Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pJSAz7OKF3zLEoJC5qKJw76J8nQ.roa
File: pJSAz7OKF3zLEoJC5qKJw76J8nQ.roa (raw, json)
Hash identifier: 7XGedn+IShPJQ9ogw0KD1M94vMzjIIXXwsLuvGmPmz4=
Subject key identifier: A4:94:80:CF:B3:8A:17:7C:CB:12:82:42:E6:A2:89:C3:BE:89:F2:74
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6E0ABB5FEAC60D10A2424940F5BA81FA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pJSAz7OKF3zLEoJC5qKJw76J8nQ.roa
Signing time: Fri 15 Dec 2023 15:14:06 +0000
ROA not before: Fri 15 Dec 2023 15:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6e:0a:bb:5f:ea:c6:0d:10:a2:42:49:40:f5:ba:81:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 15:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a49480cfb38a177ccb128242e6a289c3be89f274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:45:3c:e4:9d:d9:2f:3c:c7:32:d5:e2:72:ab:
ee:3d:8c:2e:9c:20:d8:0a:25:f9:ad:05:85:d0:3b:
fc:e3:0c:3f:11:de:8b:34:2c:cb:47:b0:f6:1e:dd:
ec:2c:2e:05:d3:3d:52:73:72:41:e0:7a:43:74:fb:
78:0c:fb:0b:1d:03:3f:42:ee:d4:23:2d:4a:f8:66:
5a:cc:fb:ca:88:36:dc:21:84:0f:f3:3d:ec:d3:2f:
77:14:3b:d9:93:34:ee:43:31:4c:e9:ed:16:b7:1a:
94:f5:59:eb:9f:22:fb:9f:ec:8e:71:b1:00:dc:17:
2e:4a:b3:d1:ab:d0:5c:a0:64:da:1a:10:5e:5f:d3:
ef:3b:3e:33:8f:3e:88:a1:2c:14:28:d1:6d:8a:db:
99:48:cd:55:01:0e:d3:a9:37:35:50:bf:d4:c5:a1:
c3:a6:e0:c1:d7:27:bb:9f:47:47:15:f6:3e:8e:8b:
50:8e:6d:b2:3b:29:19:3d:7a:c2:81:48:d9:05:32:
6b:1f:68:1c:01:a8:7f:89:2d:29:08:b0:e7:5a:7f:
ea:b4:16:1b:a2:f2:1c:f8:fb:3f:5e:c6:8f:3b:29:
1d:b5:d3:2f:b5:34:cc:58:e2:7b:71:4c:b7:1c:78:
07:74:61:5a:43:4f:57:48:e2:df:1d:a7:0d:75:b7:
a2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:94:80:CF:B3:8A:17:7C:CB:12:82:42:E6:A2:89:C3:BE:89:F2:74
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pJSAz7OKF3zLEoJC5qKJw76J8nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:96:ff:c5:80:77:36:46:0f:63:4c:be:00:fd:ec:29:b3:76:
db:7c:56:8a:e5:24:5e:d5:5b:98:6b:6e:53:3f:30:4c:b6:53:
00:06:43:2c:ae:0b:fe:ff:ef:75:49:6a:16:d0:07:99:74:51:
fe:53:25:81:0c:d8:e4:f6:2d:c7:e4:af:da:b0:5b:e7:e5:d1:
88:37:27:5b:65:36:bd:95:37:27:6d:14:ab:02:97:ea:ec:bb:
c6:d1:f2:5a:e8:cd:ec:06:11:37:ad:4b:e3:9c:51:44:99:2b:
64:45:8e:a4:8f:04:e3:74:ba:3e:7f:c7:93:af:d8:55:be:f5:
2f:bc:7d:36:70:53:0e:68:8e:01:a4:65:a5:b2:6f:0b:86:77:
3f:b5:15:8f:05:22:71:8b:a0:e2:4b:76:fc:a7:5e:25:ae:1e:
4f:db:c3:9d:14:66:19:1e:8d:57:f3:84:f0:0f:2f:4f:47:d1:
71:a6:e7:5f:b9:9b:f7:f1:6b:4b:8f:0f:43:a1:f0:19:59:d9:
39:26:a7:07:8f:a9:b0:44:74:aa:7e:dd:b8:4b:01:6a:39:e6:
c9:5e:a0:6a:60:7e:71:a3:4c:d8:7c:25:28:7c:bf:34:ae:c4:
5a:da:dc:ac:78:5f:48:40:9b:ee:63:c0:2f:6a:66:e6:6a:6a:
0c:2d:80:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:04:14 2025 by rpki-client