Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L__ca4Iu7ZwTCTGUDyyKPR3wRIw.roa
File: L__ca4Iu7ZwTCTGUDyyKPR3wRIw.roa (raw, json)
Hash identifier: MyBpO1cFRGE8gvf9ETWgZv8Jd0GGsnEH5cy+8mUO0Pk=
Subject key identifier: 2F:FF:DC:6B:82:2E:ED:9C:13:09:31:94:0F:2C:8A:3D:1D:F0:44:8C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B72537C94A4D99163F102F9059F161E22
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L__ca4Iu7ZwTCTGUDyyKPR3wRIw.roa
Signing time: Fri 27 Oct 2023 18:09:15 +0000
ROA not before: Fri 27 Oct 2023 18:09:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:72:53:7c:94:a4:d9:91:63:f1:02:f9:05:9f:16:1e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 27 18:09:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fffdc6b822eed9c130931940f2c8a3d1df0448c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:2e:94:c4:c8:e2:64:92:81:10:97:c6:eb:
90:39:88:da:84:8b:39:3e:1d:cd:ec:00:85:f5:d5:
c6:a1:69:d9:ab:71:04:9a:48:70:a1:73:fe:90:75:
a3:b9:b8:bf:06:a3:a6:7d:78:33:ee:62:49:51:e6:
08:4f:de:35:3f:14:e6:49:73:29:8b:d2:88:a8:be:
b5:3d:12:a1:8a:2b:65:8a:6a:2e:87:aa:9b:a8:cc:
4d:14:e4:9f:61:df:53:45:c8:de:14:cc:2b:96:a7:
dc:5e:cb:ac:4f:f5:3f:ec:09:f5:58:9c:f4:5d:d4:
54:63:98:33:5b:d7:ea:e2:9d:d2:ec:d1:6e:b3:d4:
04:26:5c:e3:fa:12:bc:c1:84:a1:f8:cb:d2:19:af:
71:1a:3c:9d:1a:65:95:21:00:a2:37:2f:e8:8c:41:
7f:01:ae:07:f5:62:d6:37:49:88:aa:5e:69:2c:fa:
21:f7:a1:cc:3f:94:d7:a2:be:45:97:56:3b:34:a8:
41:1d:73:09:15:cc:92:48:40:cf:90:6f:74:a6:1a:
6e:d7:fe:75:5f:53:2f:b8:c8:ae:80:60:99:68:56:
73:36:c4:30:ec:a0:3b:cd:b3:06:0a:77:3a:cb:d6:
9b:b7:05:28:2c:ab:7d:f5:59:65:84:0b:a1:80:3f:
c9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FF:DC:6B:82:2E:ED:9C:13:09:31:94:0F:2C:8A:3D:1D:F0:44:8C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L__ca4Iu7ZwTCTGUDyyKPR3wRIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:12:7a:15:18:df:35:cd:fd:d3:bd:71:23:ae:98:16:90:b3:
91:00:98:1f:4d:8c:dc:a4:0f:63:d6:a8:c4:1e:09:fe:b9:b8:
5d:28:00:20:00:73:ac:33:76:81:66:56:cf:c2:38:d4:73:30:
f3:7c:ee:22:b1:87:83:e3:2c:9d:e3:b8:1c:f9:ca:09:40:6e:
1d:e8:91:7f:08:e7:6d:b3:a6:2b:08:5e:ae:4a:6d:40:4b:9d:
40:3e:9e:91:0e:30:0e:51:b7:a9:b4:34:c3:f5:55:e8:72:63:
41:e7:62:65:86:ae:ef:77:52:1f:44:02:39:a0:ea:5f:40:af:
55:3a:fe:13:08:42:c2:73:5f:15:da:cf:a3:2a:d0:dd:de:95:
cd:f9:a1:c9:2c:dd:e4:0b:11:a8:80:21:4f:b1:a3:e2:20:b0:
6e:f3:fa:77:09:e9:17:bb:69:e7:7f:7e:d3:e6:7e:a6:53:ee:
7c:e9:6f:28:4a:dc:4e:84:ee:62:f7:22:21:b4:37:cb:bb:a4:
fe:49:b1:02:8e:58:5a:c6:4a:06:db:ab:50:38:67:3d:64:5d:
4f:fc:46:16:df:5d:0a:6f:6a:14:6e:a4:97:6a:6a:27:d2:be:
b2:f9:97:37:6a:b5:3c:61:2a:63:a3:5e:52:e8:0d:bc:89:8c:
55:55:fa:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:42 2025 by rpki-client