Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bL0GOBv534RZU4mYMdn91aEam0Q.roa
File: bL0GOBv534RZU4mYMdn91aEam0Q.roa (raw, json)
Hash identifier: 1DZmmmE0P7PqLXTUf7C5s5pQuZOd2i8ZwflxQqXWLGE=
Subject key identifier: 6C:BD:06:38:1B:F9:DF:84:59:53:89:98:31:D9:FD:D5:A1:1A:9B:44
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBADCD8BB90CB20F9793BAF23CD76F052
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bL0GOBv534RZU4mYMdn91aEam0Q.roa
Signing time: Fri 10 Nov 2023 20:11:57 +0000
ROA not before: Fri 10 Nov 2023 20:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:dc:d8:bb:90:cb:20:f9:79:3b:af:23:cd:76:f0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 20:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cbd06381bf9df845953899831d9fdd5a11a9b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:54:43:f4:de:22:56:8d:03:10:9b:be:28:44:
e2:0d:a6:d0:ca:71:2e:44:12:b6:c2:b0:27:75:4e:
1c:3c:0f:51:0c:41:9b:a3:1d:32:38:e6:79:af:9d:
99:60:dd:12:ef:34:b7:d3:51:5b:76:6b:6b:51:4b:
2a:ee:de:ba:15:7c:e0:17:85:a3:8e:3b:e5:da:40:
71:ef:1e:88:59:b6:68:6f:45:d4:51:e1:50:6a:62:
ee:1d:37:a6:c2:70:67:d0:62:98:b6:f0:0d:52:4c:
6e:d3:85:6b:e6:da:2a:f2:aa:43:f4:c2:2b:fa:3f:
32:51:0a:40:4c:43:71:62:ce:a1:9c:7f:49:65:4f:
65:6a:b4:e0:96:03:27:f8:93:17:3b:db:be:d9:51:
3b:9e:a2:3d:e7:01:c3:17:a6:94:d9:75:44:1d:6b:
51:4c:d3:f1:45:89:d3:64:c8:2b:9d:e0:37:6c:68:
cf:26:c0:1f:dd:4a:d6:91:b0:30:c1:c0:25:1d:e0:
a0:f8:95:3b:0e:a3:7b:6f:5f:db:a0:cc:b1:07:68:
c5:7e:8b:a1:21:6d:e0:67:42:fe:8d:c1:ab:c0:51:
42:c0:5b:b0:ca:dd:8f:50:cd:73:4a:dd:21:f8:8a:
11:8e:b4:e0:31:91:14:71:b4:7b:a7:b7:6c:6e:a8:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BD:06:38:1B:F9:DF:84:59:53:89:98:31:D9:FD:D5:A1:1A:9B:44
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bL0GOBv534RZU4mYMdn91aEam0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:87:bb:0c:ac:14:64:a1:d7:65:f5:56:3f:ab:2e:58:f3:a4:
b9:5c:25:f5:ec:80:85:d7:ee:9e:12:bd:60:13:04:80:98:9b:
83:11:ac:79:75:ff:a9:a5:ee:2a:52:4f:c1:d1:49:a7:14:5b:
9d:68:1e:81:3b:5d:97:03:bb:e0:79:d9:68:3f:4c:5b:6e:be:
25:c9:76:3b:df:cb:fb:4b:f8:b0:5d:9d:14:ad:85:19:8f:38:
65:c1:7a:36:30:4a:c7:c0:20:24:0a:90:5d:e5:6d:ea:a9:1f:
4b:fa:34:35:dd:8d:e2:6d:fd:1a:31:68:17:7b:6d:5a:06:d3:
4e:8f:13:9a:17:59:a6:5b:d8:aa:9c:aa:ee:30:1f:d7:6b:1f:
2d:ad:32:87:80:3b:6e:1d:2d:db:76:cd:36:98:fc:24:05:27:
2f:5e:fc:fd:4d:8c:7e:e7:34:c7:31:b2:c4:df:fb:f9:7e:b8:
6d:1a:bd:b0:32:40:d6:f8:0d:44:ea:f0:a4:94:33:7c:eb:38:
0f:f2:33:0c:06:83:45:1f:1c:6a:ca:ea:d1:3b:cb:5d:0e:95:
07:79:1e:d4:c3:68:87:1b:d1:a0:9a:f6:80:d5:23:8b:ca:58:
7b:81:f9:a1:67:cc:06:c5:4a:4f:38:79:9d:71:44:ac:98:41:
bd:9b:43:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:01:13 2025 by rpki-client