Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RD740y2HJ2Y91WRh79sfpoxqzco.roa
File: RD740y2HJ2Y91WRh79sfpoxqzco.roa (raw, json)
Hash identifier: WX8CkbBM5Hz6jbtI6nCWtQS2ucrpKPDsj6ShL0gkkdA=
Subject key identifier: 44:3E:F8:D3:2D:87:27:66:3D:D5:64:61:EF:DB:1F:A6:8C:6A:CD:CA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0B219C109FD5EE3F0E1AD7F359D2A12E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RD740y2HJ2Y91WRh79sfpoxqzco.roa
Signing time: Sun 26 Nov 2023 10:16:41 +0000
ROA not before: Sun 26 Nov 2023 10:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0b:21:9c:10:9f:d5:ee:3f:0e:1a:d7:f3:59:d2:a1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 10:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=443ef8d32d8727663dd56461efdb1fa68c6acdca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:93:6b:77:e7:c4:3c:e5:20:eb:25:0c:d2:34:
b1:b9:ad:b8:e3:21:3a:c2:d9:fb:02:ac:82:05:61:
44:f6:84:ba:41:1d:15:cf:a1:1d:84:06:a8:b7:1a:
6b:36:94:1d:f4:a5:23:26:e5:87:ae:17:fa:05:c2:
f9:6c:d1:86:af:d2:ea:30:be:48:1f:c8:1c:78:49:
89:7f:70:ca:e5:16:82:77:a6:c8:15:0e:cb:b5:b8:
2d:a1:56:ed:17:a9:94:0b:9e:0d:b2:b4:2b:cd:2d:
e1:34:69:01:cd:38:9b:a6:ed:be:e0:22:92:a3:38:
60:55:9b:55:38:94:48:9e:a0:cd:c8:f0:88:94:ed:
eb:1b:41:58:99:14:88:4e:91:c4:59:4e:fb:b3:d5:
b7:2c:cb:e2:b7:ec:1d:76:f0:58:d1:fb:db:47:22:
51:12:4f:50:2a:1f:3f:1b:9b:7a:09:da:2d:e0:52:
d0:74:f5:df:09:98:16:2a:84:5c:0a:70:85:da:ad:
22:3e:70:38:83:9c:20:11:5e:ce:24:51:40:13:9c:
75:c8:25:10:36:40:a3:86:3e:8b:e8:ce:e5:27:da:
da:28:32:73:81:3c:76:4d:06:ce:7f:e9:46:96:82:
de:6e:69:d9:3c:ac:b1:b3:b6:5e:d8:20:28:43:2b:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3E:F8:D3:2D:87:27:66:3D:D5:64:61:EF:DB:1F:A6:8C:6A:CD:CA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RD740y2HJ2Y91WRh79sfpoxqzco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:cb:e3:71:17:17:88:08:ad:3c:14:2a:11:f7:c6:f3:d0:f2:
6c:d2:53:34:42:e3:3b:fc:09:d2:c5:6f:09:b4:70:b7:f8:a5:
97:1b:9f:98:64:ca:da:e9:9e:b8:ef:f7:80:af:4a:a7:f7:a4:
48:0a:47:dd:fb:16:01:b5:e2:08:4b:d0:0e:b0:ef:9e:8d:e1:
04:3c:d4:5d:7e:0a:d3:2a:63:99:33:59:4b:39:f8:35:58:21:
85:ea:fb:e3:00:1a:be:ab:17:fd:73:e3:08:2a:05:e1:8f:80:
14:df:3c:06:35:a4:8d:25:e6:17:cc:28:d1:f0:0a:6b:f3:81:
2f:44:81:1c:bb:a1:af:c3:69:7c:11:38:51:43:56:27:16:81:
3d:08:21:23:cc:f4:7f:9b:5a:51:40:d3:b4:b5:d7:0b:bd:81:
c9:be:01:5a:3d:26:d0:ba:14:13:9a:c5:67:d5:72:8a:c5:70:
47:88:bd:74:f3:89:4d:40:b2:90:44:76:b0:08:a8:a1:20:84:
57:0a:04:a0:7e:4b:7a:f4:d7:fd:d8:80:48:ed:0f:0a:f3:a0:
1b:e8:7f:c6:0c:8b:54:99:7f:53:a9:36:5e:54:6e:2e:75:1d:
2a:f3:87:91:e0:fe:ae:7f:4d:11:aa:00:7d:d8:4c:f5:21:94:
9d:2c:0c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:08:51 2025 by rpki-client