Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c1U4MBMOw-CwhOGEf2wjkYhU9mQ.roa
File: c1U4MBMOw-CwhOGEf2wjkYhU9mQ.roa (raw, json)
Hash identifier: EsDbSFALfqBmp/dtvj3p2yHK/sldHjNx8yZzyD/DUrI=
Subject key identifier: 73:55:38:30:13:0E:C3:E0:B0:84:E1:84:7F:6C:23:91:88:54:F6:64
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0996B7E77BDA4D7BD2371C27521AFE40
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c1U4MBMOw-CwhOGEf2wjkYhU9mQ.roa
Signing time: Sun 26 Nov 2023 03:05:21 +0000
ROA not before: Sun 26 Nov 2023 03:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:995:e786/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:09:96:b7:e7:7b:da:4d:7b:d2:37:1c:27:52:1a:fe:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 03:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73553830130ec3e0b084e1847f6c23918854f664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c4:77:b8:38:22:59:e9:92:40:cb:f8:d5:3d:
ca:fd:25:68:62:26:66:a3:4f:94:18:8c:59:14:f6:
57:5d:0e:82:90:cf:b7:b8:63:38:04:24:85:f8:72:
6f:c0:dd:c0:5e:78:fa:24:c8:64:62:b0:c4:df:d7:
94:ec:b7:02:da:5b:11:f4:77:59:0f:76:fe:de:e7:
f0:5c:f6:9a:4a:18:68:19:55:93:7b:be:26:72:08:
35:92:0b:d1:36:ab:62:f2:26:c5:dd:42:4f:34:f2:
ac:3d:af:15:96:66:fe:01:98:d3:7d:4a:5a:1d:00:
46:b7:85:5f:e5:ab:5e:1e:24:35:09:57:08:7d:5c:
f3:83:c7:73:1f:63:50:16:3d:e4:8a:bb:2d:5b:76:
a5:5b:fc:15:e7:74:99:e7:62:d0:34:b7:6a:24:65:
ca:ea:a3:50:68:ed:65:fb:6f:8b:5f:4f:45:1c:b4:
b3:1e:d3:9f:f5:59:06:1f:6c:12:59:c0:2d:ca:41:
3c:1b:f1:ad:02:4d:12:e2:94:86:76:7d:06:32:2c:
ec:90:c5:bd:6d:0d:a5:cb:b4:71:0b:91:30:c5:20:
83:cd:97:e6:6f:a0:84:55:ed:1d:eb:d7:f5:9a:82:
a1:57:73:af:d6:fb:af:48:d5:91:eb:d4:0f:a5:87:
82:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:55:38:30:13:0E:C3:E0:B0:84:E1:84:7F:6C:23:91:88:54:F6:64
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c1U4MBMOw-CwhOGEf2wjkYhU9mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:40:a1:69:44:d4:ed:94:0d:ff:17:f3:86:11:67:ab:72:90:
58:5f:3d:c4:ec:83:f5:6b:ee:97:06:ea:cb:89:92:5f:fd:17:
57:2e:de:ce:3b:5b:89:88:fe:57:dc:70:aa:0f:43:5b:50:d8:
6c:74:63:bb:40:02:4d:07:a9:8d:a1:e7:06:e4:21:68:c7:c4:
91:b4:b0:a9:5f:d2:e5:50:0d:d6:88:44:2c:ad:54:8f:e1:57:
f6:00:c2:b4:cf:42:12:e6:44:fe:28:8a:cf:8d:33:78:28:80:
3b:f8:8e:5f:f2:31:f7:46:ed:6d:65:a8:0f:9d:4e:31:60:28:
7d:f3:07:cf:7f:17:52:1a:36:6e:65:01:45:f8:b0:cb:00:12:
f6:55:6c:6d:ed:c4:c8:3e:82:70:a7:1a:2e:0d:16:17:d3:58:
04:83:b8:87:b2:a7:fe:d7:8e:94:a3:8f:16:cc:6e:8b:eb:31:
01:2c:77:cb:0b:05:cb:cf:2a:b0:e7:71:83:64:39:a5:1c:33:
d5:96:65:36:22:23:79:ca:47:7f:0b:e0:a8:da:e6:ca:db:2a:
3c:85:08:5c:4e:ff:80:36:62:73:f6:90:b4:76:76:40:dd:5c:
59:c0:b8:d9:29:5c:31:23:48:24:fe:a4:1d:a2:01:b9:ff:33:
76:6c:3d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:00:00 2025 by rpki-client