Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_ZcBElpS4lojd5hBCYrnskqmrU4.roa
File: _ZcBElpS4lojd5hBCYrnskqmrU4.roa (raw, json)
Hash identifier: DcGFZyjyTqHixv/37xboWouMFnTKGWrsbk0mhPyexxg=
Subject key identifier: FD:97:01:12:5A:52:E2:5A:23:77:98:41:09:8A:E7:B2:4A:A6:AD:4E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0B8FBA086A3A25DE0368FA70F2989431
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_ZcBElpS4lojd5hBCYrnskqmrU4.roa
Signing time: Sun 26 Nov 2023 12:16:57 +0000
ROA not before: Sun 26 Nov 2023 12:16:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0b:8f:ba:08:6a:3a:25:de:03:68:fa:70:f2:98:94:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 12:16:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd9701125a52e25a23779841098ae7b24aa6ad4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:81:11:61:aa:11:e5:34:07:18:7e:6a:30:ee:
0e:9b:b3:a7:7a:85:1b:d5:01:88:5f:a4:ac:e4:05:
18:73:d6:63:49:3b:bf:61:fb:11:f9:82:8b:8d:c2:
55:cb:9f:f6:aa:06:ad:5d:5c:9a:27:9b:a8:8a:13:
a0:2a:8f:da:d7:ba:c2:c3:ae:f7:7d:d7:c7:78:2a:
ef:5c:c9:b6:de:dc:cb:a3:49:3b:1d:84:5b:fb:e3:
7f:af:9b:6b:e3:0b:3a:8d:b0:23:df:b4:f1:20:ab:
5f:ec:27:b1:5b:2c:e1:df:f8:59:52:1b:8c:85:56:
6b:18:87:11:6a:51:27:3c:90:14:75:88:21:19:e0:
77:0b:70:6d:5c:20:97:9c:1f:56:82:5f:d0:f0:52:
b5:81:db:70:2e:be:18:34:2e:2c:42:0d:9c:5b:fb:
dc:c5:fb:1f:26:5e:a6:13:75:ff:72:de:82:f7:b0:
6a:0d:8e:e2:a9:d9:38:6b:da:0a:e0:d2:8f:ea:2e:
a8:e8:8a:f4:ea:ea:73:51:4a:c2:f6:15:88:39:98:
88:b9:14:7e:40:aa:36:80:6a:dc:72:e2:6c:f5:71:
4b:1f:ef:65:0f:01:a7:9d:02:f8:ed:8d:77:67:e9:
4f:43:56:83:ec:ab:cf:a6:58:2a:e7:ac:b7:6c:28:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:97:01:12:5A:52:E2:5A:23:77:98:41:09:8A:E7:B2:4A:A6:AD:4E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_ZcBElpS4lojd5hBCYrnskqmrU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:ac:67:41:00:10:db:fe:61:57:36:7e:b6:65:56:cf:81:84:
62:b3:74:32:62:10:d1:87:ce:4e:61:e8:46:14:cf:a5:d6:42:
c7:4f:07:0b:f4:2c:02:a0:2b:ff:3a:bb:5e:45:d7:91:5a:48:
d4:3e:3a:9b:1f:8d:2b:2a:e8:f8:96:a2:67:08:e7:d9:75:2f:
0a:20:48:12:fa:14:22:37:fc:48:8b:46:e2:52:ff:c4:99:3b:
2e:55:73:ca:4d:d9:0b:f2:d7:f7:c7:2d:61:5a:f7:d9:fe:02:
e1:81:9a:21:62:85:31:c2:0e:87:c9:46:38:2f:20:1d:76:47:
24:0f:3f:ee:a6:a5:e6:80:f3:74:e8:21:73:bb:72:5d:01:d7:
a1:74:f0:a9:2b:29:87:e1:7a:ed:db:fb:b2:6a:e6:ef:b9:d5:
63:3a:9b:77:05:19:1d:16:f9:d5:d1:75:56:90:39:32:29:70:
0d:33:97:3c:60:06:c5:c0:4b:76:47:de:b9:27:93:8a:b3:9d:
c0:fc:ea:9e:09:88:ed:0a:40:3e:84:5b:bb:aa:0f:a0:4c:c3:
7f:b7:78:5e:fc:4f:c8:d6:62:10:f2:4d:74:52:4c:b0:e2:c9:
83:6d:83:b4:f8:d7:44:e4:7c:69:14:98:d8:4e:53:d9:68:28:
b9:e8:b6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:00:43 2025 by rpki-client