Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oArC9IemPIsFQGouPeXD08OdGPc.roa
File: oArC9IemPIsFQGouPeXD08OdGPc.roa (raw, json)
Hash identifier: rCoTkDHNTWFiNa6ZQFEYvoyw7E4hKJ6HFZNUjwzW+Lg=
Subject key identifier: A0:0A:C2:F4:87:A6:3C:8B:05:40:6A:2E:3D:E5:C3:D3:C3:9D:18:F7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C623C938F0AB99CF6E2133F620F25F267
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oArC9IemPIsFQGouPeXD08OdGPc.roa
Signing time: Wed 13 Dec 2023 08:13:06 +0000
ROA not before: Wed 13 Dec 2023 08:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:3c:93:8f:0a:b9:9c:f6:e2:13:3f:62:0f:25:f2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 08:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a00ac2f487a63c8b05406a2e3de5c3d3c39d18f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:ad:bb:5e:b1:fb:8b:26:0e:18:f5:4f:af:
55:5d:6e:60:fa:b7:cf:0b:01:cd:90:18:06:c3:53:
cd:f5:59:07:ab:1d:2e:1f:d9:e1:ef:77:34:90:9c:
d9:c6:ac:e1:6a:9f:9c:90:84:ec:c6:bc:dd:fe:af:
8e:e0:86:51:a0:1d:20:6c:fb:f2:04:9e:25:0e:82:
0b:ae:0a:66:8e:95:1f:40:59:22:41:ba:b8:3e:0b:
55:ec:ad:ea:b1:b5:d5:c0:f7:5d:23:2d:e4:05:5c:
1c:16:bf:2c:be:3e:3b:3b:a1:e1:f2:d4:7e:55:aa:
f6:6c:e9:20:76:6e:38:3e:3f:a1:57:5a:12:6d:35:
29:04:7c:1b:a5:46:ba:d7:82:d5:bc:39:d3:54:a0:
31:42:7b:b6:fa:49:37:31:44:88:40:0c:dc:35:d6:
73:32:a7:8d:b7:fa:be:60:15:f9:81:d2:28:66:40:
44:f7:33:43:90:79:b0:5b:21:8c:42:14:c6:80:55:
38:5e:e7:d2:f1:9d:b3:d8:88:51:6e:d6:04:e4:2a:
0e:d5:8e:34:4f:c1:17:1e:20:68:29:60:e1:54:89:
34:e0:70:8e:b7:73:e4:ba:9a:76:33:73:7f:fb:f9:
a3:84:a4:55:e7:9b:28:9a:ad:37:f7:9f:e2:91:25:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0A:C2:F4:87:A6:3C:8B:05:40:6A:2E:3D:E5:C3:D3:C3:9D:18:F7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oArC9IemPIsFQGouPeXD08OdGPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:c8:9a:e1:73:20:67:83:f8:3b:62:37:1b:a3:8d:b7:ae:69:
64:a5:3d:46:29:61:30:b0:f8:b9:c0:3f:65:16:c6:b1:ef:34:
95:92:1f:52:fc:14:1f:a3:e4:52:02:19:eb:cf:bf:09:c1:ea:
23:e6:a4:9d:57:58:89:0d:a9:c8:fd:f1:01:7d:2b:da:78:2b:
6c:d3:06:a5:9f:64:25:c9:8f:2c:eb:6c:6b:a3:5f:22:81:6e:
9a:ac:02:a2:c2:2c:7d:b5:a7:b4:02:f8:e5:bd:8f:79:d9:bb:
4a:03:26:05:e4:c5:7c:47:86:8a:b2:07:1a:c8:73:8a:4e:c7:
75:58:bf:f1:69:51:a4:64:25:23:46:56:82:3b:cf:72:a7:7c:
d2:09:5a:fc:c6:2e:f3:93:87:34:10:90:9e:b8:43:94:5b:3e:
e0:d9:fe:06:03:1a:7a:a4:91:39:7a:57:ba:23:f0:07:11:57:
dd:da:fb:84:64:cb:7e:56:d8:a0:fc:f4:09:bf:1e:14:a0:57:
0b:d3:64:e5:60:95:06:75:93:a7:c5:da:04:5b:7c:44:6d:9e:
57:a8:20:8f:6d:39:2d:28:de:cf:f4:4b:27:e2:e2:7e:9b:a3:
25:09:af:06:5c:1b:2d:34:0f:e1:4b:59:1e:01:76:c7:bd:94:
1f:4e:58:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:50 2025 by rpki-client