Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Op2PRODpGzHaC3rODspdcc-MeHM.roa
File: Op2PRODpGzHaC3rODspdcc-MeHM.roa (raw, json)
Hash identifier: JZPZyafiy3sWuvi8l8TZ+eQBrgqxfFArlIHhSeGwQxU=
Subject key identifier: 3A:9D:8F:44:E0:E9:1B:31:DA:0B:7A:CE:0E:CA:5D:71:CF:8C:78:73
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BEDB9D7DEFEB7F1405081B4BC4C313E77
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Op2PRODpGzHaC3rODspdcc-MeHM.roa
Signing time: Mon 20 Nov 2023 17:14:21 +0000
ROA not before: Mon 20 Nov 2023 17:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ed:b9:d7:de:fe:b7:f1:40:50:81:b4:bc:4c:31:3e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 20 17:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a9d8f44e0e91b31da0b7ace0eca5d71cf8c7873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:4e:41:92:3c:81:07:ca:89:88:f4:f9:95:
8f:36:41:0b:98:64:72:d7:19:b0:56:91:e3:4c:17:
3f:a0:1c:47:f5:b8:5a:5f:50:08:87:1d:19:04:ec:
de:a7:c9:72:19:ec:0a:90:d8:30:49:71:01:d1:78:
a0:f6:e6:0e:ae:45:a5:3a:44:bf:62:98:ee:82:4c:
70:e4:82:14:8b:9c:9e:31:46:ab:33:fc:e5:0c:9e:
d4:53:6d:9b:90:87:35:ff:36:24:22:4a:aa:76:4d:
ec:42:e3:3c:f5:39:c4:51:25:d8:14:08:46:b1:a7:
df:4f:5b:50:1e:f4:09:0a:92:ae:74:86:8e:72:c1:
c8:24:36:c9:14:0f:b5:ed:18:47:e5:a4:cd:2b:b5:
bb:a9:3f:e2:8e:56:d2:25:f9:76:be:1c:25:52:ef:
64:cd:02:21:e1:ea:36:be:47:dc:bc:37:1a:df:0a:
53:4e:4a:a1:fb:46:21:13:a2:45:97:1a:17:11:a3:
3c:a8:6c:69:b7:67:40:14:e0:be:e4:56:57:43:5e:
8f:3e:c8:ae:50:a6:f2:ca:75:99:d6:d6:69:77:e2:
6a:c6:b3:82:3a:1d:61:89:97:37:91:29:d6:0b:6a:
ca:30:80:ea:68:4d:94:0f:a8:92:cd:67:70:5d:e9:
7b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9D:8F:44:E0:E9:1B:31:DA:0B:7A:CE:0E:CA:5D:71:CF:8C:78:73
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Op2PRODpGzHaC3rODspdcc-MeHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:eb:ea:11:07:92:a1:f0:50:67:cb:53:61:e2:6e:1c:8d:e9:
a6:c6:e0:51:58:86:a3:0a:f9:99:27:40:23:e8:9f:c1:f9:74:
4e:1b:0f:dc:66:92:d2:03:8e:b4:0d:b5:4e:87:ef:57:14:d6:
44:bf:72:8c:f9:d6:7f:0d:72:14:a9:82:69:58:d9:eb:6a:fd:
83:66:65:4a:f5:f1:da:e0:84:db:75:1b:56:84:32:4b:34:7b:
3e:33:68:de:ce:ff:88:e4:86:dd:4b:b1:ee:33:97:c8:a9:df:
2c:ab:74:a6:0b:bb:8e:59:26:9a:3f:3c:c2:57:90:b5:4b:67:
f6:7f:b2:05:0d:2e:52:39:9d:a6:20:7f:b4:43:ef:9d:31:08:
e5:dc:a0:20:ce:96:0a:c8:c4:7b:5a:b4:90:c9:eb:cc:5d:31:
19:9c:40:07:75:fd:e5:43:1b:31:c8:0e:56:6c:4c:44:02:36:
f5:f8:cc:34:c1:de:fe:e3:b3:fe:df:fc:ba:fe:2e:d3:49:1d:
90:de:99:c6:28:8b:a8:35:59:c6:f9:cf:28:fe:da:4f:85:03:
d7:67:63:c5:83:21:a3:66:a0:5c:3a:c0:74:d4:ec:d3:4c:3a:
50:48:f1:11:e6:f2:48:93:2f:6f:6a:64:ba:de:66:6d:d2:d3:
65:51:e3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:02 2025 by rpki-client