Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ApzPPHsB7Wa_qiwWr3kSskntFX0.roa
File: ApzPPHsB7Wa_qiwWr3kSskntFX0.roa (raw, json)
Hash identifier: jgDRwEQ1pPl3VBbptVSfM6URPjGZ5PQtR2a8L9r+Axs=
Subject key identifier: 02:9C:CF:3C:7B:01:ED:66:BF:AA:2C:16:AF:79:12:B2:49:ED:15:7D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF9F722FE8B49B9AF82C83F165C895DA7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ApzPPHsB7Wa_qiwWr3kSskntFX0.roa
Signing time: Thu 23 Nov 2023 02:16:44 +0000
ROA not before: Thu 23 Nov 2023 02:16:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f9:f7:22:fe:8b:49:b9:af:82:c8:3f:16:5c:89:5d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 02:16:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=029ccf3c7b01ed66bfaa2c16af7912b249ed157d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ac:b8:6e:1b:08:aa:25:e0:d1:f4:74:d6:7f:
e4:8a:95:1c:b6:2c:d5:f9:a9:5d:f5:5c:1c:20:6d:
f9:48:51:cf:58:4d:f9:bb:36:7b:71:12:53:ab:5b:
3f:9a:db:36:3a:97:e5:cf:a4:eb:27:ad:5d:55:26:
f8:b8:6d:84:e2:98:bf:2a:ab:b9:39:55:f9:9e:9a:
78:6a:ba:9d:3e:af:c0:18:0e:4e:b2:1c:1a:6d:03:
0b:ed:72:da:da:47:37:38:ec:10:76:da:e3:b9:52:
f5:06:b9:cb:72:85:d4:cc:91:12:03:e6:ab:4c:d5:
02:e4:9d:ba:de:eb:01:f7:a5:bc:eb:e3:0c:9f:d0:
eb:c4:fc:bf:b0:f6:d7:f2:34:47:5c:ba:69:3c:bb:
6e:14:26:52:8e:e0:c3:47:e1:4c:d9:33:b2:cf:82:
eb:42:58:52:71:56:f3:c4:37:45:19:e7:4e:ae:13:
50:98:43:67:95:0c:9a:f1:0c:86:2a:c8:50:23:51:
a3:5d:1f:a9:92:08:08:69:b6:75:66:a8:44:1b:20:
25:ef:37:0b:99:87:63:ea:f0:de:f4:4e:f5:84:ba:
1a:ea:b8:6a:aa:2e:03:5f:78:62:fd:f6:2c:b7:84:
b2:4a:75:a2:08:d6:4b:d8:ad:1e:ac:bc:2e:6a:f9:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9C:CF:3C:7B:01:ED:66:BF:AA:2C:16:AF:79:12:B2:49:ED:15:7D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ApzPPHsB7Wa_qiwWr3kSskntFX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:89:64:bf:53:f6:5f:6a:55:24:5b:ee:7b:16:76:2b:a0:38:
85:f4:8e:e2:92:b8:93:2c:05:50:09:c4:1e:a9:94:25:42:27:
12:07:a5:88:a5:3e:f0:45:41:2b:aa:26:8f:14:7a:f1:15:71:
3c:1f:d2:a7:d4:85:01:24:b5:a8:34:8a:5a:3b:f2:51:4e:4e:
3f:eb:e2:b8:ba:ba:46:9c:a5:db:28:40:f7:8b:05:fa:cc:d1:
6e:73:85:d0:2b:0c:0f:de:5c:e1:e6:56:b7:f5:72:7f:7b:5e:
1d:19:e4:88:eb:94:1f:ae:07:78:4e:de:ff:2d:34:0d:46:95:
18:07:04:d1:55:bb:aa:c3:06:c1:50:97:0d:eb:a4:a2:6e:31:
b6:34:8d:e5:98:50:06:0b:15:56:62:ff:47:96:66:99:57:9e:
69:d4:5e:27:76:8c:26:9d:57:71:91:e5:02:e6:62:fa:1d:6f:
b8:c6:34:42:6f:31:0a:42:87:34:e7:6c:6b:7f:29:64:c6:35:
51:d8:4f:6a:56:93:88:0e:52:9c:7e:2a:8b:f3:50:a6:ec:2c:
6b:b8:1a:a8:34:07:72:c9:23:0f:41:98:4a:d2:13:bc:69:39:
51:87:96:d8:5f:d3:6e:da:89:7a:00:dc:cc:e0:36:a7:76:48:
5c:8f:53:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:29:06 2025 by rpki-client