Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/b_ohWM4P5XICzjw3nDC2l_Ci4OA.roa
File: b_ohWM4P5XICzjw3nDC2l_Ci4OA.roa (raw, json)
Hash identifier: 2DG4NbGVAw42k9DvNPxtnEFr1D9xrxJU8zMhyDs8rVc=
Subject key identifier: 6F:FA:21:58:CE:0F:E5:72:02:CE:3C:37:9C:30:B6:97:F0:A2:E0:E0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB4A1FED50691D5100148D34AD414D27F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/b_ohWM4P5XICzjw3nDC2l_Ci4OA.roa
Signing time: Thu 09 Nov 2023 15:09:57 +0000
ROA not before: Thu 09 Nov 2023 15:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:a1:fe:d5:06:91:d5:10:01:48:d3:4a:d4:14:d2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 15:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ffa2158ce0fe57202ce3c379c30b697f0a2e0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:6e:5f:6e:3b:d1:9e:37:64:77:b2:cf:cf:
2b:d8:d2:59:0a:8a:85:16:8c:3e:1e:c3:06:98:ef:
d1:f6:f9:bc:7e:15:2e:4e:2e:36:3f:b5:61:8b:b7:
53:8f:34:dd:46:a8:99:ab:01:85:30:c4:e9:dc:0d:
4b:72:a0:eb:a3:f8:4d:57:15:45:9e:5b:d5:ff:75:
80:2b:0c:24:9b:52:c8:25:eb:4a:a2:45:fe:1e:1d:
94:cb:ce:65:4c:b8:ad:33:e1:3a:05:72:df:21:7a:
e2:9a:cd:cd:18:9a:df:a3:9b:57:a1:23:23:63:ec:
74:01:c2:c7:ea:14:c0:b5:d4:27:10:d5:b8:38:2f:
4a:42:66:0f:96:5a:96:0a:1d:52:07:8c:a1:32:09:
c7:2b:92:2e:de:45:a1:65:d8:67:d1:5a:b1:7c:78:
e8:94:d2:a1:5f:c0:34:44:61:89:e7:61:39:f8:75:
52:ec:5a:be:a3:5d:98:14:15:7b:44:a9:32:69:7e:
01:2b:41:cc:4a:26:e2:f0:5d:c2:da:92:42:f6:f4:
62:24:29:6b:40:47:a8:6d:8b:b0:6b:8a:b0:0e:50:
c9:d2:bd:9c:95:cc:6b:ad:08:e8:38:c6:4a:25:c1:
dc:6c:48:6c:39:35:cf:83:1b:04:88:d7:33:11:99:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:21:58:CE:0F:E5:72:02:CE:3C:37:9C:30:B6:97:F0:A2:E0:E0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/b_ohWM4P5XICzjw3nDC2l_Ci4OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:7f:09:96:72:d1:1f:13:1a:00:6c:92:b5:cf:0a:87:c8:40:
0f:a3:11:6a:d2:ba:a4:93:90:d1:e8:13:9b:96:87:7c:6a:36:
08:fe:97:3c:b5:aa:f6:b1:cc:bf:b0:b7:81:19:4e:05:f9:57:
9a:d0:9c:b9:c0:ef:6a:b3:45:ee:c5:2d:1d:a7:77:ca:6a:38:
49:d9:09:e1:df:10:3d:db:09:91:41:07:ac:83:b7:bc:f5:17:
c9:bc:e7:f7:77:04:1a:b9:f6:48:80:b8:b2:e9:38:82:87:e3:
ab:59:ae:1d:3b:9d:03:37:a9:be:63:d8:c2:f7:26:a9:01:8d:
0a:fe:e5:b4:15:74:c6:3e:f7:52:1d:b8:d5:1d:36:34:a2:f3:
f3:ef:da:e2:f0:91:d1:37:a3:55:62:06:8e:5a:6f:47:e3:5a:
3b:ca:95:50:82:74:69:b8:35:18:0a:9f:c5:ac:a2:a1:0f:f9:
91:0d:a4:b9:21:9e:5a:c7:ad:6b:91:fe:c5:a7:27:cb:ad:ef:
02:ad:33:56:25:29:cb:b7:0f:37:67:f3:fc:85:b5:67:ff:39:
fa:3b:3c:a7:5e:6d:49:3c:b3:40:ec:5c:42:2a:94:da:67:f9:
d0:13:c8:9a:f9:f2:08:62:08:13:bb:da:6a:c1:88:85:d2:f3:
45:ca:ca:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:17:38 2025 by rpki-client