Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/o4vPgTPU_NGLg3-DcRWMPgnXd9Y.roa
File: o4vPgTPU_NGLg3-DcRWMPgnXd9Y.roa (raw, json)
Hash identifier: ypV1s1SdzWeDp13DmbiFp/jNIEs2+5mQnqxqgsxDCG4=
Subject key identifier: A3:8B:CF:81:33:D4:FC:D1:8B:83:7F:83:71:15:8C:3E:09:D7:77:D6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3725DCDFF9D4C98629FCCCC1E26EC95E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/o4vPgTPU_NGLg3-DcRWMPgnXd9Y.roa
Signing time: Mon 16 Oct 2023 06:21:49 +0000
ROA not before: Mon 16 Oct 2023 06:21:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:25:dc:df:f9:d4:c9:86:29:fc:cc:c1:e2:6e:c9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 16 06:21:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a38bcf8133d4fcd18b837f8371158c3e09d777d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:39:85:7d:17:4a:73:bb:35:21:3b:fe:e0:34:
5a:dd:09:c0:05:5f:37:d4:26:f4:5f:08:61:c8:17:
eb:0d:77:74:27:4e:80:ab:24:48:91:25:d2:ca:f5:
61:eb:a7:ad:22:99:2f:b6:8c:1e:00:ea:2f:94:f3:
bb:f0:0b:c6:ef:40:aa:c6:ce:37:2d:9f:4c:98:5e:
e2:97:3c:ed:14:19:3d:4b:0f:20:d9:8f:79:73:c9:
b0:78:de:d6:7e:f4:72:30:27:9a:6c:d2:fc:2d:22:
29:ac:61:da:21:d7:10:45:aa:99:a3:63:8c:fe:d8:
97:1c:58:8c:c7:86:11:b9:f4:7a:7d:0f:27:c1:aa:
1a:8a:b2:17:2b:23:be:ca:b8:0e:78:5b:3f:7d:ff:
3d:00:98:cf:b1:39:db:08:52:71:ee:e2:4c:93:74:
8d:5d:6f:c1:78:de:f5:b7:b4:f6:b7:69:12:60:a6:
1a:1b:e8:3d:20:1f:7b:6a:3e:20:06:c1:bd:84:a4:
e7:6b:58:2e:d1:33:f8:7e:24:06:52:65:ba:cf:c0:
0b:5d:4b:f4:de:c6:20:c6:2a:de:de:e5:15:cd:eb:
7e:1a:44:12:97:03:24:25:d0:55:a8:1f:78:02:bc:
f8:0c:2a:45:e0:09:1b:d6:ae:6b:38:ad:6e:08:38:
a1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8B:CF:81:33:D4:FC:D1:8B:83:7F:83:71:15:8C:3E:09:D7:77:D6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/o4vPgTPU_NGLg3-DcRWMPgnXd9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:2e:2d:fe:b6:15:1d:dd:57:d2:c7:0b:66:bd:33:ea:e8:1f:
4e:50:a3:b4:6e:89:1d:8b:80:86:e0:1e:f4:4b:30:e1:8b:41:
99:64:f1:e4:62:4a:3a:3e:40:73:51:99:07:31:18:2b:0d:df:
3b:32:18:75:a1:e2:c8:d5:5a:fb:d0:a4:0e:a7:ef:f0:5b:58:
d7:0a:ea:65:99:8c:a0:31:7a:8b:ac:13:64:97:92:0d:29:6e:
4a:d8:7d:ff:28:1c:9e:6d:5b:c6:80:a6:dd:6f:8b:fc:67:27:
06:d3:20:36:bc:c7:c7:b1:6e:fc:3b:b7:7d:a5:6a:66:71:e5:
7c:7b:46:20:fc:60:53:a8:f3:3d:13:68:35:15:e1:31:de:d1:
c8:8a:14:92:10:f8:e2:e9:02:87:b4:76:50:a5:d1:ec:18:7d:
f5:47:42:f6:4f:69:6e:04:a5:e6:5f:9a:61:23:42:26:1e:01:
29:22:3e:e0:9e:cb:7f:62:8b:df:98:fa:34:3f:b6:29:d0:2a:
96:6c:f1:a2:14:e5:7a:4d:2c:2c:be:9a:16:7d:0d:3a:5c:58:
ef:a4:30:84:44:52:17:f6:0e:bb:3f:78:e7:51:e1:66:42:0f:
ce:25:04:4c:f2:72:ad:c5:1c:6d:45:7f:b2:f4:a9:c7:f1:e6:
64:0e:73:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:56:26 2025 by rpki-client