Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t0hkYhfR2i75pjDLY3zduCj3QSQ.roa
File: t0hkYhfR2i75pjDLY3zduCj3QSQ.roa (raw, json)
Hash identifier: ZddSefKOQbp8QuXZmKIlRf4nxyUNNkdvcJqkWyeMePI=
Subject key identifier: B7:48:64:62:17:D1:DA:2E:F9:A6:30:CB:63:7C:DD:B8:28:F7:41:24
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B22B3E14747BD9639567F9C4299E58DA4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t0hkYhfR2i75pjDLY3zduCj3QSQ.roa
Signing time: Thu 12 Oct 2023 07:04:55 +0000
ROA not before: Thu 12 Oct 2023 07:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:22b3:37b8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:22:b3:e1:47:47:bd:96:39:56:7f:9c:42:99:e5:8d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 12 07:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b748646217d1da2ef9a630cb637cddb828f74124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:16:90:d6:37:7b:e8:be:3a:86:ca:13:f8:
21:df:35:80:ec:62:4c:3e:4e:d2:e6:c4:75:65:0c:
91:91:00:20:a0:c6:52:2b:2a:37:67:bc:37:38:d4:
9d:64:dd:3f:14:02:c3:e7:61:28:3d:4d:5b:ce:ad:
b1:5c:2f:49:4c:2d:5b:24:35:5c:51:17:41:1f:d6:
aa:24:50:e1:29:50:f1:b5:3e:97:ec:b5:21:88:c4:
a7:4a:f2:ad:92:6d:97:43:81:b9:2d:e4:5d:7a:08:
02:05:80:82:1a:ea:f9:17:69:02:3e:d6:ae:e8:03:
f3:67:04:6f:75:be:b9:31:da:b7:af:b2:12:e4:ac:
e2:94:b3:9f:bf:53:aa:c4:ab:e6:e0:f4:28:34:a5:
9a:a6:90:c2:f2:91:e5:c7:2b:42:08:4d:c4:81:41:
13:c7:59:1c:97:22:28:c3:8e:00:94:e6:d1:22:f1:
f3:77:9d:6d:02:7f:3f:60:8b:db:42:48:70:8e:e9:
3c:b9:2c:1b:f7:93:3d:ac:fd:55:af:02:b2:fb:17:
86:8a:cd:4b:d6:0a:c3:26:44:af:25:9c:2a:60:f8:
d6:e4:9d:68:c9:55:e7:ed:c4:16:83:95:84:15:73:
bd:a3:28:6b:98:97:6f:84:e2:28:0f:52:9c:f6:25:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:48:64:62:17:D1:DA:2E:F9:A6:30:CB:63:7C:DD:B8:28:F7:41:24
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t0hkYhfR2i75pjDLY3zduCj3QSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c6:f4:4e:af:0c:92:38:b5:e9:42:b6:90:d1:8c:d0:b0:51:10:
80:aa:91:ea:85:b4:f1:2f:41:e9:93:9e:d3:cd:a2:41:0b:2e:
76:6c:b5:d7:d1:98:e4:90:1f:5d:d7:38:99:8d:8c:c9:95:6f:
7e:d8:8e:1c:f1:1d:93:4f:a9:b8:0d:c5:9e:2f:93:45:5a:09:
72:4f:6d:ad:ce:de:bb:6a:a5:0d:c1:10:47:c8:06:a1:20:cf:
97:55:b2:19:11:7a:47:76:c5:eb:01:6c:7e:7b:61:c6:7d:c0:
e6:20:cb:26:01:55:2d:7c:7d:90:c7:33:25:e5:de:4d:34:cd:
33:ea:54:45:6b:93:2b:99:da:2b:27:80:b7:82:ae:54:6c:c8:
02:d6:93:b0:4f:af:af:ef:8e:54:91:9e:44:6d:88:b6:5e:a1:
9c:3c:72:4a:12:36:01:a4:f6:33:61:d8:d9:6a:01:87:58:53:
cb:26:04:44:ec:88:8b:f7:5a:13:1b:3b:04:05:6a:b0:e7:31:
19:96:7d:b6:8a:30:f3:e5:30:35:d4:65:f7:fe:e6:a8:3c:24:
2d:e8:0d:be:45:07:42:72:6c:b3:a2:98:2c:ec:68:37:86:77:
5a:40:ef:8a:66:af:42:42:54:95:3d:8b:0d:6e:0f:e6:6c:b1:
af:29:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:56:35 2025 by rpki-client