Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/deI8WYYXAonl1tz4zx3kgXpdsJQ.roa
File: deI8WYYXAonl1tz4zx3kgXpdsJQ.roa (raw, json)
Hash identifier: lSQnaQVCMv7U1b1MMI0BrnH6tcaujfTiFRBhu7aVRr4=
Subject key identifier: 75:E2:3C:59:86:17:02:89:E5:D6:DC:F8:CF:1D:E4:81:7A:5D:B0:94
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0EBD141AB9129C9EDA0A044112225137
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/deI8WYYXAonl1tz4zx3kgXpdsJQ.roa
Signing time: Mon 27 Nov 2023 03:05:21 +0000
ROA not before: Mon 27 Nov 2023 03:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:ebc:336d/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0e:bd:14:1a:b9:12:9c:9e:da:0a:04:41:12:22:51:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 03:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75e23c5986170289e5d6dcf8cf1de4817a5db094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:43:08:f9:e7:9a:10:5b:ad:1d:fe:e5:7e:
90:7b:8e:03:f6:47:28:94:16:d2:07:a0:89:96:db:
ce:13:76:61:da:cf:25:2c:89:dd:fd:91:b2:46:02:
50:d0:49:f9:0b:c4:b6:6c:08:83:a1:b6:ed:ea:78:
52:5b:5b:4d:8c:b5:06:f9:99:33:4e:78:c4:15:f5:
b2:00:18:41:d9:25:8d:cb:5b:2f:1a:2c:9d:a3:78:
71:58:82:5c:5d:be:f5:1e:8a:e0:75:9a:cb:88:e4:
b0:ee:b3:3a:e6:08:84:b7:04:f9:1c:c9:cc:6c:d8:
36:02:69:a6:fe:3c:49:a2:5a:d4:6a:ab:bf:94:cb:
eb:45:13:74:b1:dc:22:30:22:79:37:70:c7:10:0c:
d2:f7:9b:cd:f5:62:e9:12:77:af:39:34:7b:b2:78:
f1:00:71:b1:48:7e:e3:57:02:21:a8:cc:21:09:a6:
1c:aa:c9:f2:4d:4a:88:e6:f4:fd:1b:a8:85:78:57:
58:ea:2d:a8:da:ba:79:cd:cc:c1:d2:a9:9c:17:4e:
34:82:ab:b0:6a:a2:71:8c:92:5e:77:b0:b0:58:f6:
0c:02:c6:f4:27:c7:ff:30:a0:4d:be:4b:0d:7e:79:
4a:da:e7:c2:0a:50:8d:6a:6e:15:f0:5b:29:58:eb:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E2:3C:59:86:17:02:89:E5:D6:DC:F8:CF:1D:E4:81:7A:5D:B0:94
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/deI8WYYXAonl1tz4zx3kgXpdsJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:28:82:5b:3a:f8:52:f4:ba:0a:6b:ba:0f:95:e0:e7:b4:51:
87:a0:92:6c:71:99:b0:a0:e0:ef:f2:1e:fd:2d:3e:ff:6c:53:
8a:81:f7:a8:90:98:9b:f5:c0:62:0b:94:32:06:a6:08:ec:f8:
1a:ff:7f:c4:87:8d:be:66:a7:e9:5f:98:f4:59:3e:a4:38:13:
29:97:7e:30:64:db:3a:eb:1e:fd:9b:98:c6:f8:da:b2:3b:77:
f1:0a:65:48:6a:db:dd:c3:9a:67:55:d1:b9:6e:57:a4:6a:ed:
99:0e:83:dd:fb:df:ef:2c:45:30:ca:7b:2a:67:37:3b:b1:a7:
65:ec:eb:1e:9d:3d:f2:e2:fb:19:91:3f:2c:4f:6c:b0:bf:82:
08:73:5e:5c:6e:6a:85:27:15:49:41:66:ec:6b:f0:8c:5a:75:
79:ac:37:e4:be:1a:b5:95:20:d3:b5:35:41:3a:53:dc:ad:67:
63:d0:34:88:53:5b:16:c5:f9:38:1f:10:68:cf:b5:03:08:e1:
5e:6c:c1:72:fc:c8:c7:ae:57:78:b8:c0:fb:fd:b8:40:ff:f3:
d7:5e:75:09:9d:09:6a:13:0f:a0:33:e6:2c:04:1a:38:5b:7e:
c1:72:6f:2f:89:35:0d:14:13:25:13:67:07:e1:41:dd:23:e9:
bc:90:03:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:29:57 2025 by rpki-client