Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_-tOda3kxB9r8jEys3RFszpj1WY.roa
File: _-tOda3kxB9r8jEys3RFszpj1WY.roa (raw, json)
Hash identifier: W4rk6s7UWn1smZru75ySwDaPVflnauiLR0c/T219btg=
Subject key identifier: FF:EB:4E:75:AD:E4:C4:1F:6B:F2:31:32:B3:74:45:B3:3A:63:D5:66
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B18705205CE6B31247B22A56BA512563E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_-tOda3kxB9r8jEys3RFszpj1WY.roa
Signing time: Tue 10 Oct 2023 07:14:55 +0000
ROA not before: Tue 10 Oct 2023 07:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:70:52:05:ce:6b:31:24:7b:22:a5:6b:a5:12:56:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 07:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffeb4e75ade4c41f6bf23132b37445b33a63d566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:cf:45:8c:91:48:8d:f2:35:02:60:b2:ac:
7d:c3:bf:b2:9d:e1:9a:43:ae:91:5d:16:ce:21:64:
4a:13:ed:e1:be:2c:32:fb:7f:53:01:9d:9e:c7:71:
06:47:f7:20:db:9f:2c:b9:1b:69:33:35:9e:03:26:
0e:7a:55:37:74:12:8a:5b:38:84:6a:bd:3f:b1:25:
cf:c3:9d:23:ce:0d:36:a6:26:f1:a7:0e:dc:ad:6a:
89:aa:e0:64:47:dd:6d:9d:e3:ef:52:6b:ab:4f:c8:
dc:4a:0d:3e:88:12:20:4f:f4:f3:bd:de:a9:20:d0:
8b:c9:b9:c6:27:d5:0d:2e:21:0f:fe:07:76:f5:87:
91:ef:3f:b8:d8:59:78:e6:2c:a2:c4:9a:4b:73:42:
9c:29:e2:76:f4:ca:70:03:91:ad:d3:8b:38:12:1e:
77:0c:d6:f6:e8:f6:a3:b3:8a:26:b3:9a:11:77:05:
24:41:37:99:57:3d:09:45:23:bf:db:d7:8e:1a:48:
ca:2e:e3:23:73:e5:56:80:02:c8:4d:b4:bb:b8:b1:
6d:ec:d5:4d:53:2b:53:ee:22:4d:93:e9:7c:f0:ca:
9b:00:0b:ed:6e:ce:87:04:09:da:cc:9e:5a:aa:06:
d1:8e:b3:4c:47:a1:ae:31:db:e1:af:76:f1:e9:66:
16:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EB:4E:75:AD:E4:C4:1F:6B:F2:31:32:B3:74:45:B3:3A:63:D5:66
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_-tOda3kxB9r8jEys3RFszpj1WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:b2:82:d5:b7:9c:ae:e6:72:45:f1:48:83:e9:aa:1d:13:55:
9e:a6:19:2d:6a:59:88:5c:18:27:30:54:9e:90:8b:17:d9:ad:
4a:8c:57:78:d2:45:1e:8c:7e:7f:92:c6:61:25:0c:03:ef:67:
fa:9e:8f:64:9d:4e:41:3b:f2:24:93:b0:97:3a:3b:8c:66:c8:
49:b7:39:7c:c8:96:a9:24:ca:45:32:50:4a:6f:4b:a0:94:8a:
73:21:5f:7c:79:a5:c9:5a:b6:56:b8:42:34:dd:5d:74:1b:f8:
d6:58:0b:bb:66:8f:d1:66:84:a7:37:8f:c1:a9:23:65:1f:9a:
37:5b:9e:da:44:c6:d9:e7:66:d3:c9:5d:3f:8a:8b:bf:22:6e:
2c:c0:a7:20:15:e3:d4:50:78:ed:68:de:70:a9:11:ac:fd:53:
cd:0d:59:2d:76:c5:da:06:d7:57:2b:4c:e3:11:bb:7c:17:24:
44:c8:86:f7:ca:73:e5:3b:8b:45:cb:32:9e:3a:d7:2c:46:2a:
5e:a6:3c:dc:04:2a:9e:0f:0d:c0:c1:72:dd:82:6f:86:b2:23:
8a:69:8c:36:c5:c8:8f:57:cc:2c:2d:f2:e8:01:c3:09:7c:bb:
88:c9:c5:f0:a7:b1:4c:74:49:fc:12:81:e2:d7:c5:3d:44:21:
f1:1b:0c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:43:31 2025 by rpki-client