Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rG7Rgwb2k1w0HjJH38ugW-otw0c.roa
File: rG7Rgwb2k1w0HjJH38ugW-otw0c.roa (raw, json)
Hash identifier: oFLHnnrQeOdlkjZHsQEXGXfyYl4mUilZlfT3BpxIgBk=
Subject key identifier: AC:6E:D1:83:06:F6:93:5C:34:1E:32:47:DF:CB:A0:5B:EA:2D:C3:47
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4DA3AA983868A6EF82E4FCA27984DC91
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rG7Rgwb2k1w0HjJH38ugW-otw0c.roa
Signing time: Sat 09 Dec 2023 08:13:40 +0000
ROA not before: Sat 09 Dec 2023 08:13:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4d:a3:aa:98:38:68:a6:ef:82:e4:fc:a2:79:84:dc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 08:13:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac6ed18306f6935c341e3247dfcba05bea2dc347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:d1:03:27:e9:ae:60:e6:98:f5:35:56:91:
da:71:ca:44:14:d4:52:5b:2f:a8:39:8d:c5:9b:02:
e6:45:50:58:c6:ab:bc:e4:3f:3c:b6:4f:10:a3:2e:
b3:ed:dc:97:56:1b:53:61:35:3f:97:e3:83:24:b4:
ee:aa:5d:2b:02:a5:99:a7:96:79:15:f3:fa:c0:a8:
1e:90:f3:52:70:ab:db:f4:ca:c2:7f:44:a1:55:3c:
78:8e:0e:1b:6d:02:96:3d:42:83:8c:a3:d6:b3:dd:
d8:b1:19:5f:4d:ef:d8:36:b0:16:4d:bf:2d:01:11:
b5:58:14:d3:27:d5:c2:5a:4a:75:8d:ab:74:aa:80:
6c:9f:d9:c6:47:26:a9:bd:11:ea:42:df:83:90:47:
a0:bf:b4:4a:c1:ab:94:47:c9:b8:3d:36:7c:d6:2d:
0b:a6:11:c8:d9:71:62:68:3e:0b:76:56:b3:f5:70:
6a:81:15:ce:5d:6f:76:30:0c:a0:5d:74:0a:c9:a6:
f7:d8:4d:e1:df:ec:49:c9:23:64:20:f9:64:1b:a5:
03:29:48:95:90:ec:79:77:58:fb:32:f4:57:71:4d:
3f:92:f6:87:6f:88:18:33:d7:48:c7:6f:4d:38:00:
ff:b5:e8:e5:7b:a9:0f:99:a7:e2:96:67:81:5a:35:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6E:D1:83:06:F6:93:5C:34:1E:32:47:DF:CB:A0:5B:EA:2D:C3:47
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rG7Rgwb2k1w0HjJH38ugW-otw0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bc:5b:aa:f2:58:67:67:3b:cb:64:d1:bf:6b:3c:08:10:a0:52:
d0:e7:46:d5:d8:24:58:c5:85:1b:c8:dc:5b:60:17:f1:72:97:
77:80:6a:57:76:2d:bc:74:d5:28:6f:4b:a8:05:c0:33:b0:73:
55:4b:2a:e3:ec:bd:cb:df:9e:83:63:ee:22:ee:65:ad:81:60:
a3:f0:55:d0:e5:f9:bd:c8:5d:8f:b8:f3:4e:ec:6a:2d:0c:57:
74:83:dd:4f:f8:8e:c6:eb:7f:28:cb:c7:81:57:8a:9b:41:7b:
68:e3:75:8c:f3:09:24:b2:d4:75:df:c6:9d:84:cc:4a:72:ef:
17:a7:40:b3:8f:0e:f4:a3:eb:a7:ff:58:d1:6b:63:6c:d6:8d:
e9:d5:b9:72:25:7c:b4:60:98:bb:42:8f:09:4c:c7:31:b4:ef:
6d:7c:3f:44:df:0f:87:a2:f0:f6:54:a3:12:2b:69:0a:e0:01:
f4:b1:2e:39:17:bd:e0:4e:15:03:ab:e2:f6:88:23:8d:27:cc:
1a:5d:7e:ed:21:e4:da:28:30:46:21:35:ba:02:a1:5e:3b:99:
7b:b3:1b:be:f4:38:16:a3:3d:9e:69:d9:b7:02:c1:9a:b9:96:
4b:a3:fe:51:3c:e2:57:67:78:d8:47:3b:8c:32:a9:bf:64:2e:
54:d7:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:50:04 2025 by rpki-client