Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aUEf_0rVybnHFVrD3Fm9QJ_lHBM.roa
File: aUEf_0rVybnHFVrD3Fm9QJ_lHBM.roa (raw, json)
Hash identifier: mcJ43zPdLNJeyK602LleFa6ueX6s4zpdtSmmQFa3hpo=
Subject key identifier: 69:41:1F:FF:4A:D5:C9:B9:C7:15:5A:C3:DC:59:BD:40:9F:E5:1C:13
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B665126427D99B3F552560A86859F7758
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aUEf_0rVybnHFVrD3Fm9QJ_lHBM.roa
Signing time: Wed 25 Oct 2023 10:11:16 +0000
ROA not before: Wed 25 Oct 2023 10:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:51:26:42:7d:99:b3:f5:52:56:0a:86:85:9f:77:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 25 10:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69411fff4ad5c9b9c7155ac3dc59bd409fe51c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:c9:3d:ce:54:c3:61:46:a2:41:02:d5:81:
0c:1a:d3:4c:22:c2:eb:6e:9d:a7:8f:af:8d:dc:5b:
8b:24:bd:49:f1:f3:b6:dc:e8:d4:a7:b9:20:d9:74:
9d:fc:2f:e1:05:79:b9:ed:10:5b:58:64:58:5a:11:
9e:58:81:62:38:de:23:13:b9:c1:a3:cd:d1:82:fe:
bf:40:df:69:2d:2d:6f:98:b4:68:33:a0:7c:b3:b3:
49:0d:4b:a4:51:2d:45:a8:f5:ab:f6:a2:76:9b:43:
63:79:09:1e:19:f2:fc:6b:81:06:c4:02:79:90:36:
48:1b:10:ea:fc:9b:62:ad:39:dd:9b:6e:3b:13:73:
67:b1:38:0a:ab:87:81:dc:2f:71:5e:9e:1e:ed:ab:
74:cd:17:fd:2e:c9:d3:6b:0b:b4:80:e3:20:d0:ec:
6d:8f:c4:78:36:18:73:a2:6a:21:e2:46:82:9e:3d:
4e:53:f0:67:68:2d:4e:82:0d:1c:3a:76:54:83:c9:
24:9b:17:59:9f:89:db:3f:b8:6a:87:0a:d2:c7:1f:
6f:05:71:fc:66:c0:49:cc:65:3f:26:16:9f:49:fc:
9f:6c:d1:6b:2c:85:5c:f9:c3:8c:1e:4e:65:f7:fb:
52:74:6d:bd:e6:f6:3b:0f:ba:78:60:e9:1e:40:ec:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:41:1F:FF:4A:D5:C9:B9:C7:15:5A:C3:DC:59:BD:40:9F:E5:1C:13
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aUEf_0rVybnHFVrD3Fm9QJ_lHBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ba:ca:92:93:a0:0a:1c:f5:18:08:1d:4b:ba:10:09:d2:db:16:
e0:56:ee:29:1a:bf:64:00:c2:a2:f2:59:9f:cb:70:8d:50:70:
c2:f6:44:a4:98:8b:2a:72:fe:a5:ef:5d:c5:07:2a:11:8c:3e:
bc:b2:f7:61:e9:ce:c6:d1:0e:a2:18:86:02:b1:c9:c9:a7:ff:
0d:f7:5b:51:ba:19:14:ff:14:a8:87:81:fe:0c:cc:a6:e0:93:
f8:f1:df:4d:2b:9b:c7:17:8f:6b:de:0e:fe:c7:27:f4:fb:8d:
f1:21:33:5f:65:64:80:6b:66:9c:41:07:b6:bd:0b:84:27:6f:
fe:58:46:73:2f:95:f8:d9:7c:84:08:c9:ac:c5:16:d3:e9:ac:
3c:19:5c:7c:3e:c5:e6:1f:b6:4b:8c:9f:05:38:b5:80:6b:1d:
aa:45:63:fa:30:5a:3f:2c:c3:27:45:d9:eb:4c:a6:bf:c9:cb:
e6:2a:4f:3f:ff:8e:cf:04:ec:21:c7:1b:a7:ef:6f:f0:63:39:
3d:f1:68:c0:2f:52:fd:9f:6c:ab:c0:0a:86:ef:74:48:d1:ce:
dd:d5:4e:79:ea:ec:28:ac:f7:a7:55:d0:09:0b:98:5e:8b:4f:
84:e8:c4:ea:a6:35:71:99:e0:60:33:16:d5:e6:c7:57:60:82:
5c:95:9b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:51:34 2025 by rpki-client