Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Tz88OHpxQyykxXnEL_gp7u0s73E.roa
File: Tz88OHpxQyykxXnEL_gp7u0s73E.roa (raw, json)
Hash identifier: zhBxa08T5CIsUdsQJYPfwtU/00U/D4O26+gqGs7UiFY=
Subject key identifier: 4F:3F:3C:38:7A:71:43:2C:A4:C5:79:C4:2F:F8:29:EE:ED:2C:EF:71
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C28BE2C723EFBCCE372800554E4489D4C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Tz88OHpxQyykxXnEL_gp7u0s73E.roa
Signing time: Sat 02 Dec 2023 04:16:40 +0000
ROA not before: Sat 02 Dec 2023 04:16:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:28:be:2c:72:3e:fb:cc:e3:72:80:05:54:e4:48:9d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 04:16:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f3f3c387a71432ca4c579c42ff829eeed2cef71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:70:a6:06:45:a6:a7:cd:64:e5:97:64:5b:c4:
34:8f:61:17:d2:eb:7c:af:70:c9:47:be:3f:20:20:
ec:72:6d:52:40:ff:85:61:1a:d4:f1:e9:bf:f6:86:
35:25:0d:1b:9d:c7:7b:92:d7:98:cc:8e:24:d3:25:
31:c3:16:c2:d0:59:0f:72:f8:f6:82:04:01:de:ef:
f6:a3:ab:ee:f8:0e:4c:66:07:da:d5:58:a5:03:86:
99:d5:96:0b:5b:8a:47:c9:73:84:d7:7a:b7:fb:af:
97:37:b2:9c:96:e1:79:91:9f:d8:12:4b:62:56:44:
96:d4:5f:07:48:a6:15:8f:0d:89:ef:25:ae:52:ca:
49:d3:53:98:f7:df:f8:d1:8a:83:23:01:86:16:7c:
89:24:0c:b9:5c:aa:a2:ab:c6:ea:72:65:0e:5f:29:
88:89:fb:7c:87:a6:a4:7f:eb:ab:aa:00:9e:71:00:
89:93:8f:7b:4e:54:18:12:37:57:1b:2f:69:86:e8:
dc:2f:c3:c3:67:3e:3d:f0:6d:16:c0:df:c3:82:58:
0a:f5:29:52:cf:45:c2:73:30:ae:65:fd:4b:2c:48:
b1:70:b0:4b:ff:58:03:50:16:cb:5d:f9:0f:cc:46:
97:e0:0f:de:c6:a2:79:b3:a9:38:7f:8a:2f:c9:7b:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3F:3C:38:7A:71:43:2C:A4:C5:79:C4:2F:F8:29:EE:ED:2C:EF:71
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Tz88OHpxQyykxXnEL_gp7u0s73E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:a6:df:64:24:51:11:11:ed:76:64:f9:c8:63:f0:46:9b:74:
76:b4:11:42:ca:62:90:65:e4:90:95:43:34:5d:a7:f8:cb:e8:
16:ca:76:4e:aa:f3:49:c2:3e:b2:ce:27:7c:6e:f8:6f:74:4e:
4a:34:c5:24:9b:5d:3c:a9:2a:64:7d:13:03:9a:2a:4a:1a:57:
87:b3:73:8a:26:a8:9e:6c:fb:83:dc:22:d5:49:0b:ce:ce:63:
81:22:05:78:bc:40:db:9f:d3:c3:5b:f9:99:db:78:86:26:eb:
82:0d:23:d8:17:88:9b:4a:f4:51:d7:8a:fb:4b:2a:6d:18:28:
7a:5b:0a:6e:7c:4c:08:86:7b:f4:a4:a3:17:63:63:6c:17:2f:
13:68:3a:ef:b0:cb:9e:8a:1b:a2:7f:3b:d7:be:56:ca:ee:b2:
e6:30:26:e0:3a:13:8f:02:7c:9a:78:98:0a:dc:32:ba:20:9f:
ed:5c:fe:34:23:b0:04:3b:9a:3f:75:99:2a:fd:63:4e:5f:c6:
10:1f:39:3b:95:25:35:60:e7:2b:41:1f:a8:de:24:39:82:56:
aa:83:ea:b3:9a:3f:69:1b:fa:69:74:44:29:c5:6a:ea:42:57:
a6:95:7c:24:fb:3e:36:7f:46:a5:5a:5d:f0:de:78:53:55:8f:
99:30:a3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:54:36 2025 by rpki-client