Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OC1roxz1S5hk_Bzy0wY9jrsyRgo.roa
File: OC1roxz1S5hk_Bzy0wY9jrsyRgo.roa (raw, json)
Hash identifier: 8TJKwhFI+4AyA67YsGIj4kTq5vnjLp7NsjwBBNOhseQ=
Subject key identifier: 38:2D:6B:A3:1C:F5:4B:98:64:FC:1C:F2:D3:06:3D:8E:BB:32:46:0A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B34F94E59E128A199AC7E9DF4D479CE31
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OC1roxz1S5hk_Bzy0wY9jrsyRgo.roa
Signing time: Sun 15 Oct 2023 20:13:55 +0000
ROA not before: Sun 15 Oct 2023 20:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:34:f9:4e:59:e1:28:a1:99:ac:7e:9d:f4:d4:79:ce:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 20:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=382d6ba31cf54b9864fc1cf2d3063d8ebb32460a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:24:5f:0d:9b:7d:c9:b1:8f:e7:72:83:f0:43:
bc:76:44:b5:1d:5f:10:11:d7:27:44:0c:46:be:89:
e3:bf:2d:be:ff:d3:29:cd:27:12:74:36:7b:10:e6:
14:09:5d:09:57:81:26:ab:2f:fb:1e:9f:85:c5:e5:
db:53:2a:d4:7f:d1:52:29:7f:16:59:d8:bb:47:e5:
ce:1d:41:01:50:c1:0d:f4:cf:54:9e:aa:62:66:cb:
84:be:0b:7a:53:d0:af:fa:cd:c7:c7:78:da:ea:00:
b4:06:d5:79:ef:c6:5d:dc:9b:51:66:bb:0d:7d:48:
68:bd:0c:61:1c:c7:31:94:60:00:5e:76:28:76:2e:
da:90:bc:82:31:7f:5d:14:60:fa:d3:fe:3c:68:32:
1f:a1:ef:1e:3c:cf:69:6d:d1:26:ad:75:e1:8f:13:
53:3b:65:c9:e8:ce:a2:23:fa:3b:03:67:e8:eb:43:
dc:35:5a:bd:18:86:87:8f:a9:59:97:5c:1a:49:21:
87:02:a1:31:1f:af:93:5b:06:fb:e7:89:22:da:74:
57:e4:cf:4d:1c:1b:55:11:dc:93:ab:13:a4:bb:aa:
93:d2:2f:cc:28:e9:a6:54:ae:c3:78:d9:40:28:2f:
cb:8e:11:65:62:fc:2c:10:f2:7a:6e:c2:68:d3:47:
ea:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2D:6B:A3:1C:F5:4B:98:64:FC:1C:F2:D3:06:3D:8E:BB:32:46:0A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OC1roxz1S5hk_Bzy0wY9jrsyRgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:82:4b:9b:aa:e8:06:bd:ed:fb:02:62:bc:b8:48:50:77:b2:
49:6e:58:a5:aa:f9:05:cd:40:23:33:c3:b3:41:fb:f4:55:e8:
7e:7a:b1:6a:8e:9f:60:11:e6:84:65:d0:4d:c1:6f:ae:fb:0d:
b7:e1:e5:8c:1d:69:46:da:fb:32:f6:27:3f:ff:3b:1f:15:82:
c0:d2:84:d7:4d:0e:3d:43:d2:bf:b8:1d:35:d4:dd:ce:c1:be:
4f:c3:15:0b:0a:94:2a:45:cd:17:4e:e9:10:60:0a:03:82:3d:
49:e1:3e:8d:b9:5a:f5:35:40:b8:0d:33:fa:9d:5f:c6:f2:35:
9f:c8:31:0a:d9:26:8c:c6:13:44:8a:31:6e:51:69:00:63:7e:
a9:17:53:14:71:12:2b:8c:bb:21:19:f9:3f:28:9c:f3:e6:3c:
ad:76:3c:bb:08:5f:d9:c1:dc:44:94:63:53:52:6c:17:8b:00:
d3:9c:76:aa:4d:2d:a2:2b:a7:5a:ec:34:4f:82:33:31:f6:ce:
22:96:a7:2b:fc:04:27:58:10:93:da:3b:98:cc:d7:63:b1:de:
57:07:a0:44:b6:93:3f:56:18:a4:47:85:55:8c:db:cc:01:bc:
b9:97:77:05:fe:b3:7c:28:5f:d3:08:6b:5a:b5:ea:a2:a4:c5:
fc:67:a8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:13:26 2025 by rpki-client