Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bNwvWEg20LmgwwjG52Xm_v37Bgs.roa
File: bNwvWEg20LmgwwjG52Xm_v37Bgs.roa (raw, json)
Hash identifier: Jx6xn5wjiV1fi1HHsY8f+I+n4NwLx6fEQ/9lcATak7Y=
Subject key identifier: 6C:DC:2F:58:48:36:D0:B9:A0:C3:08:C6:E7:65:E6:FE:FD:FB:06:0B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9D08646983ABF1BE25A3A25496024C14
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bNwvWEg20LmgwwjG52Xm_v37Bgs.roa
Signing time: Sun 05 Nov 2023 01:10:54 +0000
ROA not before: Sun 05 Nov 2023 01:10:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:9d02:be26/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9d:08:64:69:83:ab:f1:be:25:a3:a2:54:96:02:4c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 01:10:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cdc2f584836d0b9a0c308c6e765e6fefdfb060b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:87:08:90:9f:d1:d0:94:37:93:50:18:84:3b:
70:94:4c:89:5e:46:91:7d:1f:8d:a8:54:97:1b:f7:
2a:45:14:5b:8d:62:ca:d8:88:11:75:d8:80:b5:ae:
60:4d:7c:12:12:20:56:ad:2d:d1:38:da:b1:55:7b:
a9:6c:a3:24:cb:1a:ec:22:de:a5:91:e7:de:e0:14:
c1:8b:33:a1:b2:e9:94:e2:4b:a4:e2:9e:1b:83:a9:
78:94:97:99:d4:b3:5f:e9:3e:ac:67:d1:1b:2d:84:
e8:b2:14:e7:8c:cd:e9:71:bc:ea:ad:ae:b2:85:ea:
65:e3:d7:e6:c6:e5:ce:36:70:cc:6a:4c:0b:58:c6:
13:5e:82:c0:b5:6a:45:c9:ce:20:a8:b9:09:b5:a7:
a5:00:f5:42:62:02:28:fe:e3:37:35:3a:82:9b:ed:
56:21:2e:c6:4c:b1:1a:a8:3c:73:e0:40:cf:63:69:
e3:80:d2:7b:d9:fd:65:05:53:e1:14:d6:08:a5:c8:
60:5e:ba:63:27:72:b5:5f:1b:a5:04:29:b1:ff:e3:
05:c1:d0:63:13:45:8d:89:d5:2a:d0:4e:85:de:ad:
b1:5f:db:e7:2c:1b:a8:c3:0c:8a:44:0a:72:32:fc:
96:f5:c8:8f:84:38:e2:99:e8:06:9c:07:96:bc:8c:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DC:2F:58:48:36:D0:B9:A0:C3:08:C6:E7:65:E6:FE:FD:FB:06:0B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bNwvWEg20LmgwwjG52Xm_v37Bgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d3:3f:d5:8a:96:db:b7:88:3b:c2:e9:1f:24:44:41:5c:69:60:
d5:eb:e1:49:a6:d8:00:ab:00:02:2e:f5:e1:fc:36:84:f2:fe:
f5:2f:e1:15:73:75:e0:2c:f1:7e:a3:d5:85:cf:ee:3e:7c:03:
ed:ce:b7:51:da:d5:d9:a6:a0:6f:88:b7:a5:5f:33:66:84:88:
19:19:4d:01:53:3b:69:25:25:ee:1e:dd:f9:ee:17:70:4d:67:
71:6b:8b:61:26:27:55:d7:a1:0a:cc:eb:a9:e0:38:72:46:6f:
12:06:8b:5c:94:8c:4b:43:6c:f2:e9:ae:cf:4d:63:f2:fd:a8:
7f:cb:3d:11:ae:f1:5d:a1:f6:8c:4e:fe:74:98:79:a3:57:a8:
ef:91:64:7e:be:8e:45:ce:b0:55:6c:d3:3a:46:80:d0:06:94:
75:05:ec:fa:1d:d5:14:43:c6:25:17:a5:0e:09:14:43:38:f9:
a3:f3:83:d0:98:9e:e7:25:a2:59:ed:8d:d0:30:bf:8d:ff:f7:
c5:81:13:b4:51:e5:b9:03:ce:5a:8b:91:4e:57:3c:50:26:41:
e6:01:45:1b:63:05:8e:17:4f:21:c2:e8:c4:79:d3:4c:fe:e8:
61:79:b1:1d:89:42:f0:82:6a:91:c7:c9:ba:00:f4:89:23:df:
d9:9f:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:54:44 2025 by rpki-client