Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rsz6UFSFsUaWi4Hk5dIx67ZkZ-A.roa
File: rsz6UFSFsUaWi4Hk5dIx67ZkZ-A.roa (raw, json)
Hash identifier: Nj6iq223dE29JA9Y9VaS3qBQzerY53YeCRapbAVHOqU=
Subject key identifier: AE:CC:FA:50:54:85:B1:46:96:8B:81:E4:E5:D2:31:EB:B6:64:67:E0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3F13D5F714420CD92D7F3745B93D648A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rsz6UFSFsUaWi4Hk5dIx67ZkZ-A.roa
Signing time: Tue 17 Oct 2023 19:19:06 +0000
ROA not before: Tue 17 Oct 2023 19:19:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3f:13:d5:f7:14:42:0c:d9:2d:7f:37:45:b9:3d:64:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 19:19:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeccfa505485b146968b81e4e5d231ebb66467e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:2e:0c:93:30:61:f4:2a:ba:55:f1:89:5a:
34:4c:88:9e:45:87:31:96:fa:8f:8d:cf:eb:74:ef:
6a:ac:ec:b4:d8:25:ba:9f:b1:1d:b2:c9:01:6e:fa:
fb:ce:17:b6:e7:c6:09:ec:55:33:34:4e:70:6f:b8:
51:e5:50:2b:3e:15:93:e0:eb:fe:40:72:62:42:28:
90:9f:94:0d:64:5f:cb:43:59:52:2d:c1:83:2d:b1:
3a:b0:40:49:c9:0b:0e:1d:1f:fa:05:63:44:03:2f:
19:88:62:86:f5:af:b6:2a:08:bd:18:28:14:39:76:
66:be:08:ca:c6:1a:4d:76:07:e3:8c:be:c9:b3:c4:
a8:1d:9c:41:26:5e:92:50:82:4b:d3:14:da:11:0f:
92:b9:8f:45:72:24:c5:08:20:44:fb:c2:53:4e:98:
de:ad:b4:bd:f6:d7:36:eb:47:bd:c7:80:ec:4e:8d:
69:39:ce:d4:ab:bb:41:28:12:21:35:11:42:8d:23:
99:eb:7e:c2:7c:8d:e0:28:3a:c8:7b:0f:57:63:a3:
ae:4e:a7:d6:55:4e:ed:16:0a:f1:37:50:df:d8:2e:
e4:2b:8a:65:5c:d1:cc:ec:58:a4:e7:0f:a2:94:cf:
37:82:29:e0:9d:b5:0b:1e:00:97:04:61:3e:3d:f1:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CC:FA:50:54:85:B1:46:96:8B:81:E4:E5:D2:31:EB:B6:64:67:E0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rsz6UFSFsUaWi4Hk5dIx67ZkZ-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:84:69:8a:f6:c7:4a:85:3d:85:70:b8:4c:13:1f:63:53:cf:
14:84:7d:b4:bc:2e:5b:c0:2e:7a:29:7f:88:25:76:38:22:9b:
e6:5c:50:5b:93:ad:89:e4:81:db:96:be:75:ed:d8:f9:9d:b1:
31:8c:71:bd:59:5e:9e:6b:21:d0:b5:21:84:e4:6d:df:09:c3:
8a:61:1a:c5:83:7c:aa:b4:2a:59:40:3f:3d:bd:53:04:b5:8c:
60:22:fe:98:ca:f8:b7:09:42:35:43:c4:6f:15:b4:65:69:35:
50:32:4a:6d:4e:b6:f5:76:b6:a3:6d:c2:2b:76:78:a4:e8:75:
39:f9:14:a3:60:0f:14:89:38:79:bc:2c:d8:7e:f9:62:2a:7a:
70:8a:75:0d:19:11:eb:05:01:be:0e:27:af:a8:99:19:e0:07:
13:38:d6:3c:e5:34:b7:01:4a:7c:33:d1:bd:a6:62:22:e6:1e:
bb:5c:8d:f4:c4:bc:df:88:54:f4:16:5f:86:ef:52:43:84:9e:
9d:58:a9:24:ff:9a:bd:c1:2c:f8:50:6b:c0:5b:af:a5:71:b9:
bd:eb:a3:54:a2:31:69:c9:66:19:f5:a1:7a:d1:57:43:18:cc:
b2:87:14:1b:cd:3e:ea:2e:fd:aa:9f:07:8b:4c:02:79:f3:43:
f2:83:1c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:04:04 2025 by rpki-client