Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N1j0IGD5equqwnKNtfvKtP60_Ow.roa
File: N1j0IGD5equqwnKNtfvKtP60_Ow.roa (raw, json)
Hash identifier: 8UP335m7q3wde2y3dc4CIBFrGmnP0rzjlKRp5ot8Tag=
Subject key identifier: 37:58:F4:20:60:F9:7A:AB:AA:C2:72:8D:B5:FB:CA:B4:FE:B4:FC:EC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8C14333756CD72D946AA09CADFC00937
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N1j0IGD5equqwnKNtfvKtP60_Ow.roa
Signing time: Wed 01 Nov 2023 18:10:15 +0000
ROA not before: Wed 01 Nov 2023 18:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8c:14:33:37:56:cd:72:d9:46:aa:09:ca:df:c0:09:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 18:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3758f42060f97aabaac2728db5fbcab4feb4fcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:b2:18:3f:3e:0d:d1:af:3d:54:85:c7:00:
68:03:97:3b:49:78:2f:49:5d:e2:6d:a5:dc:55:80:
51:68:a3:d9:2c:e6:5f:9d:f4:92:24:62:aa:a9:e6:
20:fb:b3:55:2b:79:d3:4f:c7:7c:45:97:34:43:19:
17:33:09:59:33:d5:e8:65:5e:bf:0c:4c:38:c5:b9:
43:72:32:d1:f5:16:d8:60:60:f6:d2:98:31:c4:3b:
74:fe:5e:b2:8b:58:a3:e1:0c:9d:c7:01:80:39:4b:
0f:6e:84:77:79:fe:e4:2b:34:d8:45:5f:9a:d2:f1:
28:7e:35:7a:19:ae:1f:e7:82:63:ca:81:b0:0b:5b:
be:ee:f4:32:cb:e8:bf:26:af:c9:fb:85:d9:34:8b:
c8:30:6d:34:9e:f0:75:12:52:76:c9:3e:95:e9:c2:
13:ce:32:2c:33:67:c4:bc:30:8d:24:de:ed:b6:27:
fb:c5:e7:49:19:e3:90:dc:73:f1:b2:fb:79:ea:cf:
b3:a4:3f:4a:b9:09:ed:e9:3a:6e:b2:b9:c0:03:46:
cb:7f:c6:dd:95:0c:c0:ed:ee:9f:e1:8a:bf:ca:47:
7f:a9:f4:b4:fd:c4:a1:10:36:db:97:33:fc:b9:82:
c3:b5:e1:70:ab:dd:dc:38:e6:98:29:e6:59:02:e3:
ae:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:58:F4:20:60:F9:7A:AB:AA:C2:72:8D:B5:FB:CA:B4:FE:B4:FC:EC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N1j0IGD5equqwnKNtfvKtP60_Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:e1:06:e5:5a:fc:2b:d0:63:f0:90:89:31:88:4e:88:ca:54:
98:ed:c6:89:89:f4:03:9d:29:17:b2:31:55:23:8a:75:33:6c:
09:21:47:4b:28:f7:fa:fa:b9:75:75:77:28:0e:de:34:92:bd:
a0:57:6a:4a:a6:ff:6d:66:07:20:8a:98:36:6a:57:ff:fb:76:
c7:16:3c:99:f2:2e:86:49:6d:d2:2d:0c:15:0d:33:67:b9:ce:
a3:64:96:d7:0b:b7:c8:e7:21:66:5f:ab:3c:bf:08:ad:33:80:
05:e2:25:0e:15:ad:28:b5:0e:b5:48:fc:6e:e4:7f:44:34:6b:
1d:33:f2:cb:15:71:e0:e8:79:f8:b4:77:0a:af:b3:9e:cf:48:
fb:c8:73:4a:67:74:c4:01:2b:3a:44:1d:c7:66:f6:cc:1e:bf:
81:5e:8b:59:2f:22:08:76:3b:bc:19:b6:bc:e1:53:1e:57:7c:
4d:6d:31:39:ca:3a:4f:e6:00:38:35:ca:16:ec:ef:3e:c5:50:
3e:37:65:4d:ad:0d:b7:bb:25:f7:36:17:ca:09:dc:30:1e:fb:
ea:5a:b9:a9:4e:5b:00:13:b7:a1:fd:1d:ac:61:3e:ca:a6:62:
60:f5:4c:aa:f7:25:11:ca:28:6e:bf:30:81:54:69:ab:ee:ff:
eb:5f:76:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:50:04 2025 by rpki-client