Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R4djer_2vgHo5qJyX8t9TVlZVsI.roa
File: R4djer_2vgHo5qJyX8t9TVlZVsI.roa (raw, json)
Hash identifier: uBDWZTw0Ba47NKJUe+kac6e3Q2O+dG0WXSGxtJKpYUc=
Subject key identifier: 47:87:63:7A:BF:F6:BE:01:E8:E6:A2:72:5F:CB:7D:4D:59:59:56:C2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6807BAC7E5489CA4B9743C7D914B952C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R4djer_2vgHo5qJyX8t9TVlZVsI.roa
Signing time: Thu 14 Dec 2023 11:13:06 +0000
ROA not before: Thu 14 Dec 2023 11:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:07:ba:c7:e5:48:9c:a4:b9:74:3c:7d:91:4b:95:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 11:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4787637abff6be01e8e6a2725fcb7d4d595956c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:22:7f:88:c2:7e:e7:81:38:49:e9:63:41:13:
a4:ba:ff:ad:2e:7a:7c:9a:75:fe:7a:c9:41:73:6e:
57:72:99:3f:22:8f:c7:a7:60:52:2a:85:4b:88:24:
82:e6:1c:7e:aa:8c:46:c1:da:20:7a:05:6d:e6:7e:
16:39:bf:76:54:45:7e:a1:5c:ad:3c:fd:aa:51:d1:
97:eb:de:eb:be:55:e2:d8:da:db:bd:c4:c5:27:4f:
dc:0c:22:bc:27:b5:c1:5e:db:31:82:17:d5:04:ef:
fc:29:8b:f3:ce:2c:9d:ab:16:57:83:64:29:9e:6f:
62:f5:80:3e:db:c1:73:fa:10:d2:4f:95:0d:4e:89:
db:7a:b4:87:3e:01:d9:e6:2f:c2:1a:73:33:bb:a2:
45:b7:43:ca:47:5f:16:e7:0b:95:97:5d:1b:e3:12:
32:c4:57:e9:d4:4b:11:5d:7e:14:b2:77:ce:d6:16:
1c:5f:4a:df:38:10:f3:98:16:e8:cc:ed:f7:c1:f9:
90:35:62:1f:a3:bf:6d:88:40:b6:3b:b5:c6:13:25:
bd:d8:d6:99:0e:59:42:78:3a:4f:de:1d:87:65:4e:
e5:3b:6e:d2:25:90:c8:cc:5f:de:20:8c:1e:31:ec:
aa:0e:c7:0c:67:20:b0:bd:f7:3b:7a:10:5d:cc:76:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:87:63:7A:BF:F6:BE:01:E8:E6:A2:72:5F:CB:7D:4D:59:59:56:C2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R4djer_2vgHo5qJyX8t9TVlZVsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:7b:18:71:ce:07:6e:0e:72:ad:fe:41:6e:cf:67:a0:83:81:
76:aa:ba:45:9c:a5:f0:81:8c:4e:ad:f5:2e:46:80:e7:a6:96:
1a:04:15:ea:48:0f:f3:b4:c8:a9:eb:dc:58:c1:d1:c4:0a:eb:
99:d9:ce:83:01:fd:f9:c3:65:28:63:1b:2b:18:20:af:db:80:
d5:f6:a0:f5:28:cf:86:b2:13:4d:49:2f:87:c5:be:ba:8f:e6:
0d:5f:97:7e:6e:50:f3:13:8c:d1:8a:97:94:c7:3d:c8:e8:3a:
6d:47:b2:34:b5:81:a7:1a:87:8d:b9:18:78:90:3a:f1:86:39:
57:85:3f:3f:21:43:90:45:14:3e:e9:e1:2d:de:b5:63:de:c5:
4d:3f:95:2b:34:e7:5e:ed:5e:55:90:37:33:b2:f4:26:df:8d:
cc:8a:aa:a5:0d:b3:26:9a:70:f1:86:c0:d5:75:e7:bd:a8:d4:
51:38:77:ce:de:cd:15:a2:15:34:2e:32:a7:7a:ca:79:e4:71:
f0:b0:7e:ac:1b:fc:96:09:2f:8a:c8:9b:bc:d8:df:69:18:3e:
8f:61:1b:8a:84:c6:91:9f:43:70:dc:b5:89:82:b9:c2:0f:a4:
2a:d7:02:e9:30:13:99:bc:71:3b:c2:0e:88:54:ce:ef:e6:e9:
75:a7:7c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:15:22 2025 by rpki-client