Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DO4ejgoeWDAe1Y1gKtRAgd35vW4.roa
File: DO4ejgoeWDAe1Y1gKtRAgd35vW4.roa (raw, json)
Hash identifier: Z/fo1k0zR4+E7hoetQoU4Lrq01FWUd+FBPFExTdbnzg=
Subject key identifier: 0C:EE:1E:8E:0A:1E:58:30:1E:D5:8D:60:2A:D4:40:81:DD:F9:BD:6E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9E1A75B34EE3E23FEFB8B707C7EFA899
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DO4ejgoeWDAe1Y1gKtRAgd35vW4.roa
Signing time: Sun 05 Nov 2023 06:10:15 +0000
ROA not before: Sun 05 Nov 2023 06:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9e:1a:75:b3:4e:e3:e2:3f:ef:b8:b7:07:c7:ef:a8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 06:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cee1e8e0a1e58301ed58d602ad44081ddf9bd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:b6:8e:0d:3a:87:58:05:98:e0:5a:df:e2:
69:d1:47:c5:d9:fd:24:90:28:a7:5d:f7:e8:9c:a7:
22:22:bb:23:cf:a2:a3:65:aa:f1:d9:3c:f7:c6:c1:
1a:38:14:cd:07:52:fa:95:c6:26:e1:65:98:83:f2:
43:71:b0:68:28:80:ed:de:cd:1f:09:20:24:0f:c7:
e9:f8:0c:63:42:16:1d:77:e4:56:bf:31:3c:6c:dd:
82:0e:5b:08:40:cf:22:49:49:00:86:65:0e:30:66:
d0:23:72:10:d3:55:94:6b:cb:a5:d0:24:3b:0d:54:
6e:1d:37:fa:b0:46:d7:4a:d9:94:00:0e:96:c2:78:
15:d4:14:9e:fb:04:c6:25:c2:a8:cd:5a:fd:77:69:
22:84:ca:fe:d4:e4:27:c2:42:45:e0:55:bf:d3:7b:
1a:c8:04:5c:39:78:31:42:e9:87:9f:08:8f:c6:7e:
ea:39:d2:30:44:25:80:b0:53:9d:3d:ae:4b:b6:fc:
80:f9:53:71:15:7d:40:28:2c:e6:16:fe:02:98:9e:
6d:f8:97:ce:6a:7c:44:3b:f6:b3:f7:ab:2f:80:40:
ee:6f:03:b7:38:ae:27:46:b3:20:47:65:73:f6:b0:
02:31:bf:7e:19:a9:09:e6:2d:69:e0:67:aa:fe:c4:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EE:1E:8E:0A:1E:58:30:1E:D5:8D:60:2A:D4:40:81:DD:F9:BD:6E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DO4ejgoeWDAe1Y1gKtRAgd35vW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:e6:0a:30:47:15:ff:47:cc:1a:2c:a8:2b:45:77:c4:d8:3e:
ad:99:69:44:34:95:d9:fb:53:f7:c4:c1:aa:07:12:43:bf:dc:
5d:5f:fa:51:4a:9a:43:3b:d6:bc:69:f1:a7:79:f2:2b:aa:50:
91:5c:2c:61:3f:15:2d:8e:e7:25:dd:b8:85:cc:be:b0:6a:3f:
8a:e6:1e:7e:37:ef:8d:b8:70:52:ab:47:6c:4d:11:9d:f0:d2:
0b:99:d0:9b:17:28:2b:06:d7:29:a3:41:51:c3:77:cb:64:13:
74:61:32:80:e5:7e:f1:d4:4a:e7:d0:23:8a:ed:cb:13:5f:94:
c0:0e:01:97:3c:4b:22:90:1f:42:ba:5a:47:7f:fe:7f:66:80:
38:9a:55:ae:9d:de:d1:22:7e:de:31:de:32:fb:6b:18:a1:f9:
81:93:93:b4:46:5e:e1:c2:29:e9:23:83:88:57:89:11:67:ce:
fb:63:10:9c:51:ed:2d:99:42:6e:99:35:70:b2:04:3b:60:87:
46:90:be:83:89:74:36:58:c4:24:50:2a:f5:bd:a6:48:68:5c:
91:9a:4e:5b:31:5b:fe:d8:8a:aa:20:4a:6e:8c:40:24:d9:72:
ab:ca:df:80:54:d7:82:c5:29:d6:60:f4:2a:31:55:b4:11:62:
1b:c9:6d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:58:59 2025 by rpki-client