Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/shtqMdKe6ZDByjTfc7JhT_2ygyQ.roa
File: shtqMdKe6ZDByjTfc7JhT_2ygyQ.roa (raw, json)
Hash identifier: 0tzjeW2OPGy2rgaw2mnB687sfG0A8Qm3pK09s43kA7k=
Subject key identifier: B2:1B:6A:31:D2:9E:E9:90:C1:CA:34:DF:73:B2:61:4F:FD:B2:83:24
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0C6B588742E830496A54D45C337066E7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/shtqMdKe6ZDByjTfc7JhT_2ygyQ.roa
Signing time: Sun 26 Nov 2023 16:16:50 +0000
ROA not before: Sun 26 Nov 2023 16:16:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0c:6b:58:87:42:e8:30:49:6a:54:d4:5c:33:70:66:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 16:16:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b21b6a31d29ee990c1ca34df73b2614ffdb28324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:0e:c1:86:06:fb:b4:86:72:6d:13:c5:c5:
f1:ae:0c:02:42:1f:f5:85:99:9e:be:0f:82:90:9d:
d3:77:77:0f:9d:3d:f4:2b:01:19:55:4b:18:8b:70:
89:37:5c:62:8a:a1:49:c0:23:27:cf:0f:e0:0f:84:
41:87:2d:0d:17:6f:ec:b1:7b:8a:4f:ca:ad:07:9e:
16:12:b0:19:6a:5e:28:4e:be:a1:82:d9:2d:16:ac:
01:0f:c7:06:3b:5e:b7:20:a0:71:f5:5d:a6:89:2c:
5a:d2:54:ac:8a:f4:d1:5c:c8:63:17:77:fa:a6:eb:
0c:7f:43:9e:9f:5c:f5:92:16:e8:25:0f:ca:25:40:
41:dd:0b:9d:fb:29:aa:31:36:3d:1a:f3:0a:2d:fb:
df:8e:68:bb:61:58:9a:13:b8:30:e7:a9:bd:fc:99:
25:ce:60:16:d3:9d:92:e0:a2:57:29:65:f7:0f:24:
6a:3d:57:a8:d0:e3:56:a9:b8:96:82:0e:19:5a:24:
2d:d0:95:27:7a:75:14:75:10:15:ce:77:de:43:b7:
ab:e0:1e:fe:cf:21:e7:c4:cf:2b:43:68:c6:77:7d:
88:a0:ea:8e:94:cb:66:44:b0:5a:02:61:e6:9d:0f:
e9:76:18:b7:5d:2b:34:4c:b9:5d:58:6c:39:74:d8:
b2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1B:6A:31:D2:9E:E9:90:C1:CA:34:DF:73:B2:61:4F:FD:B2:83:24
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/shtqMdKe6ZDByjTfc7JhT_2ygyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:98:2e:61:77:8d:73:ea:71:14:25:dd:b7:1b:03:d6:c0:9b:
b2:f4:e0:f8:8f:7a:96:0c:03:ef:37:c8:6f:69:e4:39:17:17:
85:a7:2d:bd:90:b8:3a:5b:a9:6e:72:5a:6a:d1:d2:e8:79:9d:
23:9f:0e:a9:01:11:e3:cb:12:f0:85:f0:94:83:28:24:d2:6a:
b3:de:c0:f2:96:82:75:9c:ae:3c:7a:a9:d4:fc:e8:2a:0a:f6:
e7:4d:50:97:f3:f9:32:c5:e3:48:c5:b2:e0:b4:47:ce:7f:56:
ec:60:a6:16:85:ac:ad:29:f1:8d:a0:09:18:43:c2:9c:24:90:
38:d5:8c:57:67:d9:6a:84:2b:16:ab:36:95:9a:76:68:f1:c6:
04:a5:5f:0c:7f:e7:dd:b1:4d:24:eb:7a:38:eb:92:fc:b8:29:
61:f4:78:8c:d4:55:8c:ec:e8:7b:20:ec:ab:4b:d7:6e:e6:95:
ec:8a:f9:53:08:f8:bf:e1:d8:cb:42:1f:47:37:32:a4:8e:57:
cd:3e:65:fd:d2:e7:bb:bd:9f:ef:f1:98:37:53:d7:4e:cb:0c:
cb:0c:f0:09:e4:4c:19:6e:54:ec:80:28:69:03:3b:7c:bf:2f:
05:03:34:15:f2:7b:2f:13:b3:1a:2e:90:1e:ec:e1:6f:50:26:
30:c3:00:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:47:59 2025 by rpki-client