Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a0z-26lv8EO1Kxp9SPwLecy2bJ0.roa
File: a0z-26lv8EO1Kxp9SPwLecy2bJ0.roa (raw, json)
Hash identifier: SYazF6Gc7WEGWECQawnKdiXlPoZy2RxaIMDqrvyrmX4=
Subject key identifier: 6B:4C:FE:DB:A9:6F:F0:43:B5:2B:1A:7D:48:FC:0B:79:CC:B6:6C:9D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C41299B33FE3B0231D88A046D3CEEE225
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a0z-26lv8EO1Kxp9SPwLecy2bJ0.roa
Signing time: Wed 06 Dec 2023 22:04:54 +0000
ROA not before: Wed 06 Dec 2023 22:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:4128:f43c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:41:29:9b:33:fe:3b:02:31:d8:8a:04:6d:3c:ee:e2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 22:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b4cfedba96ff043b52b1a7d48fc0b79ccb66c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:dc:91:61:8f:b2:f6:f3:a4:77:51:92:b4:
49:da:08:8b:59:e2:7d:36:c8:69:59:2b:c0:f5:ce:
6a:51:42:f0:82:90:41:af:e1:b0:98:d3:2d:7b:b7:
b9:bc:f0:8c:08:32:e1:6f:62:b4:04:ec:04:ce:b1:
51:32:b9:bf:07:d4:8d:08:f9:8b:8e:dc:6c:3e:1b:
5f:a7:4e:cc:f3:f7:f1:78:24:74:f3:97:89:6e:6d:
49:23:c8:76:e2:5f:47:96:52:9c:4d:c5:4d:46:e8:
42:a4:f2:50:fe:d2:6b:51:c4:98:2c:3b:17:ff:8b:
9e:b0:42:04:e8:62:f3:47:42:a3:7d:d4:3a:6c:54:
78:19:e3:c4:3e:80:57:60:2a:a8:10:09:39:2f:25:
3c:4b:94:3f:c5:dd:66:3c:b8:41:98:08:61:58:b6:
4a:e6:62:22:9f:be:42:de:ac:77:81:28:9d:64:65:
6c:18:8b:80:10:70:57:92:e5:61:81:f9:18:49:f7:
6b:87:15:f4:26:ee:18:15:43:17:c3:dc:3a:50:03:
1e:25:10:72:04:08:ed:c5:12:0a:89:39:3f:a0:0f:
a5:39:f5:33:fe:b4:11:f6:0b:51:b2:17:16:e4:20:
3e:86:1c:0e:b0:c5:08:cf:7a:62:2e:4c:2e:04:21:
d1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4C:FE:DB:A9:6F:F0:43:B5:2B:1A:7D:48:FC:0B:79:CC:B6:6C:9D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a0z-26lv8EO1Kxp9SPwLecy2bJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:09:e5:61:26:e2:c3:7f:b2:9b:08:a2:80:b1:aa:06:d4:11:
dc:15:ae:b0:f8:b8:50:9e:f4:30:f3:c3:96:ec:9a:41:0f:e3:
5e:91:e0:15:68:8b:ca:4a:07:0a:5b:db:1e:93:ae:56:68:59:
c3:1d:18:6e:b3:17:f8:58:1b:51:bc:8a:da:7a:1f:db:85:6d:
37:21:52:da:69:3e:ff:e9:e9:5d:54:1a:33:89:69:2d:41:08:
16:4a:a4:eb:f2:46:00:45:7c:08:0e:a4:b0:81:66:0d:0c:d7:
7e:e9:81:a1:89:87:fe:ac:6c:cf:27:75:2f:53:e1:7a:09:21:
17:9b:40:27:7b:4d:f9:ee:60:9a:66:79:42:d1:5f:e3:69:8d:
b7:ed:24:a7:d2:6d:1a:d9:ed:22:3a:76:67:2b:cb:09:3c:7a:
65:99:2f:74:75:34:ea:e7:76:1c:51:5d:ca:b1:b3:13:17:ea:
f7:d0:7e:18:65:97:68:cd:aa:89:38:29:5a:3d:02:e8:2b:05:
93:37:31:69:ee:e2:85:0a:aa:62:37:d2:97:93:b8:34:f4:2e:
18:a3:f9:e0:19:b7:bd:d2:b6:7d:41:81:ff:2d:ef:53:e0:f4:
4a:1b:8d:dc:29:63:58:a2:2a:fb:e5:12:25:ca:f7:c1:55:df:
d8:da:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:48 2025 by rpki-client