Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gH7HAjZqMQid3fqMYzxjmzZ6llw.roa
File: gH7HAjZqMQid3fqMYzxjmzZ6llw.roa (raw, json)
Hash identifier: rdb9kaify0MNPbWEAHicYVvuXhYhzHietsLJ3K4vwOg=
Subject key identifier: 80:7E:C7:02:36:6A:31:08:9D:DD:FA:8C:63:3C:63:9B:36:7A:96:5C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDDA45F8DB0B32425A150D740D4E987A1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gH7HAjZqMQid3fqMYzxjmzZ6llw.roa
Signing time: Fri 17 Nov 2023 14:16:58 +0000
ROA not before: Fri 17 Nov 2023 14:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:a4:5f:8d:b0:b3:24:25:a1:50:d7:40:d4:e9:87:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 14:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=807ec702366a31089dddfa8c633c639b367a965c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:90:82:f8:04:16:d8:66:7f:69:da:a3:e0:
ab:83:19:91:05:7c:94:20:62:21:1f:28:24:85:af:
ce:bd:b4:9e:dc:e5:dc:2e:9a:5f:b8:d3:f7:f2:08:
17:e0:c0:ce:b0:8d:3d:70:fb:c6:18:99:c7:b9:3c:
72:4a:ef:16:e0:56:a8:e6:5d:44:1d:c6:83:4b:68:
97:31:09:64:c9:ac:6a:37:9f:cd:8e:f7:3c:93:79:
15:ad:35:61:c9:f3:a9:8a:32:3a:ff:f7:9e:f3:6b:
29:fd:a9:41:00:a5:bb:c8:84:58:a0:bf:02:6b:e3:
f3:0a:a6:e3:ae:5b:39:3b:31:71:37:1c:e6:97:38:
c0:d4:77:82:ff:1a:96:32:fa:f4:e5:81:50:c9:c5:
39:95:b8:56:28:47:d3:df:c6:b9:20:77:4f:61:37:
ce:fc:72:e3:15:8e:a1:6d:56:b9:f0:b5:fd:c3:b9:
94:55:2c:1b:c5:9b:ac:2a:be:73:30:65:00:46:91:
f5:22:ed:f4:3d:54:c3:fb:f8:ad:f4:ee:aa:31:2a:
7c:05:00:82:db:5e:28:c9:56:b6:4a:58:7c:ac:e7:
e1:e7:71:70:50:b3:e2:88:0a:61:2a:cf:60:fb:51:
52:f8:28:f5:9c:24:cb:9d:ed:f7:f9:45:ff:40:48:
ce:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7E:C7:02:36:6A:31:08:9D:DD:FA:8C:63:3C:63:9B:36:7A:96:5C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gH7HAjZqMQid3fqMYzxjmzZ6llw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:81:37:61:d2:0c:da:f9:58:e3:f5:4b:24:8c:1c:6f:c6:f1:
ea:37:ee:0e:21:f1:4d:e8:31:e0:7a:40:14:69:6f:bf:1b:b6:
7d:05:29:a7:c4:19:89:f7:a2:09:1d:c8:1b:2b:52:6b:ec:5a:
de:c8:c6:40:e8:f7:fe:02:aa:87:b6:5b:d4:5d:7c:fc:73:86:
02:a7:fd:e9:e8:33:90:72:f9:86:49:18:76:0c:d1:56:f2:1e:
33:7a:97:cc:af:e2:6a:29:2e:dd:57:be:d8:de:44:53:f3:c8:
ce:a5:a9:b4:bb:83:85:f1:62:14:43:a5:f8:27:e5:39:7a:1e:
ca:53:6c:ff:05:fb:4f:e1:4c:79:c8:e1:a8:99:6c:c9:70:ca:
44:38:4c:4a:9c:ba:8f:d0:b6:d3:7b:47:f6:00:af:aa:dc:00:
22:fb:1f:8e:65:c6:f9:32:9f:ea:33:85:ea:b3:fc:87:d8:8c:
eb:0e:0b:c7:19:ca:d2:22:be:b5:90:39:f8:4b:2a:4f:bd:c7:
c3:53:f9:d5:e3:b4:30:cc:c6:46:00:11:03:c1:27:fc:f4:21:
08:b3:d4:f3:8a:07:1a:81:da:b5:8c:71:9f:55:5d:5a:23:92:
80:ca:53:d1:d5:52:0b:1a:1f:12:0b:a1:a2:75:6c:97:09:27:
ae:c5:32:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:53:44 2025 by rpki-client