Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R4ZB7r0rII_DBD1EnmlF2qg_KPk.roa
File: R4ZB7r0rII_DBD1EnmlF2qg_KPk.roa (raw, json)
Hash identifier: ucxaeU8Eq/6ZLS+LwwIWLGeug5B03zQEv6GEs0ZZZYs=
Subject key identifier: 47:86:41:EE:BD:2B:20:8F:C3:04:3D:44:9E:69:45:DA:A8:3F:28:F9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B56ABB7BABDFB582F1660AB4C049AC5CD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R4ZB7r0rII_DBD1EnmlF2qg_KPk.roa
Signing time: Sun 22 Oct 2023 09:16:16 +0000
ROA not before: Sun 22 Oct 2023 09:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:56:ab:b7:ba:bd:fb:58:2f:16:60:ab:4c:04:9a:c5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 09:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=478641eebd2b208fc3043d449e6945daa83f28f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:25:ee:5e:83:b0:23:32:e9:01:f3:e3:16:c0:
cb:81:7a:2a:73:34:98:62:dc:25:fa:c2:6c:f6:30:
8e:a0:8a:ea:84:29:b9:c8:19:26:0d:16:74:cd:3a:
48:ff:4a:b0:2c:11:ca:59:af:14:8d:41:12:00:d9:
d8:5b:c5:09:48:3c:13:76:22:7f:8e:7b:e5:c5:fd:
a9:ec:67:5f:f2:b5:14:80:c6:d6:b3:af:98:5e:b8:
76:87:b2:a7:86:5a:96:f3:fa:f0:21:cf:67:7a:a2:
4f:e8:7d:bc:16:23:e8:b6:33:1a:27:32:fc:9e:25:
cf:2f:c6:9d:53:b9:7f:fc:3f:0c:15:52:44:f1:c9:
c3:4a:1c:58:2c:0b:ff:81:a4:6d:d6:3d:bf:07:c0:
f2:0c:88:e2:b7:29:98:b1:34:25:37:47:bd:ae:ec:
35:2f:b3:f4:31:3c:7e:b9:fd:03:32:fb:42:4d:a6:
49:ea:16:af:4b:e9:7e:f7:18:44:b2:34:20:f8:f8:
d9:12:54:1f:02:7d:a1:60:13:97:13:c7:c5:13:73:
04:c5:b6:55:68:07:35:a7:58:28:19:3d:fe:e1:08:
6a:c2:a4:b4:b3:35:5f:97:5c:48:9e:b6:de:e2:b0:
c6:e0:c7:e2:71:4e:41:f3:d0:01:a6:f5:37:e2:46:
3c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:86:41:EE:BD:2B:20:8F:C3:04:3D:44:9E:69:45:DA:A8:3F:28:F9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R4ZB7r0rII_DBD1EnmlF2qg_KPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:10:41:15:ce:49:50:d6:b4:0a:80:26:48:af:5c:92:b7:cf:
5d:12:cd:35:91:e6:65:5c:68:57:6e:2e:59:b5:a0:6c:f7:5e:
28:d3:73:70:12:e9:a1:a9:07:1e:4e:a4:cb:b3:89:42:06:1f:
0e:b7:be:5d:67:f2:c8:74:23:82:c2:a7:08:f0:0d:b4:bf:82:
2f:65:2f:d9:f5:e2:e1:aa:34:5c:25:c1:85:6c:ba:bb:50:c7:
a1:49:4f:4d:c7:4c:ad:7d:eb:6e:e8:e9:8c:d9:66:78:13:78:
90:fe:c4:94:00:e9:9a:5a:c1:ab:98:94:d9:8e:b5:83:c4:b1:
1b:f5:0e:6d:c2:61:e2:d7:47:31:d3:b1:8f:3b:2e:8f:dc:22:
35:c9:ff:a3:45:8c:5f:df:92:2a:61:2d:20:cc:23:c0:60:2a:
62:7c:2b:fe:c6:f5:89:5b:82:fa:1f:8e:6d:20:27:c5:83:77:
e9:85:27:fe:fb:0d:0a:2a:6a:d0:3c:52:f5:3b:1e:f3:8a:a7:
39:a3:fb:47:77:30:3b:a8:22:96:35:58:8f:6b:4e:15:ab:1c:
2a:34:14:64:73:d4:00:e2:76:da:c0:05:ed:66:4b:d0:4f:f0:
3b:d0:77:9b:63:ae:41:7c:a9:fe:14:0d:3c:77:ff:82:84:5c:
d4:2e:79:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:06:22 2025 by rpki-client