Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/f3cyPOGXo7kIfVHozHj_usLPblQ.roa
File: f3cyPOGXo7kIfVHozHj_usLPblQ.roa (raw, json)
Hash identifier: NY4INCTjkMfNURnEw8clOTJO+5uYgtOJkV6oIv6M39c=
Subject key identifier: 7F:77:32:3C:E1:97:A3:B9:08:7D:51:E8:CC:78:FF:BA:C2:CF:6E:54
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6D9BF4FABD7A836A7BDB1C9B1944832F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/f3cyPOGXo7kIfVHozHj_usLPblQ.roa
Signing time: Fri 15 Dec 2023 13:13:06 +0000
ROA not before: Fri 15 Dec 2023 13:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:9b:f4:fa:bd:7a:83:6a:7b:db:1c:9b:19:44:83:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 13:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f77323ce197a3b9087d51e8cc78ffbac2cf6e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:41:aa:0e:b2:2f:b9:6d:a1:69:44:b8:99:55:
44:79:bb:8b:27:d9:3f:fd:98:84:07:8b:52:c3:89:
ad:5d:2c:97:55:f7:20:6b:e4:50:fe:b9:24:03:8e:
a1:d1:e8:cb:13:1a:fc:c4:c9:85:3a:58:dd:b6:ae:
a1:7a:65:e7:1f:10:0d:a4:ac:98:fa:ed:ba:46:f8:
41:ed:cf:d8:e8:8f:3b:cd:86:97:3f:b6:33:cd:92:
77:f0:5c:06:a8:66:bb:fb:02:88:bd:a2:f4:2f:d0:
74:78:84:0e:79:f9:51:cc:66:3f:39:55:75:9e:e4:
be:15:1d:47:fe:26:ab:38:4f:a5:e1:82:9a:a7:4d:
23:13:8a:0b:8e:d5:f2:9e:4c:a6:66:27:66:38:f2:
a5:a6:8a:e3:ed:b0:38:e1:34:69:40:3c:0f:79:e4:
07:41:a0:81:ab:d8:f9:d8:43:85:76:eb:71:d6:8a:
c1:da:b3:40:a2:f3:9e:70:40:10:90:f1:3f:d6:65:
43:8b:7b:90:c3:ab:00:f3:28:92:6a:cf:24:d8:82:
92:af:2e:1a:53:dd:f5:23:b5:88:91:a5:15:a1:1b:
af:45:10:cc:03:f3:67:fe:1f:36:1d:6a:2d:82:5b:
c5:3b:5f:12:1f:70:9a:ab:66:23:64:9d:5d:dc:a9:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:77:32:3C:E1:97:A3:B9:08:7D:51:E8:CC:78:FF:BA:C2:CF:6E:54
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/f3cyPOGXo7kIfVHozHj_usLPblQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:d1:93:3a:68:ed:ae:ba:92:b6:a9:b9:5d:01:14:28:b8:e4:
4e:8e:c5:15:8c:b3:65:03:fc:16:78:11:b8:27:b3:5c:c6:3b:
ce:3e:8f:fe:b8:ff:fd:99:ba:15:79:a3:7a:4a:c9:7f:67:b8:
4c:fc:32:9c:35:50:78:73:fc:92:05:75:df:80:a3:0d:49:0e:
16:ba:19:e8:5d:7c:23:fd:7b:ca:30:41:f1:30:a2:fe:ce:df:
db:4f:e7:e3:1a:9b:4b:8f:c9:00:6d:01:76:5b:4d:10:d1:c5:
4a:a6:51:6c:36:ba:f4:9d:bc:1a:02:eb:d3:4e:f0:6d:fa:b8:
6f:b2:91:49:f2:20:30:2b:ac:cc:d8:8a:67:29:c8:b7:eb:31:
d3:97:d3:cd:8c:a4:ee:ec:48:a3:1c:f7:9d:05:92:9b:92:9d:
49:f0:e8:e6:f2:40:3f:9b:72:ee:83:29:61:a5:5e:ec:ac:7d:
d7:8d:81:75:76:9e:69:62:66:d8:ad:7f:0a:22:27:e5:a2:16:
50:f0:8a:ea:d9:29:e4:8b:1b:04:33:88:bf:cf:31:71:50:26:
45:60:94:56:99:a8:ea:7d:fe:e0:4f:aa:09:11:1a:74:aa:cf:
99:4d:4c:23:56:a4:ff:4b:c0:b9:17:ca:1c:29:f0:a5:bd:2e:
d4:e9:dc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:38 2025 by rpki-client