Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/B7vs7fVGX59EO3kwNHPKFxhUauE.roa
File: B7vs7fVGX59EO3kwNHPKFxhUauE.roa (raw, json)
Hash identifier: DDQFHD6auWrEVkn8u4dVYZkU1Snaka86UFwrZ5C8t90=
Subject key identifier: 07:BB:EC:ED:F5:46:5F:9F:44:3B:79:30:34:73:CA:17:18:54:6A:E1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C055368B5C5E0F7F509AFDA1A6601C303
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/B7vs7fVGX59EO3kwNHPKFxhUauE.roa
Signing time: Sat 25 Nov 2023 07:13:21 +0000
ROA not before: Sat 25 Nov 2023 07:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:05:53:68:b5:c5:e0:f7:f5:09:af:da:1a:66:01:c3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 07:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07bbecedf5465f9f443b79303473ca1718546ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d5:80:77:df:9f:52:67:f0:e5:10:53:ba:4b:
1f:21:f6:01:6d:21:91:2b:0c:4f:b7:97:af:ee:0c:
6a:d8:f9:d1:8d:70:a6:c9:5b:5d:98:b8:a2:93:25:
63:db:52:64:f0:54:c8:9c:2d:8f:bc:4e:61:27:84:
51:d3:80:c8:a4:ee:96:88:f3:54:36:3a:4d:b1:40:
f9:99:ba:a0:63:8b:93:f2:33:ad:21:ca:8e:c5:aa:
85:74:2e:fa:0d:44:42:66:72:07:8f:2c:41:bb:c7:
0a:ce:46:6e:19:8d:4d:4d:04:9a:f1:c7:c6:d8:2e:
ba:b9:6d:04:38:50:61:f7:01:26:6a:02:8d:1f:b0:
a5:a4:26:94:1c:1a:dd:1a:5c:a2:e0:ec:7b:0e:9b:
bc:2b:60:ad:70:a6:7a:fe:29:9a:eb:8e:5b:db:8a:
43:8c:7e:c6:3c:83:cc:8f:ff:e7:f7:06:d2:2f:a1:
8c:bb:cf:04:6b:1e:96:89:60:f6:79:e8:05:8f:cd:
e0:54:df:26:fc:bc:6e:0a:51:52:89:36:ec:54:b9:
5e:cd:40:6f:39:9c:39:09:26:24:d0:b2:47:71:01:
7e:d2:18:33:85:53:bb:19:9f:65:11:5e:4d:ca:01:
c4:48:94:e5:60:f9:82:14:ba:69:30:13:20:89:4a:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BB:EC:ED:F5:46:5F:9F:44:3B:79:30:34:73:CA:17:18:54:6A:E1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/B7vs7fVGX59EO3kwNHPKFxhUauE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:72:1f:83:58:9c:0a:c9:4b:de:83:48:f0:8a:c6:71:a3:ce:
a1:68:9b:5a:51:a5:24:9f:4c:ef:27:c9:53:5a:60:20:d3:eb:
af:6f:dd:4a:3f:d6:d8:86:39:93:a6:3c:b6:16:91:b5:19:da:
66:75:96:d6:d5:c0:64:14:4c:a8:13:d3:b4:a2:c8:c9:55:9f:
c2:f5:27:9f:a4:94:4b:a9:6a:54:d1:c3:dd:d3:20:7b:2a:8b:
2c:8b:db:dd:cd:56:84:eb:d7:4b:35:c5:aa:e9:1a:87:48:49:
06:c7:2c:f4:0c:fa:fe:ee:69:3b:31:6c:ea:4c:b0:5c:63:51:
de:59:1d:f2:ff:d4:8d:f7:2a:58:4c:43:1e:4c:b4:b0:4a:c9:
8f:d6:62:4c:6e:6a:82:b5:6b:94:e0:8b:a6:44:37:bb:fe:47:
5a:47:b3:45:1a:9d:00:7b:86:94:cd:de:96:69:01:eb:99:9a:
23:c9:79:b0:47:46:6c:d6:7c:1d:e1:84:90:b4:e9:55:e7:b5:
21:88:b0:b8:ed:c9:17:51:87:5f:b1:95:1c:e9:92:4e:c5:d8:
5f:d8:ac:5f:8c:90:d5:fe:73:e0:19:66:7e:cd:84:8d:b8:c1:
20:52:c8:cc:32:e5:dd:bd:88:e8:51:cf:50:ed:e7:c1:77:f6:
1a:40:c9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:50:00 2025 by rpki-client