Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dppzA-LAtKam48bZok7RzgwJRVg.roa
File: dppzA-LAtKam48bZok7RzgwJRVg.roa (raw, json)
Hash identifier: kgRZHFN8JOYBDx+k0vgnpMmbgr0fOCgrQObq5fi8/DM=
Subject key identifier: 76:9A:73:03:E2:C0:B4:A6:A6:E3:C6:D9:A2:4E:D1:CE:0C:09:45:58
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8ACB86AE0A19228B2034D1A5A0EB696C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dppzA-LAtKam48bZok7RzgwJRVg.roa
Signing time: Wed 01 Nov 2023 12:11:15 +0000
ROA not before: Wed 01 Nov 2023 12:11:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:cb:86:ae:0a:19:22:8b:20:34:d1:a5:a0:eb:69:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 12:11:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=769a7303e2c0b4a6a6e3c6d9a24ed1ce0c094558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0d:a0:06:cd:5f:fe:8a:1f:d9:d7:63:40:83:
b4:f3:4a:70:ae:73:f2:2b:0e:4a:72:5a:2e:0b:68:
88:07:17:97:38:76:f4:df:4f:f0:bc:1b:b8:1e:c4:
4a:ea:6d:33:e5:6e:5c:55:33:dd:b3:99:4c:87:68:
9e:4b:dd:8a:1b:32:86:18:e3:21:18:3a:a4:57:09:
09:e9:d3:6c:b0:29:4b:39:ed:2c:29:7c:d6:a4:83:
47:1c:fd:a1:0b:de:bf:18:93:c0:fa:53:a3:16:ca:
fe:ed:b7:52:1c:47:ab:9f:59:45:f4:d5:b0:f6:cf:
e3:a2:df:b4:8e:2e:f9:2d:4b:4c:a6:9a:fc:0f:2a:
5c:f6:8d:9c:65:d1:59:1a:88:20:c3:c3:49:28:ba:
0b:ba:2e:73:ef:f5:69:f4:4f:b7:44:0e:d6:11:b8:
00:0b:0a:eb:24:d1:35:5d:0d:f0:d4:9c:66:c2:53:
59:d7:e8:38:b8:4b:a9:72:8c:5f:cd:d0:ce:bd:76:
86:d4:72:71:aa:f0:0d:76:27:f2:73:f2:05:27:57:
7d:18:ba:1b:08:ae:b6:62:a3:65:0e:1a:4f:9f:ef:
f1:f7:1a:f9:49:7c:01:94:19:f6:80:0b:7a:3b:3a:
cc:6b:c2:1d:e0:0d:ef:03:b0:a6:21:ce:d4:54:fa:
ca:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9A:73:03:E2:C0:B4:A6:A6:E3:C6:D9:A2:4E:D1:CE:0C:09:45:58
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dppzA-LAtKam48bZok7RzgwJRVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:2e:ca:3e:e9:f1:22:a0:17:21:7b:36:af:27:25:a4:c3:e7:
2f:83:e8:c8:fa:8a:07:10:85:78:fc:b3:b0:67:5c:ef:6f:5e:
f1:13:19:ba:90:44:88:f8:ac:53:57:36:2f:35:5d:94:2c:4f:
c6:4a:e3:a7:2c:c6:44:67:e7:86:2d:f7:d8:0d:ce:63:b7:8e:
8f:83:66:c7:4c:c0:2f:45:a2:b8:0b:37:8d:30:0b:db:93:6d:
e1:0f:08:3b:2c:81:43:a5:7d:7c:29:d3:50:53:5f:3f:d1:94:
07:95:78:e6:70:4a:52:c3:3a:fe:f3:0b:52:3e:e9:03:b0:a5:
aa:d7:48:12:1e:54:db:b8:86:e8:41:08:b0:2f:ce:2a:2b:69:
8d:aa:d5:57:b5:0c:ff:c2:a7:eb:e2:44:6d:d4:92:3e:1f:80:
57:8b:56:79:0a:77:4f:09:de:2a:31:55:28:7e:a5:e9:ce:fe:
13:4b:c5:0d:e6:79:23:0f:b5:a2:57:9f:6e:e1:a0:fe:e2:5d:
91:ee:09:76:6b:5d:ea:99:82:36:cd:d2:d6:23:43:d0:a5:e4:
9d:89:aa:c7:ef:26:06:bc:87:59:30:83:cb:41:dc:78:09:4c:
08:07:0c:85:2c:4d:31:35:83:b6:36:84:db:59:3e:fe:e3:6b:
e7:83:b8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:31:20 2025 by rpki-client