Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DsKC3bQA-wJO5arUCTV3ATbl3d4.roa
File: DsKC3bQA-wJO5arUCTV3ATbl3d4.roa (raw, json)
Hash identifier: Lxs8C7/1/xB1TKA1z1rh3J/i9Z5Gkg0KOBuQay7Ooqs=
Subject key identifier: 0E:C2:82:DD:B4:00:FB:02:4E:E5:AA:D4:09:35:77:01:36:E5:DD:DE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BABA3C2BE0EE8B0A1949AFF7579E7C6ED
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DsKC3bQA-wJO5arUCTV3ATbl3d4.roa
Signing time: Tue 07 Nov 2023 21:15:17 +0000
ROA not before: Tue 07 Nov 2023 21:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ab:a3:c2:be:0e:e8:b0:a1:94:9a:ff:75:79:e7:c6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 7 21:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ec282ddb400fb024ee5aad40935770136e5ddde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:55:ac:9d:b3:25:ad:1b:03:d1:8f:cc:b2:
da:0e:c1:f5:04:39:72:97:f6:6f:04:15:37:4a:7c:
ef:e2:51:f9:7b:8a:2b:3c:23:20:f4:4c:55:3a:b2:
22:65:0c:83:16:5f:67:15:a1:56:8b:5d:3d:fe:97:
6a:92:dc:a5:65:40:92:f2:d8:a2:b8:d6:d6:dc:58:
48:14:03:22:98:1a:1a:ad:c0:eb:f3:58:11:3b:96:
12:15:bd:82:00:db:5f:24:33:ab:a5:ca:34:e5:d5:
e9:5f:4b:13:a8:10:ce:f4:d9:0b:62:4d:28:62:eb:
a0:48:4f:4b:85:b1:c2:9c:e5:6e:31:9c:7d:93:8d:
22:f4:9f:51:e3:f7:17:c9:f1:35:a3:78:32:e0:59:
63:a1:f5:db:6b:6d:24:26:99:fb:4b:5d:b7:09:28:
1b:02:f8:f9:3d:a5:44:d6:ac:9d:e8:a7:ab:f5:f6:
71:61:20:99:ec:e3:4d:50:be:ca:5e:b0:b6:4c:0f:
23:16:ae:d7:15:d2:82:ca:bc:ea:ee:3b:30:23:4f:
a2:44:d9:82:cb:06:b9:b7:4e:7f:11:18:b1:74:fc:
9c:fd:cb:ac:c7:ef:34:fc:3a:81:5a:80:5a:c1:30:
09:69:14:eb:a1:72:d4:7e:2c:d1:a0:6e:ce:32:fb:
0e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C2:82:DD:B4:00:FB:02:4E:E5:AA:D4:09:35:77:01:36:E5:DD:DE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DsKC3bQA-wJO5arUCTV3ATbl3d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:0d:3c:8b:e1:ff:56:ef:07:1c:03:25:58:78:68:22:c0:90:
c2:ab:9e:fc:5d:78:cc:65:90:de:25:ac:cc:54:00:84:94:5f:
2e:c5:78:4d:dd:b5:6b:20:a7:c7:fe:2d:95:f9:ff:13:7a:67:
0b:03:82:c3:19:e5:4d:9e:e9:e3:60:bf:fe:f4:dd:88:82:6c:
d2:73:f7:6a:f7:5d:f3:3d:18:3f:53:f8:af:ea:03:8a:e9:63:
10:2b:9d:e9:8e:26:81:1f:9a:12:cf:3d:18:3d:43:21:bd:f8:
36:df:b4:12:b4:98:3b:11:f6:21:cf:fd:08:9c:da:af:9a:ca:
e1:e8:66:fc:e7:6f:8b:0c:9f:df:9f:bc:fb:82:f7:b8:b9:7c:
cb:60:51:e6:b2:7d:91:e1:c1:03:a9:32:18:68:b2:da:59:51:
87:2d:08:e0:89:0a:99:4d:d6:64:51:85:67:c3:22:ec:ca:e9:
86:aa:4b:78:ec:a8:29:ab:94:10:dc:45:0a:c8:5f:8d:f4:70:
92:8b:19:69:9e:8e:bc:bc:f8:66:25:ab:9e:af:9f:85:3d:a7:
8c:0a:4a:0b:65:99:cb:9f:16:e0:2b:36:65:7f:8e:2f:d3:cc:
77:b9:e5:d3:88:80:16:bd:27:94:ea:10:79:cb:ba:c3:cc:b4:
49:1f:ce:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:51:26 2025 by rpki-client