Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OfjKDaSrk-yppXGKmOQ1LvapzAs.roa
File: OfjKDaSrk-yppXGKmOQ1LvapzAs.roa (raw, json)
Hash identifier: Ia0V6qoUbZI+k2hXYN9xUxzp8hDnryp3zo0ubHYBrFo=
Subject key identifier: 39:F8:CA:0D:A4:AB:93:EC:A9:A5:71:8A:98:E4:35:2E:F6:A9:CC:0B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF496BD881809D25BFB86DC1FFB0835FE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OfjKDaSrk-yppXGKmOQ1LvapzAs.roa
Signing time: Wed 22 Nov 2023 01:13:21 +0000
ROA not before: Wed 22 Nov 2023 01:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f4:96:bd:88:18:09:d2:5b:fb:86:dc:1f:fb:08:35:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 01:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39f8ca0da4ab93eca9a5718a98e4352ef6a9cc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:e9:8b:e2:2b:5e:ef:27:1d:3d:dc:58:68:
e3:9d:fe:90:f3:83:dc:8c:e2:e2:1e:d2:10:3e:62:
5a:40:08:10:12:cd:db:36:a5:ba:0b:58:1b:0c:e3:
3f:e3:30:4f:b0:9e:0c:15:e7:ab:a4:50:98:8d:3d:
7a:f7:5e:a7:28:66:7f:69:23:e2:1d:26:db:4c:0b:
39:3c:25:a0:95:f6:58:7c:96:dd:0b:72:e7:de:bf:
c6:f6:95:03:51:df:dc:bb:d7:95:45:18:30:a2:39:
25:9a:71:ee:ed:67:2d:1e:3d:86:84:64:4f:25:a9:
3f:d9:e0:0e:fa:c3:e0:b1:20:11:94:a4:8c:b9:c6:
37:6e:bd:e0:25:1d:b9:ac:ee:aa:25:bc:f3:b0:e9:
47:f3:1a:09:56:e2:09:98:8a:8b:36:32:a7:13:26:
70:70:e5:ef:cb:22:1f:a6:ab:c7:eb:61:2c:9b:ee:
ff:40:73:a1:da:ba:28:9b:d4:01:62:66:2b:bd:bb:
71:b8:d4:b2:98:cb:21:4e:36:dd:79:74:f8:e8:fa:
b7:e2:4a:6d:cf:22:6e:29:6d:a4:ab:0c:fb:13:e3:
97:fa:62:62:82:97:43:65:7b:6a:c0:d4:9a:10:90:
fc:c4:d2:96:fa:38:fb:89:ad:f1:e7:02:98:ab:91:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F8:CA:0D:A4:AB:93:EC:A9:A5:71:8A:98:E4:35:2E:F6:A9:CC:0B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OfjKDaSrk-yppXGKmOQ1LvapzAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:ad:88:e3:43:a0:02:81:01:60:a9:c0:76:e1:aa:c9:ad:29:
40:49:55:38:92:fc:95:66:2f:bd:48:97:79:83:50:ff:f4:3d:
91:88:5d:10:be:07:ac:03:30:97:d9:fc:c3:e5:b2:e0:b2:15:
34:92:e0:f7:63:a3:74:11:ab:35:3c:a9:93:ce:92:5b:ce:77:
8e:3f:d8:e4:e8:2f:5d:3c:ca:11:fb:15:a3:9d:26:4c:bc:93:
5d:96:66:7a:17:ff:af:b8:c9:6e:0d:fb:5a:95:02:2a:ba:74:
48:98:ea:95:ff:e5:bd:9d:85:09:f3:d7:d5:70:18:a6:95:90:
d5:81:a7:e0:30:c9:b4:cb:42:25:60:a8:b1:a8:04:d1:d5:b5:
04:7f:71:12:c3:88:05:08:48:ae:32:5a:06:f4:ee:ec:ce:e2:
35:d8:60:47:b3:e7:21:94:8f:9e:36:31:cc:14:ab:76:be:fc:
79:da:4f:71:68:c8:aa:9b:e8:b4:18:aa:f9:27:cb:17:f2:aa:
63:86:d8:c4:a4:69:40:33:db:7b:00:98:1a:06:5f:83:dd:fb:
62:de:ec:7c:2d:d8:12:b6:bd:6f:d2:66:ca:04:ac:fc:eb:f0:
a6:fe:a2:1d:1b:23:c0:2b:6d:1d:ce:7f:d8:5c:d6:7f:14:2c:
fd:c8:9f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:21 2025 by rpki-client