Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DWDjwOVX9bYHVnvOA4kDFNo83Bs.roa
File: DWDjwOVX9bYHVnvOA4kDFNo83Bs.roa (raw, json)
Hash identifier: JlxWPpYuUM2nLckvkP+AVZUZ7ONnfgeMP+XKRTgWVCg=
Subject key identifier: 0D:60:E3:C0:E5:57:F5:B6:07:56:7B:CE:03:89:03:14:DA:3C:DC:1B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B435BB9E9F60F9C641C9CA4B00252D3FF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DWDjwOVX9bYHVnvOA4kDFNo83Bs.roa
Signing time: Wed 18 Oct 2023 15:16:06 +0000
ROA not before: Wed 18 Oct 2023 15:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:43:5b:b9:e9:f6:0f:9c:64:1c:9c:a4:b0:02:52:d3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 15:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d60e3c0e557f5b607567bce03890314da3cdc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bb:67:a9:cf:86:3b:1f:c1:b5:67:97:fd:81:
51:f8:a9:22:b7:1d:47:2e:65:da:e1:1f:16:a9:53:
5b:c6:f7:c3:38:a0:a6:a5:15:62:e2:40:f1:1e:8d:
a1:da:06:8a:10:8c:6e:18:e5:f0:fa:a9:04:1b:6c:
67:62:ac:30:a0:94:3b:22:d8:97:46:4d:ec:ea:1d:
34:7b:ba:52:e4:31:ad:5b:94:2b:69:3a:63:39:da:
14:0c:2d:ad:84:86:9b:f4:75:c1:9d:fb:05:28:b5:
8e:81:29:be:a6:c6:9e:40:e5:45:ed:b3:63:73:f2:
8c:4a:e9:c4:94:ce:22:ed:6e:47:87:07:bc:3a:ef:
bf:23:ad:4d:0c:64:cc:f2:75:6c:43:7e:bd:2b:96:
f7:39:be:99:3b:b3:b9:8d:df:e3:3e:11:68:09:30:
a7:75:6c:b3:32:94:c7:f7:eb:a4:7b:54:5d:31:01:
01:c8:9e:c2:25:e4:1d:aa:86:40:ce:03:15:7f:16:
ff:3d:3c:35:af:11:90:cb:aa:e5:39:c0:c5:95:a1:
e3:61:c3:4d:1a:c4:e4:a8:de:75:f2:9a:63:b5:0f:
9b:88:e9:7c:73:cb:77:e3:39:48:6a:94:6f:f3:fd:
ee:6a:72:69:da:47:ab:f3:f0:86:3e:cc:24:14:bb:
90:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:60:E3:C0:E5:57:F5:B6:07:56:7B:CE:03:89:03:14:DA:3C:DC:1B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DWDjwOVX9bYHVnvOA4kDFNo83Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:1c:21:04:76:64:f0:8e:74:13:e1:fd:c5:71:9b:85:95:25:
9f:4e:be:6e:bc:3e:73:ff:0a:e8:3f:fe:54:28:29:16:2d:50:
cd:fb:b0:ae:3f:39:7f:5d:a5:b0:3f:88:36:cd:9e:80:c4:88:
1d:f6:24:d0:97:c4:d6:51:e0:d0:e1:b0:b2:72:5b:af:9d:77:
da:32:eb:df:f6:47:88:03:99:fd:6c:51:b0:ef:23:a5:56:70:
ef:b9:63:e4:c2:29:c5:19:03:3d:45:d5:15:7e:96:95:32:00:
6b:16:c6:98:b1:52:85:aa:20:2f:72:14:01:ae:aa:d4:23:20:
63:7d:dc:54:19:d8:1c:2e:1c:67:bf:f6:77:87:ad:5d:e5:60:
8d:d5:46:a8:0d:29:f5:07:b8:47:47:ed:dc:0e:6d:9e:ef:9b:
dd:06:e8:fa:12:5e:0c:7b:bc:b5:0c:7e:80:0c:4c:67:60:7c:
13:a6:79:55:fe:77:ab:f9:55:06:d2:1f:a7:15:24:f4:c0:35:
3e:17:ec:2d:31:3e:01:e0:dc:2f:d2:e4:de:e7:f5:1d:24:17:
6e:15:43:1b:6a:41:71:ef:07:0c:f1:26:bf:4a:9b:05:9a:86:
82:78:85:dc:04:18:6f:57:37:60:e9:4e:41:a4:87:cf:0d:a5:
1a:44:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:27:44 2025 by rpki-client