Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AWXQyXWMVb3VUaO9xY9H1TzO1DM.roa
File: AWXQyXWMVb3VUaO9xY9H1TzO1DM.roa (raw, json)
Hash identifier: 1rrSG743taidtqVDVsUbqvbeM4BmGwAEnteQZey66f4=
Subject key identifier: 01:65:D0:C9:75:8C:55:BD:D5:51:A3:BD:C5:8F:47:D5:3C:CE:D4:33
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4DD48741A2475BCF7211B68923D83E61
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AWXQyXWMVb3VUaO9xY9H1TzO1DM.roa
Signing time: Sat 09 Dec 2023 09:07:03 +0000
ROA not before: Sat 09 Dec 2023 09:07:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:4dd2:d82/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4d:d4:87:41:a2:47:5b:cf:72:11:b6:89:23:d8:3e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 09:07:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0165d0c9758c55bdd551a3bdc58f47d53cced433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:bf:87:91:78:9f:f8:14:5f:4e:32:56:84:
34:d3:3b:7b:55:41:99:a6:31:53:f6:54:7d:20:fd:
88:45:c7:50:61:40:11:0c:42:73:f1:d7:38:10:17:
ec:b3:16:93:9e:65:24:36:1a:f2:10:05:a4:11:51:
ee:01:2f:f2:4e:43:8d:f7:78:2f:e0:04:5c:e8:39:
d8:ca:ce:6e:83:a5:5c:21:31:e3:01:33:a6:d7:8e:
d8:e2:5e:91:69:3a:b6:23:23:70:6c:32:0e:43:76:
e7:01:c1:7c:cc:73:9a:5e:a6:80:52:e3:ec:e7:bb:
a2:5a:fe:b5:ba:65:39:63:be:34:4a:39:bd:63:4f:
0a:69:70:74:b8:cf:10:eb:af:3f:57:51:78:a4:7d:
27:e5:89:f9:c4:09:26:80:8c:33:ed:3b:ef:88:d4:
9b:fb:c4:71:6c:41:d7:20:46:01:38:d0:9b:ee:22:
ea:23:47:77:78:c2:bc:cf:0d:6f:31:53:ce:07:6b:
42:2b:51:4b:8d:57:84:49:73:91:88:c6:2c:b9:d6:
a4:10:5d:e0:10:17:74:1d:96:b2:84:39:74:fb:e8:
b2:bd:c8:49:ba:5f:b8:2f:28:27:d4:72:b6:47:4e:
58:74:49:79:cb:47:bf:36:9d:dd:a5:d3:aa:0c:bb:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:65:D0:C9:75:8C:55:BD:D5:51:A3:BD:C5:8F:47:D5:3C:CE:D4:33
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AWXQyXWMVb3VUaO9xY9H1TzO1DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:c9:4e:ca:a0:9f:ca:54:f6:d2:bd:31:b2:cf:fa:fe:d1:36:
7c:ac:c3:01:57:f3:93:27:8d:b6:45:ed:69:32:55:e5:01:b4:
b7:eb:55:4c:c7:9e:52:e1:67:d9:bf:32:a4:3c:5c:2e:48:91:
74:62:fd:49:ae:f9:5e:4f:6c:97:77:07:f9:87:a6:0c:66:71:
b7:27:04:fd:06:7e:f6:84:a2:12:e3:f4:86:46:c9:bf:09:d4:
8e:ad:05:e7:14:6f:af:fe:2f:fd:06:57:05:21:7f:da:e6:a5:
f5:49:77:5a:26:41:a6:80:e9:13:66:ef:bd:0f:b7:fc:61:0d:
8c:a6:7f:3f:76:db:f3:27:c6:8b:74:b7:ce:73:1f:9f:14:41:
f6:76:1e:a5:69:b1:43:22:76:45:50:8b:eb:ac:df:1c:e2:c7:
af:cd:8f:92:86:23:af:ae:e5:c9:b9:7a:1d:86:c3:01:6c:c8:
be:83:9e:92:47:82:a6:f3:79:ca:d4:bb:ae:80:57:7b:8f:c5:
96:61:44:12:7e:b2:43:4a:59:22:f1:b1:b3:b4:a4:ec:cd:59:
a4:bf:96:e0:4b:6c:18:4e:a9:8b:b8:ef:0e:f8:f8:d3:68:ce:
26:20:42:6b:27:e5:ee:ed:fe:4d:b0:b2:06:e0:6e:b4:77:8f:
07:3e:90:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:44 2025 by rpki-client