Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9vy82xWmogbZKOOYOxRsLmurA4M.roa
File: 9vy82xWmogbZKOOYOxRsLmurA4M.roa (raw, json)
Hash identifier: lnkQgZ1G+E507CBXFbYiJaF/ziWBtzfIKsfvfQmxuuA=
Subject key identifier: F6:FC:BC:DB:15:A6:A2:06:D9:28:E3:98:3B:14:6C:2E:6B:AB:03:83
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDC1EB40F8CE91BE3F70437610CDE6B52
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9vy82xWmogbZKOOYOxRsLmurA4M.roa
Signing time: Fri 17 Nov 2023 07:11:21 +0000
ROA not before: Fri 17 Nov 2023 07:11:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:1e:b4:0f:8c:e9:1b:e3:f7:04:37:61:0c:de:6b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 07:11:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6fcbcdb15a6a206d928e3983b146c2e6bab0383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3b:58:5d:0a:39:07:44:ef:ce:56:8f:ce:6f:
04:45:74:b0:f8:bd:d7:5f:b1:41:76:ba:55:e0:74:
32:fc:71:3a:10:2e:de:47:f4:32:1f:9a:7a:b4:0d:
88:57:77:56:e7:13:da:75:12:4c:a8:6c:70:02:e8:
e9:c0:14:31:2d:7d:4b:57:de:2e:7c:97:1f:38:e1:
6d:9a:63:59:32:86:2d:f3:88:c9:fa:98:5e:bc:8b:
85:3b:b2:4e:fd:f5:e8:ec:02:c9:6f:c8:0a:03:cf:
e3:91:1a:f9:3a:48:1c:c6:36:99:56:de:d8:2f:38:
91:ed:de:69:14:d0:dd:d1:d1:c2:00:ba:24:49:c1:
b1:88:b9:42:6f:57:a7:96:ff:88:8a:b6:94:db:5e:
7b:43:70:ce:c3:f8:c9:be:dc:ea:5a:ae:21:62:c1:
95:d3:eb:5f:36:4d:53:ae:28:3a:5f:2f:34:82:9b:
d5:ea:8f:f0:d0:41:d4:60:bc:15:45:d6:1f:f1:ea:
89:79:12:19:18:0f:53:22:cb:0c:cf:17:06:5a:76:
b2:9d:5c:d4:2c:70:0b:c7:d5:ca:31:93:7a:cf:9d:
12:05:e8:e0:53:dc:79:25:df:85:e9:aa:e9:0a:60:
af:2c:c7:67:41:eb:93:f9:e7:c3:ad:2b:65:46:87:
83:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FC:BC:DB:15:A6:A2:06:D9:28:E3:98:3B:14:6C:2E:6B:AB:03:83
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9vy82xWmogbZKOOYOxRsLmurA4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cd:29:c9:ae:72:2c:2b:80:7f:b6:15:cd:21:38:40:1c:1f:a3:
0d:e9:98:c0:84:2d:0c:8e:97:ab:2e:e9:55:1c:31:fc:fe:35:
66:10:1a:92:2e:8a:aa:5b:0f:1b:17:d8:3e:ba:26:e0:99:a6:
f9:b8:a6:3f:69:88:97:b3:9d:f4:d4:cf:e7:fd:ea:77:c8:a3:
80:8b:51:e2:03:82:10:3f:44:40:7c:3c:58:ab:bc:83:60:60:
5a:ad:52:fe:4b:3b:35:17:72:fc:26:21:a8:ed:05:49:7a:54:
78:ae:7d:c9:85:75:d6:53:49:82:60:2e:82:9f:59:8d:65:1e:
ca:b9:bb:b3:7d:5c:51:ab:26:94:e6:fd:48:e3:f2:87:57:98:
21:37:0e:39:7c:0d:d9:52:96:58:24:dc:37:6d:68:c8:45:43:
4d:7d:e2:60:5a:62:a0:06:3e:6b:aa:c4:74:39:77:58:b0:f5:
15:27:a0:f8:6b:25:35:38:58:d8:0a:d6:82:40:bd:5c:24:dc:
3a:25:a4:bf:9e:36:c0:1a:ae:51:f7:1e:a4:bc:80:5f:d9:f5:
3e:13:21:8c:67:3b:dd:c0:2e:ff:3c:46:24:db:67:49:5c:f2:
19:47:ff:1c:7a:58:95:ca:f5:4c:9b:18:a3:23:c6:1c:9c:29:
11:51:84:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:37:37 2025 by rpki-client