Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hPCpy0DXyry7owfwSCMQ1chewEY.roa
File: hPCpy0DXyry7owfwSCMQ1chewEY.roa (raw, json)
Hash identifier: UIfqyYpvJvI+msNxAEMAlbcbLT/i1XLQTvEJeuQrWf0=
Subject key identifier: 84:F0:A9:CB:40:D7:CA:BC:BB:A3:07:F0:48:23:10:D5:C8:5E:C0:46
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF8DD8D5AD2D94EF01971C478649736B4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hPCpy0DXyry7owfwSCMQ1chewEY.roa
Signing time: Wed 04 Oct 2023 04:06:23 +0000
ROA not before: Wed 04 Oct 2023 04:06:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:f8dc:373e/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f8:dd:8d:5a:d2:d9:4e:f0:19:71:c4:78:64:97:36:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 04:06:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84f0a9cb40d7cabcbba307f0482310d5c85ec046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:f1:53:3e:86:a7:6a:46:c0:c0:ec:34:97:
7f:4e:e8:3e:11:96:c4:d6:d3:2c:5c:41:e4:cf:30:
3e:aa:b0:fe:9f:07:19:96:4a:e2:f8:37:f8:40:2b:
a9:d5:6d:7e:b5:58:18:3d:04:e7:4b:9e:57:1d:4f:
2a:7b:a8:d4:00:5a:a0:c0:fb:92:a4:9f:b0:65:15:
08:ee:41:58:d6:b9:e5:a2:42:84:47:bd:10:7d:d4:
ea:11:d4:b0:11:aa:4b:06:5b:a1:f0:8d:1b:98:bc:
62:ee:5c:38:1d:33:9c:44:8d:66:24:35:d7:66:01:
9e:a0:fa:d9:88:ee:b6:a2:37:8e:c3:70:43:51:25:
fd:07:8d:99:05:00:e2:b3:77:ca:dd:5a:e7:53:4b:
5a:fd:6b:79:d0:80:ed:85:31:31:49:de:e6:6f:57:
ae:3b:60:ab:fb:0f:9f:f8:c9:fa:72:74:de:33:69:
66:28:f1:31:1e:2e:dd:47:9b:ce:5d:5c:9f:12:e5:
a5:75:8a:ef:14:3c:95:dd:48:09:b4:9f:8d:f0:b6:
37:be:3b:48:e1:12:4b:ce:bb:41:09:61:d4:29:47:
d4:ff:c6:bd:25:b7:7a:93:a6:0e:e8:45:3f:e2:1c:
16:34:a5:c5:27:ba:cc:43:94:70:40:c3:bb:13:ed:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F0:A9:CB:40:D7:CA:BC:BB:A3:07:F0:48:23:10:D5:C8:5E:C0:46
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hPCpy0DXyry7owfwSCMQ1chewEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:fe:a8:fd:a6:dc:47:e5:f2:fe:c3:db:52:03:17:e5:54:71:
40:fb:c0:11:55:83:ee:20:00:02:a7:95:05:14:74:fe:d4:95:
21:71:43:3f:f1:61:1e:97:87:b1:69:88:41:16:7b:69:7a:d8:
83:89:b1:15:34:01:d7:01:7e:7e:44:f3:4f:d5:79:c9:31:86:
29:d7:5c:91:ce:08:87:c8:44:22:dc:1b:6c:aa:f2:76:e8:28:
14:86:54:5c:d6:53:de:f0:6f:e8:1d:ae:fa:17:c0:d7:ab:cf:
9b:85:65:68:c1:68:e5:b3:9c:07:29:ce:59:7c:78:ce:80:de:
d2:2c:2a:bc:b9:38:5d:83:f2:b4:a5:8f:27:bb:2a:69:93:49:
27:b5:4c:f1:4d:ab:cc:71:bd:fe:c0:12:4e:35:6d:58:2c:53:
86:e5:35:a8:d9:cf:fa:bd:40:8b:7e:aa:99:24:1d:18:00:cb:
70:11:81:99:89:b3:11:ad:fb:87:3d:19:bc:a5:bb:e0:d3:22:
87:9b:0f:b8:55:66:fd:8f:eb:80:f4:76:62:62:06:01:05:53:
18:3d:61:ac:22:dc:b1:5e:25:f6:65:ac:69:83:96:aa:d3:3d:
8b:a1:a1:ff:b2:ad:05:4c:70:51:eb:9c:d9:94:97:6f:d4:6f:
9c:d4:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:43 2025 by rpki-client