Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bu6ziZk8R4DNE2wu22V_at5VMeU.roa
File: bu6ziZk8R4DNE2wu22V_at5VMeU.roa (raw, json)
Hash identifier: AdMz6qIfPoe1n7kuxxQW3DCorQMlSA94KJZyHLOgrjo=
Subject key identifier: 6E:EE:B3:89:99:3C:47:80:CD:13:6C:2E:DB:65:7F:6A:DE:55:31:E5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C25165B011C169A0BFEC43CE11EEE6833
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bu6ziZk8R4DNE2wu22V_at5VMeU.roa
Signing time: Fri 01 Dec 2023 11:14:31 +0000
ROA not before: Fri 01 Dec 2023 11:14:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:16:5b:01:1c:16:9a:0b:fe:c4:3c:e1:1e:ee:68:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 11:14:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eeeb389993c4780cd136c2edb657f6ade5531e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:61:6a:87:0d:10:c5:1d:d6:6b:b8:fa:2f:
37:91:9e:a2:6e:56:3b:b9:6c:0b:83:3b:3e:00:05:
98:d1:77:98:09:50:fc:c4:60:c8:03:d5:94:5e:fe:
67:58:e3:f2:1c:ba:3c:20:14:8c:4b:f7:67:ca:aa:
ec:74:78:6f:22:07:f7:13:5a:19:82:2f:a8:90:e9:
76:7f:77:1e:1d:c4:1d:50:d9:f2:b2:49:ab:5f:a9:
9e:74:9c:d0:f6:af:25:66:cf:16:9a:50:38:17:68:
63:4c:a9:f1:90:f5:ca:1a:3e:86:73:f2:6d:2e:ee:
19:b3:9f:ce:1d:fa:33:88:b2:25:bb:e6:6f:99:e5:
5f:8e:c4:97:67:a6:75:c3:be:fb:cb:2e:f3:5a:9e:
75:12:53:8a:f3:ed:58:4d:8b:60:81:0f:4f:bf:c8:
f1:b2:39:da:3d:a8:11:85:84:a5:cb:2d:d7:08:9b:
18:cd:0a:da:02:d2:43:60:e2:c6:c0:36:df:f9:2d:
00:e0:8e:45:f8:3a:e6:9a:48:c5:dd:e0:1a:f8:20:
60:c1:8b:7a:49:4b:61:6c:32:3a:8f:7d:e5:15:41:
77:2d:76:c7:73:a9:cf:21:46:1e:f9:ff:4e:a6:36:
bd:4e:ff:47:60:f9:0f:de:2e:b9:b6:7f:15:aa:b7:
88:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EE:B3:89:99:3C:47:80:CD:13:6C:2E:DB:65:7F:6A:DE:55:31:E5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bu6ziZk8R4DNE2wu22V_at5VMeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:43:bb:3b:40:e8:7a:9f:57:ec:8e:ed:d2:fe:29:8a:78:72:
a8:48:d7:55:3f:e3:25:14:8d:77:09:10:46:78:18:2c:98:1f:
13:20:ef:6d:cf:d5:80:15:46:c8:a9:6d:08:a7:7e:e6:75:63:
a0:7b:3f:41:4b:71:b0:75:ad:bc:5f:d3:a4:1c:9e:28:1c:b7:
06:fd:8d:2c:92:e3:14:a4:55:13:3b:a1:04:fd:40:1c:8b:3e:
ba:36:25:f5:35:13:b2:1b:de:fe:48:0c:b5:fb:bf:7a:63:b9:
94:23:0d:79:dc:8e:a0:d7:20:2b:8d:4d:66:e2:95:0c:bb:82:
f8:06:e3:69:2d:b3:49:44:08:7c:e2:9b:34:61:d6:3b:0e:d2:
d7:91:be:02:ff:6c:1a:42:13:15:92:da:38:c3:03:52:62:f2:
45:17:2c:d3:95:07:ce:ac:17:09:9f:52:74:f1:4d:c7:63:60:
13:4a:a9:b9:86:d1:91:f3:b6:e6:0f:6e:00:01:4c:74:91:2b:
45:0f:28:44:76:92:68:55:2f:b9:95:74:32:99:0b:0b:85:7b:
4d:ff:ae:f7:d5:29:b6:92:68:22:7a:d7:31:6d:e7:66:b6:31:
c3:80:3c:d0:12:a5:56:41:b9:24:61:9a:1b:1b:b5:05:5b:03:
e9:5b:93:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:08 2025 by rpki-client