Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/D-i5cJZvGLUJ7rs1iHuNkLCPWAk.roa
File: D-i5cJZvGLUJ7rs1iHuNkLCPWAk.roa (raw, json)
Hash identifier: dMpEB5HkFryie3rPnQB/11+2QuQ3KsxL0gUbCKdzFqs=
Subject key identifier: 0F:E8:B9:70:96:6F:18:B5:09:EE:BB:35:88:7B:8D:90:B0:8F:58:09
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C36E52122487F84C012843964DB75E469
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/D-i5cJZvGLUJ7rs1iHuNkLCPWAk.roa
Signing time: Mon 04 Dec 2023 22:13:54 +0000
ROA not before: Mon 04 Dec 2023 22:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:36:e5:21:22:48:7f:84:c0:12:84:39:64:db:75:e4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 22:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fe8b970966f18b509eebb35887b8d90b08f5809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:9c:bb:26:ea:51:b9:54:eb:29:cc:62:64:
39:fa:fa:c1:eb:08:68:04:e1:fc:13:76:1e:5e:67:
d2:7d:f8:81:62:d9:3a:68:3e:bb:73:fb:4a:00:17:
6d:8a:80:04:df:aa:54:e9:66:f7:1e:b6:02:04:c8:
b9:b3:45:46:aa:ce:12:77:01:11:0d:ad:9c:20:21:
e5:17:47:94:13:b1:7b:02:65:75:e7:76:26:ab:4a:
64:e0:99:6d:5a:e1:e1:38:73:ae:86:23:26:d8:f9:
81:88:09:b1:09:16:42:47:69:1b:d0:f2:2b:1a:64:
cf:52:c5:d3:42:43:84:7a:09:49:25:5e:99:99:c5:
b2:60:f1:a6:9e:71:50:64:cd:fd:73:2b:e1:16:3c:
ae:cb:a0:3a:02:ea:df:a5:a5:60:60:4e:3b:87:a7:
ea:2b:83:2a:70:62:c7:b9:73:bc:5f:c5:af:f5:25:
ea:ff:f9:05:bf:83:ff:b1:fc:20:75:94:26:36:82:
71:63:b0:b7:61:f8:9e:60:04:af:ef:98:f9:8b:64:
33:e0:b9:fd:37:84:86:0f:06:ed:1e:06:95:f8:79:
8c:d9:e8:92:e8:ed:e8:28:e2:4f:c9:5d:58:05:b1:
00:c5:d6:fc:f6:79:74:de:e8:d5:a4:d8:5b:1e:be:
b4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E8:B9:70:96:6F:18:B5:09:EE:BB:35:88:7B:8D:90:B0:8F:58:09
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/D-i5cJZvGLUJ7rs1iHuNkLCPWAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b9:7e:64:c6:6d:f4:a9:a1:6f:9e:90:81:fc:0b:ef:14:86:4b:
c6:88:44:0d:62:03:27:61:6e:cf:7c:4d:54:d3:d7:3e:6d:1d:
02:52:e4:de:81:e4:83:5c:65:48:ee:cd:35:3b:da:8b:e1:c0:
e5:a9:a4:c4:a8:1a:f9:28:a1:3b:9d:23:da:45:c9:69:38:07:
06:16:db:ac:4c:e1:e3:94:c3:ac:77:d1:67:ea:50:ae:b9:43:
0c:34:a6:2f:b0:09:dd:39:b3:0a:b1:49:d7:c9:cd:e7:f2:70:
3c:59:22:aa:c7:93:76:19:2c:e6:96:8f:d2:e2:57:cd:08:e6:
e5:4b:9f:87:fe:c4:70:32:98:c1:ed:7e:17:19:08:85:83:e5:
ee:fe:57:9b:23:d2:3d:49:1f:d9:e2:2a:9f:52:14:44:af:8e:
8a:48:b5:82:c9:42:0f:8d:9b:45:2d:db:89:5f:16:12:f7:ea:
8a:6b:79:9e:b1:dd:20:c0:00:bb:4e:1e:e3:9e:41:4a:b4:b3:
4e:d8:a8:8a:9b:55:82:2b:e7:7e:a2:84:df:d3:45:40:23:4b:
e4:51:e4:43:db:20:8e:3b:9e:61:5f:18:d3:88:45:18:79:f9:
49:fe:09:e7:89:a0:43:58:66:ce:f8:ad:27:5e:f3:b0:62:da:
62:fe:72:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:15:15 2025 by rpki-client