Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c3d2QNayi-6QETyFtLVKPe1DAVg.roa
File: c3d2QNayi-6QETyFtLVKPe1DAVg.roa (raw, json)
Hash identifier: dMcweTv0rSBDQTS9fcV1nVTcF4EYch0RTGIUwXGkzDU=
Subject key identifier: 73:77:76:40:D6:B2:8B:EE:90:11:3C:85:B4:B5:4A:3D:ED:43:01:58
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C386535396FF42F91244A9131EDE7F865
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c3d2QNayi-6QETyFtLVKPe1DAVg.roa
Signing time: Tue 05 Dec 2023 05:13:26 +0000
ROA not before: Tue 05 Dec 2023 05:13:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:38:65:35:39:6f:f4:2f:91:24:4a:91:31:ed:e7:f8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 05:13:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73777640d6b28bee90113c85b4b54a3ded430158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:ae:05:88:13:ec:bd:d9:7b:e7:3d:ab:01:
c2:15:de:15:a6:c5:25:a8:87:07:df:5c:e1:d3:f7:
41:1f:e7:0c:16:3f:55:2f:23:85:9f:af:ad:bb:8e:
8f:a7:ba:59:84:8f:03:b6:82:cf:dd:26:43:1f:e1:
39:78:5f:bc:df:18:ab:9c:00:bc:b6:bc:a8:16:86:
0b:1f:44:f3:18:f0:77:47:04:b4:2e:98:f2:68:ce:
8e:79:a2:98:ad:3c:6a:04:bc:9e:1f:20:28:8d:aa:
78:0b:fe:f3:62:85:7a:4d:fe:b0:1e:df:b4:41:80:
d0:cf:e7:08:c6:7f:d3:84:fb:d0:50:87:1e:af:7a:
1c:f9:75:40:55:39:a5:6d:65:4b:16:71:22:dc:29:
87:81:69:e3:25:9a:9d:83:4c:fb:46:67:1e:e8:20:
f8:0d:fd:16:57:33:c0:d9:b9:01:37:01:6d:88:5e:
34:65:cf:2e:95:4f:02:a3:ae:b0:e4:68:90:21:54:
21:15:23:10:16:55:b3:dc:6a:db:60:71:36:66:59:
be:15:3a:12:c9:f1:a7:1b:1e:bb:65:dc:cf:c5:f1:
56:91:3d:ab:55:27:58:d8:37:73:64:83:14:82:31:
60:51:0e:a0:6d:50:1a:ac:0a:ff:4c:81:42:1a:ca:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:77:76:40:D6:B2:8B:EE:90:11:3C:85:B4:B5:4A:3D:ED:43:01:58
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c3d2QNayi-6QETyFtLVKPe1DAVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:e6:9d:20:e2:50:d5:1f:58:3e:65:6a:9c:86:39:78:ca:a6:
26:02:17:d4:1e:dc:b7:e8:87:0e:b1:3f:48:64:6e:be:8d:8f:
8f:dd:53:f2:cf:66:5c:65:7c:c2:cb:63:c8:ff:42:46:2d:7c:
fd:76:e8:b4:55:da:cf:06:92:81:ca:95:d3:30:05:1c:84:6e:
45:36:79:83:36:29:f5:6e:1f:b3:33:3f:ff:ab:67:e2:73:f4:
76:18:d5:6b:35:fc:ad:7d:06:37:44:17:fd:ce:54:d2:27:02:
01:15:45:4c:aa:94:bf:7c:8f:cf:ca:89:f9:e1:9b:a2:7f:14:
e8:fa:8e:b7:bf:a1:99:75:b4:50:ae:07:d0:e8:ca:eb:3c:09:
7b:fb:a8:31:21:6c:a3:73:b9:41:94:6e:04:e1:fb:d6:af:15:
af:05:b8:4d:c6:3e:6f:e7:0b:47:95:bd:b2:64:f9:27:00:81:
78:fb:44:ea:58:a2:3c:6b:e7:71:78:b0:da:96:ab:55:a6:36:
d5:14:ea:6e:eb:11:25:02:86:88:98:6d:ed:cc:ed:1b:8a:98:
8a:a3:41:f7:d4:a2:98:1f:64:cf:71:86:1a:67:c5:43:35:da:
c8:4e:5c:fc:e4:65:bf:95:d4:c6:79:df:3a:3f:3c:06:a4:f2:
51:80:8f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:59:04 2025 by rpki-client