Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AW-oh14AZbvqTsu59pwJHrQlqaU.roa
File: AW-oh14AZbvqTsu59pwJHrQlqaU.roa (raw, json)
Hash identifier: lEX/40fiknJW/uBeZWH6W9tgg8HZMNtBLad+nM+yIN0=
Subject key identifier: 01:6F:A8:87:5E:00:65:BB:EA:4E:CB:B9:F6:9C:09:1E:B4:25:A9:A5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC1896EA398E6EBDB65F419AAD45F738E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AW-oh14AZbvqTsu59pwJHrQlqaU.roa
Signing time: Sat 23 Sep 2023 10:15:23 +0000
ROA not before: Sat 23 Sep 2023 10:15:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c1:89:6e:a3:98:e6:eb:db:65:f4:19:aa:d4:5f:73:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 10:15:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=016fa8875e0065bbea4ecbb9f69c091eb425a9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0c:06:ec:3b:7c:ed:31:14:e6:8d:9a:5c:71:
2d:97:88:b9:01:f2:4b:49:f7:93:8d:cf:fb:91:ee:
ff:7b:63:02:d7:b1:5e:fb:08:3b:df:c4:65:ea:9f:
25:8a:7f:89:0a:6a:f4:a6:37:bd:ec:e6:40:1d:f0:
f3:27:d7:d0:d6:39:dd:a2:10:84:1a:d1:8e:91:fd:
e7:f0:d1:1e:54:07:86:3c:cd:16:c8:05:81:b6:b2:
66:8f:68:d3:1c:c6:49:a0:65:ed:e5:24:a8:1e:71:
f5:e9:27:b7:ec:36:9e:fd:b4:74:eb:4e:b1:8a:7e:
4c:3d:da:37:1e:cd:7e:72:ef:e6:ab:04:7d:49:aa:
31:1f:f5:23:04:8d:80:9d:62:bb:4b:c5:b5:c9:aa:
80:0b:6f:18:33:dc:d6:90:99:a4:21:f0:8b:3a:e8:
1b:84:30:8e:5f:ca:ff:02:f7:19:f0:1b:84:07:e9:
1f:d8:6a:85:fb:f6:61:0f:b1:b3:5d:ab:4d:05:9f:
12:33:a2:b6:13:6c:47:a0:4a:a8:e1:96:bf:23:9d:
bf:e3:a9:bf:5e:df:67:fd:b1:fb:c1:1f:a4:e0:62:
9a:c1:3e:78:65:74:5f:21:f5:aa:36:53:3d:34:c8:
15:78:1a:f0:d1:f2:14:40:06:79:cb:d1:eb:dd:f1:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6F:A8:87:5E:00:65:BB:EA:4E:CB:B9:F6:9C:09:1E:B4:25:A9:A5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AW-oh14AZbvqTsu59pwJHrQlqaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c5:ae:2c:47:79:88:13:a5:0c:ca:1d:6f:24:4d:a7:23:5a:9f:
b0:ec:c0:c9:a1:cb:5c:29:3a:06:ce:2d:6e:d5:06:fe:12:27:
7b:11:d6:20:48:22:2e:5f:e1:ae:90:64:b9:26:f9:3c:df:d3:
eb:c8:52:f5:d4:e8:79:53:3d:fb:a2:87:7c:c3:4b:bc:4e:11:
67:ce:22:7b:80:cc:86:23:ce:63:5d:1b:ee:5c:29:4b:3a:c1:
41:94:04:c2:03:2d:64:59:de:aa:5d:05:12:8c:bc:bf:67:72:
53:91:ba:01:5e:96:b9:9e:26:f9:39:97:bf:0e:ed:17:bc:dd:
b5:9d:83:68:09:48:0b:56:22:a8:12:b2:43:ed:81:04:b4:62:
11:f5:62:c3:87:c0:44:68:03:12:31:78:83:2d:06:a6:30:be:
86:20:2b:68:b5:0e:3d:f7:ac:1d:6e:22:cb:2a:f1:c2:21:d2:
57:54:ee:7d:3f:07:cb:94:de:2c:92:16:c6:10:73:bb:0d:2c:
02:2b:41:d2:d6:90:6d:5e:1c:6b:0f:33:f7:83:48:7c:1b:10:
bb:c2:8a:98:2b:bb:4c:e3:9e:85:ab:57:85:eb:f6:37:ab:f0:
07:e1:73:07:5e:e1:1d:33:2f:39:91:a2:f3:e9:bf:a4:3f:b7:
bb:ad:a6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:52:28 2025 by rpki-client