Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/awxjYQlcZHEgldvdtDmgcIvFfQI.roa
File: awxjYQlcZHEgldvdtDmgcIvFfQI.roa (raw, json)
Hash identifier: qVDZgrcZ1yuEgQV56aogJrkFwGyt9DVGORC8IqiZVLo=
Subject key identifier: 6B:0C:63:61:09:5C:64:71:20:95:DB:DD:B4:39:A0:70:8B:C5:7D:02
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD16A6BA3FB9154D43FCC6D113FD1631F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/awxjYQlcZHEgldvdtDmgcIvFfQI.roa
Signing time: Tue 26 Sep 2023 12:15:27 +0000
ROA not before: Tue 26 Sep 2023 12:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:6a:6b:a3:fb:91:54:d4:3f:cc:6d:11:3f:d1:63:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 12:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b0c6361095c64712095dbddb439a0708bc57d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:f6:78:13:8c:8c:7b:6f:fe:96:ae:36:42:
00:ba:52:9f:2a:6d:1f:0d:b6:a4:90:33:a6:35:51:
c7:69:0c:65:eb:59:81:db:28:f8:71:28:30:56:cd:
d8:03:e9:53:f9:3d:79:76:98:09:49:3e:12:83:9d:
2b:7f:3e:d6:59:64:d3:7c:d5:e6:da:23:ec:d7:b4:
b0:db:07:18:77:85:a9:fd:05:22:4d:00:fb:d3:76:
b9:51:fe:8b:77:2f:e4:58:5e:1b:9f:14:51:72:5c:
f3:48:67:69:30:d4:5d:47:00:57:ee:cc:0d:cb:55:
bc:63:79:3c:33:6c:bc:64:40:af:93:5a:ab:c8:05:
82:14:0f:4a:63:b9:ad:75:fe:a5:37:3e:57:b9:83:
af:3c:ed:d7:60:bb:08:a4:af:12:bf:33:8e:94:a0:
0c:b2:c1:6d:a5:9e:d6:ae:29:c5:f2:7f:bf:92:26:
09:87:87:1c:4e:89:75:45:a7:cb:a9:77:78:c5:d7:
db:1e:fc:56:c3:6f:1d:82:30:c0:58:6a:a4:75:ae:
80:0e:a7:71:1c:8c:e9:ac:87:23:93:1c:a9:41:9f:
b5:18:c1:0d:6f:c8:fa:98:a7:1a:05:1e:9a:78:6d:
ac:46:75:9d:62:6d:03:47:45:20:ea:af:17:bc:aa:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0C:63:61:09:5C:64:71:20:95:DB:DD:B4:39:A0:70:8B:C5:7D:02
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/awxjYQlcZHEgldvdtDmgcIvFfQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:20:ef:04:0e:8b:0b:4a:08:43:c9:cb:a6:6a:bc:e0:61:3e:
d9:31:09:5c:a9:84:93:56:ca:06:f6:cf:9d:9b:85:68:33:51:
41:bb:1a:31:d8:2b:de:ce:f4:8e:e1:9f:ff:57:9c:5a:89:ac:
0b:5f:0b:80:c0:79:95:cf:6a:b8:54:e8:60:e2:38:b9:c8:3c:
57:d5:7f:f4:cf:ab:c6:ed:89:92:40:10:3a:97:3e:9f:ea:43:
7a:4c:0f:69:32:65:23:74:51:6f:22:2a:df:f8:a0:50:b1:3e:
fd:7b:5c:6b:15:58:b6:8e:bd:ce:00:a6:5b:ac:f8:06:fe:b3:
8b:2b:f3:3d:8c:66:3e:cf:25:70:f5:96:ed:dc:73:c5:72:ee:
fe:f4:a7:32:7f:dc:7e:94:50:95:ce:33:76:69:63:6b:02:27:
e2:56:05:6f:5c:bb:cf:22:1f:87:ae:89:4d:13:24:aa:3c:cd:
f2:1b:c2:4b:90:eb:9c:46:d6:a9:77:44:1c:1f:e8:ff:ae:df:
22:df:7a:36:8a:6f:8d:69:f2:08:74:84:b5:17:c1:8f:bd:d2:
38:d7:57:23:24:7c:1a:e9:d4:45:2f:bf:32:29:69:b3:19:9d:
bd:71:c9:81:18:89:9a:6c:a8:d8:5d:4b:60:0e:e4:ec:6a:26:
8f:8c:05:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:52:33 2025 by rpki-client