Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sEklpS6K-Xn4qWMIRSGzjiVp5Gk.roa
File: sEklpS6K-Xn4qWMIRSGzjiVp5Gk.roa (raw, json)
Hash identifier: UEv6jvVhz8TO/pPNwYc+hECNMYpzXKP3t2w7v0w6oM0=
Subject key identifier: B0:49:25:A5:2E:8A:F9:79:F8:A9:63:08:45:21:B3:8E:25:69:E4:69
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3A5408FABDD952E2769E9E51463082BA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sEklpS6K-Xn4qWMIRSGzjiVp5Gk.roa
Signing time: Tue 05 Dec 2023 14:13:55 +0000
ROA not before: Tue 05 Dec 2023 14:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:54:08:fa:bd:d9:52:e2:76:9e:9e:51:46:30:82:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 14:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b04925a52e8af979f8a963084521b38e2569e469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a9:51:80:11:5a:e7:03:fa:f5:58:d6:d4:3d:
52:2a:3f:cd:7c:18:b5:91:04:f5:c9:46:f6:dc:40:
1d:15:e2:55:f2:ef:bc:14:c6:e6:ba:9a:3f:00:0e:
88:d1:97:53:3b:68:6e:a1:69:5f:de:77:51:6e:39:
bd:c6:9d:05:ed:64:f9:48:a2:72:16:60:bf:8f:81:
22:91:4c:76:83:2e:a9:56:a4:00:3c:4f:db:a1:4b:
aa:78:26:27:c8:2b:13:19:62:01:6c:ab:99:b1:21:
f8:d3:06:18:91:1d:28:13:1c:87:98:8a:92:95:6c:
d1:ee:9e:bf:01:a2:31:e6:77:ac:14:a5:aa:a8:1f:
a0:bc:aa:be:13:63:ff:f7:61:0b:04:2b:6f:0b:d1:
09:1e:63:24:fa:ea:28:ad:4b:87:47:cd:4c:26:81:
32:ad:53:c3:b3:8b:57:45:d7:f9:31:a2:bd:b7:66:
c5:16:76:ce:a9:24:e0:c3:74:af:ef:fe:43:09:46:
da:79:34:04:06:f9:92:76:cf:cf:97:bd:3e:ef:7a:
b0:77:8f:da:f6:fa:dc:a8:9f:89:80:5c:56:9e:6b:
0d:5a:bf:c6:b8:28:2d:4d:ee:e0:d1:d4:47:e0:e2:
f6:f8:7f:83:24:7e:59:0e:e4:b0:54:6c:68:ad:ba:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:49:25:A5:2E:8A:F9:79:F8:A9:63:08:45:21:B3:8E:25:69:E4:69
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sEklpS6K-Xn4qWMIRSGzjiVp5Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:88:16:99:4a:11:b4:c6:ad:ec:56:a0:aa:83:5e:de:c8:e2:
50:55:7e:68:07:95:23:de:f0:ac:ca:14:0b:36:f6:33:f0:9e:
eb:d9:bc:a6:50:a9:6d:0f:5d:f8:eb:1d:c4:02:9a:ba:59:c4:
df:5b:f5:55:ac:ef:f4:2f:60:8b:e7:30:7b:fa:2d:01:f8:5a:
06:3a:cc:4c:26:da:f0:23:1f:51:36:85:76:4b:85:83:41:92:
0a:d4:6a:32:05:18:7c:8a:cf:9a:c7:4b:9e:3a:5e:a9:17:00:
53:c0:60:b8:b6:78:68:4c:28:cf:63:53:5b:9d:5a:00:ae:00:
59:cd:52:fb:8f:d5:b0:cc:ad:68:fc:96:83:11:32:51:ac:20:
51:aa:54:29:96:32:87:0f:d1:4d:da:18:0a:f6:4c:b6:d8:b1:
9c:6f:eb:ae:a2:72:f8:8a:02:ce:22:66:6d:cd:e5:e9:8d:32:
f8:1f:90:e5:a9:c7:e5:03:d8:f6:d0:f3:de:c8:63:fe:ff:fe:
d3:45:d1:e1:db:ca:f0:61:5a:85:37:27:02:7f:5c:45:cb:18:
b9:37:cd:47:6c:7e:4d:af:9f:9a:05:63:66:5d:9e:40:19:aa:
7d:c8:f6:cd:29:9a:7c:63:1b:82:7e:d0:fd:57:26:fa:04:01:
d5:3e:18:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:01 2025 by rpki-client