59:4c:37:04:ea:
7f:9a:fe:d9:08:ba:59:39:50:af:f9:a1:05:0a:85:d4:02:2c:
3d:20:b8:06:65:84:ac:ac:35:87:a6:6c:60:39:f0:05:ce:df:
e1:4e:e0:18:49:7a:b5:4e:da:d0:0b:9f:b1:77:d4:c2:4c:72:
49:13:c2:9c:ad:10:8b:1d:21:95:4d:76:c3:86:5f:7f:a8:0c:
39:d5:a8:8b:a2:af:0e:40:be:0e:5c:f8:fb:f0:52:9c:f1:db:
8f:2f:5d:d2:3f:49:9b:85:6f:15:90:9e:12:f3:9c:80:56:17:
ee:10:cb:96:06:8f:90:0c:47:c9:e8:ac:e4:a7:70:e8:38:df:
d6:8f:33:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:48:40 2025 by rpki-client