Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cATYN6a8ZQgqj-llhyEogbQn_0w.roa
File: cATYN6a8ZQgqj-llhyEogbQn_0w.roa (raw, json)
Hash identifier: DQRDjqMakL9LeoEGdNIKiNgJb9ZB3zNGnhRQI7NRIAI=
Subject key identifier: 70:04:D8:37:A6:BC:65:08:2A:8F:E9:65:87:21:28:81:B4:27:FF:4C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C80B3F3EDA73081E96ECB260CA4E585A6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cATYN6a8ZQgqj-llhyEogbQn_0w.roa
Signing time: Tue 19 Dec 2023 06:12:06 +0000
ROA not before: Tue 19 Dec 2023 06:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:80:b3:f3:ed:a7:30:81:e9:6e:cb:26:0c:a4:e5:85:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 19 06:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7004d837a6bc65082a8fe96587212881b427ff4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:57:bb:ac:6c:07:b2:5d:ba:46:cc:1e:53:
32:0c:c4:e8:5b:18:d9:c9:b3:8c:cf:38:2c:85:e5:
ad:db:c4:51:bd:dc:2e:ba:8d:fd:41:c1:de:2a:b9:
cb:4e:5c:7c:2e:4b:a3:ec:a5:00:91:93:9b:20:29:
a9:d4:a2:d3:5e:cc:50:cd:78:4c:28:9c:64:14:08:
72:6c:92:d3:e8:89:e7:ff:02:96:94:1e:3a:a6:f9:
f7:e6:ed:48:36:ae:49:b4:d0:1a:fc:c3:95:7f:ff:
bf:2d:12:e3:d7:d6:88:53:15:a0:37:8e:cd:42:ea:
ff:0b:f0:93:41:10:67:43:c2:bf:bb:18:22:1d:70:
e5:17:17:e4:d8:3e:a6:e6:56:9b:77:28:36:02:55:
cb:44:d2:0a:b9:d6:58:0a:7a:ac:8b:38:b7:26:71:
09:a1:eb:ad:26:16:c5:0b:51:a8:be:8a:b6:3e:86:
95:24:24:22:ec:2b:df:7a:ce:35:14:15:8e:19:1c:
dc:d3:ce:fc:f3:40:38:b4:93:77:99:41:18:b8:8e:
e3:9b:c5:d8:d6:f3:90:dd:35:af:ac:b7:d9:23:99:
b6:c3:e1:53:82:f0:ed:3e:fd:2a:b0:a3:94:48:11:
e8:b7:ff:1c:66:21:bf:ad:7c:ac:5a:34:8b:1d:55:
8e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:04:D8:37:A6:BC:65:08:2A:8F:E9:65:87:21:28:81:B4:27:FF:4C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cATYN6a8ZQgqj-llhyEogbQn_0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:df:97:6a:da:ff:4a:93:f7:84:77:5d:95:4b:66:46:d8:a2:
51:81:84:bd:95:5a:3c:06:0b:d9:db:5a:ba:ad:2c:c6:53:cf:
73:f8:95:88:86:06:2e:8e:89:34:79:d5:ae:26:e1:de:b0:bf:
00:9b:b2:b3:ed:1f:60:9a:26:4a:03:6f:6c:fc:58:67:dd:34:
49:75:bb:ee:e6:a6:92:3e:12:a2:92:9f:52:38:79:d2:e2:13:
c8:dc:7d:dc:98:cc:8f:a0:ac:84:cb:22:e0:5f:bc:7d:7e:14:
c2:17:34:df:8f:33:b1:5f:73:5c:2b:bb:4a:6e:20:84:fc:5f:
a2:f2:f2:42:7c:cc:23:9d:7a:2b:b7:5c:ec:7c:6d:64:1c:70:
86:13:28:ae:08:8f:f4:b3:6c:05:ad:ab:bc:bb:ba:3b:f5:53:
af:87:85:4c:c4:98:4f:17:b8:94:80:25:d7:b3:85:1a:3e:3e:
fe:c7:db:ee:74:b4:ea:b9:18:dc:9e:a5:f6:d5:ad:92:3b:e7:
fb:ba:b3:3b:25:aa:e3:1b:ed:dc:2d:2c:56:c3:04:eb:35:39:
3e:f2:24:85:d4:3e:f3:7d:65:75:db:65:8e:83:f1:c1:61:1a:
75:25:2b:b6:9e:67:43:6b:3f:d6:d0:17:c1:2c:5c:2b:c9:85:
56:cd:42:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:46:05 2025 by rpki-client