Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CrB4axyPG3orlT0zd_55JDusIu0.roa
File: CrB4axyPG3orlT0zd_55JDusIu0.roa (raw, json)
Hash identifier: +96OA6AvPbAS2HPsF3wy7ik5iYJGjX2iTXQZ4VE3qtY=
Subject key identifier: 0A:B0:78:6B:1C:8F:1B:7A:2B:95:3D:33:77:FE:79:24:3B:AC:22:ED
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3EA423E13C4D3E6130A99C0F175F34C7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CrB4axyPG3orlT0zd_55JDusIu0.roa
Signing time: Tue 17 Oct 2023 17:17:06 +0000
ROA not before: Tue 17 Oct 2023 17:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:a4:23:e1:3c:4d:3e:61:30:a9:9c:0f:17:5f:34:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 17:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ab0786b1c8f1b7a2b953d3377fe79243bac22ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:43:ab:96:01:d7:08:3a:ab:86:32:43:88:
5d:19:3a:7a:4e:47:8c:ff:ba:7b:ef:d0:4a:de:a2:
88:e1:34:d9:0a:17:8c:a7:3a:0d:36:73:d9:f9:fc:
38:4f:23:ab:31:af:05:c4:ad:4b:28:a1:cd:7d:9d:
b7:aa:4a:fa:6b:c6:86:24:68:bc:e8:08:ac:ab:fe:
59:b4:4f:70:50:59:c3:64:bd:a6:e9:af:dd:33:95:
9c:cb:7a:03:a7:2b:5f:32:df:37:70:ae:33:c3:47:
cc:99:16:68:12:53:94:3d:dd:37:56:4b:08:f8:77:
97:bc:7c:f2:c8:e8:db:12:a4:e9:78:48:92:97:c3:
b3:10:65:a4:49:aa:fc:d6:73:d3:04:a7:19:f5:6b:
4f:91:40:15:53:33:67:36:5d:4c:6c:d7:a0:ae:63:
61:3f:84:0d:b1:5b:81:27:7d:e1:fb:74:f2:bf:52:
ea:ee:a8:3e:23:b6:b4:b5:1e:4d:27:fa:e4:a5:32:
7d:b8:9b:da:80:05:39:66:a8:3a:fd:f6:d2:f6:31:
71:2d:96:b6:e2:c8:a5:3f:68:3f:61:17:8c:d1:06:
9c:aa:65:8b:e9:41:82:6b:7b:e3:5c:79:73:58:0b:
44:34:7d:ad:26:b9:51:35:4b:28:ac:e8:35:4f:48:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B0:78:6B:1C:8F:1B:7A:2B:95:3D:33:77:FE:79:24:3B:AC:22:ED
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CrB4axyPG3orlT0zd_55JDusIu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:d4:56:27:9b:45:b3:bc:6c:95:15:a7:11:de:04:61:1c:b8:
96:ab:59:24:58:9a:51:03:7d:e3:83:87:52:30:9e:f5:c5:7d:
90:a3:5c:04:d5:8a:73:10:14:a2:c7:94:9c:a9:82:30:a4:5e:
f7:58:bf:f9:be:45:d2:67:c4:69:cf:8d:5d:ae:a6:bf:58:ae:
b6:d2:54:22:d7:97:01:ac:75:56:aa:b0:a2:5a:66:b7:94:b9:
c7:60:6c:33:e1:0d:a6:bb:ff:8e:4b:4e:57:9b:93:8d:40:1c:
d9:71:0f:21:9b:41:f7:b4:39:dd:5f:e9:7c:c5:94:8b:a5:8b:
15:e1:c6:9e:14:9b:70:93:7f:36:a3:35:60:e0:b3:a5:9a:c4:
eb:30:37:05:3a:12:45:16:52:57:41:aa:67:83:f1:d6:5e:f0:
b2:75:a3:64:1e:19:18:a8:e4:f9:b0:68:c6:3f:58:2f:f6:07:
8a:88:74:70:91:45:5e:da:00:74:62:55:1c:21:28:43:4d:a0:
c8:ff:04:ab:cf:04:f4:20:5d:82:1c:93:2d:f0:93:8f:de:71:
ea:9b:92:e2:26:85:4d:52:02:b0:ad:9c:55:7b:e6:d2:03:da:
4d:f7:90:36:4e:8d:f9:20:af:01:67:39:62:23:59:fc:d7:7b:
a4:38:7d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:18 2025 by rpki-client