Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aaEFilkjlevt0Zmw7p5eMOZu2ZM.roa
File: aaEFilkjlevt0Zmw7p5eMOZu2ZM.roa (raw, json)
Hash identifier: enpngNcI9uwnC/m1cepO6CxK7ht6zYo1sI4TsJrZOEc=
Subject key identifier: 69:A1:05:8A:59:23:95:EB:ED:D1:99:B0:EE:9E:5E:30:E6:6E:D9:93
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBC5C736C202FE69E22168F13BEF272D1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aaEFilkjlevt0Zmw7p5eMOZu2ZM.roa
Signing time: Sat 11 Nov 2023 03:10:57 +0000
ROA not before: Sat 11 Nov 2023 03:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bc:5c:73:6c:20:2f:e6:9e:22:16:8f:13:be:f2:72:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 11 03:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69a1058a592395ebedd199b0ee9e5e30e66ed993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4f:95:49:55:63:72:ea:e8:56:04:46:81:52:
88:70:8b:2b:a6:f5:a0:99:17:98:1b:02:9a:6e:6b:
55:7c:43:65:cc:44:dc:be:ef:6b:b5:3d:fc:29:27:
c3:b9:33:93:45:43:d7:dd:1c:dc:3e:ea:fe:e7:50:
1f:3f:62:e9:0a:94:ed:56:ad:b6:52:8e:3e:ce:18:
61:41:67:8a:3b:d5:2e:ec:43:3b:5a:ba:b7:d6:1a:
68:d6:0c:30:d9:29:b3:73:a8:9b:cc:ef:9c:e6:37:
b3:99:56:0d:17:85:de:bf:f1:62:24:61:26:7e:48:
09:66:5f:bc:f1:82:c4:73:d7:74:c9:80:1f:04:e5:
19:60:74:1e:83:ed:ed:52:56:81:35:84:4a:8e:09:
93:40:1b:fa:04:12:af:f6:15:de:e8:ae:a7:0a:23:
f4:3f:7a:ff:6b:57:78:d9:59:20:03:7c:b9:ae:3b:
86:62:ea:5f:87:5e:7f:51:81:c6:ec:0f:88:5d:f5:
af:03:7d:36:41:0a:81:ed:ba:fb:39:eb:d6:b3:41:
70:bf:e4:50:d4:52:cb:b7:eb:73:58:23:6b:f3:2f:
82:c5:a9:c9:19:bc:54:27:6e:b3:c9:ac:85:6e:3f:
13:df:66:58:c6:cc:ec:33:5a:09:11:1a:b4:ce:60:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A1:05:8A:59:23:95:EB:ED:D1:99:B0:EE:9E:5E:30:E6:6E:D9:93
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aaEFilkjlevt0Zmw7p5eMOZu2ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:60:51:0d:c9:f1:68:c7:3c:76:b0:2f:24:b2:a4:64:2e:92:
19:16:01:38:23:33:f1:93:53:c2:1a:54:fd:eb:56:3c:41:68:
7b:86:8a:40:fb:55:58:98:2f:59:77:94:3a:85:f4:33:a1:27:
0e:d8:ba:80:47:b9:d0:3d:5c:bf:70:c7:cd:f4:c5:d1:db:fe:
c6:8f:17:12:b0:40:4c:91:a2:32:03:7b:6d:8a:ba:0f:ef:55:
f1:2b:67:78:44:94:4f:b8:b4:72:82:d9:b7:02:9e:7c:64:1d:
bb:7e:90:df:1d:b1:50:6a:75:10:4d:ce:0f:8d:a5:d7:4c:be:
dc:04:6b:9d:66:2b:2d:40:0d:a5:70:43:7f:91:ae:3c:f1:4d:
16:8b:b1:f6:68:6f:d3:b8:84:b1:60:42:74:72:8c:e8:de:5f:
61:40:70:53:4c:e0:76:3e:8f:48:57:9a:c4:c9:41:2d:d4:bc:
54:ab:6f:09:2d:75:9a:0b:23:c4:57:cf:3d:46:63:5f:9a:72:
df:97:3f:84:8d:da:10:4d:a0:2d:23:a1:94:e8:9c:b1:d4:76:
d2:68:da:bc:a0:02:89:9c:9a:78:cb:9e:e4:fe:ac:3d:8e:ae:
2c:46:88:e4:33:3b:03:7f:c3:e4:e0:90:7f:e5:4e:b7:8c:eb:
46:06:b5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:00:13 2025 by rpki-client