Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t5x-jpJxOyoJeazhZhbUKshFhKg.roa
File: t5x-jpJxOyoJeazhZhbUKshFhKg.roa (raw, json)
Hash identifier: tLf2ubQwpVvlu/Ey/UI7pgQTltXSGUyiZhvDASTG8EM=
Subject key identifier: B7:9C:7E:8E:92:71:3B:2A:09:79:AC:E1:66:16:D4:2A:C8:45:84:A8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFFBF2FAB1D03BCB0B3C9A9E7B1D4CAF1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t5x-jpJxOyoJeazhZhbUKshFhKg.roa
Signing time: Fri 24 Nov 2023 05:13:21 +0000
ROA not before: Fri 24 Nov 2023 05:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ff:bf:2f:ab:1d:03:bc:b0:b3:c9:a9:e7:b1:d4:ca:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 05:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b79c7e8e92713b2a0979ace16616d42ac84584a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:ae:46:8a:f3:09:34:a4:77:ae:8d:37:bb:
93:5d:3a:d4:cf:d9:41:4f:51:2f:d2:ce:29:ed:ef:
b0:2a:9b:58:89:53:b9:1b:c9:b6:2e:9b:7d:99:47:
89:a4:54:c4:12:01:ab:25:03:b1:1a:53:ab:8d:71:
07:dd:77:ef:ab:32:a9:b0:9e:4b:bf:23:cf:87:c3:
4d:d9:0a:0c:af:8e:b7:ce:2e:30:b9:bc:b6:ff:fc:
b8:67:76:fa:4a:a3:d4:ea:2b:4e:d2:bc:4e:d3:e9:
28:f7:b3:0e:2f:9e:c3:ab:2d:db:f8:b7:fa:4f:b8:
98:ff:f0:4b:92:a7:7d:53:54:16:22:2f:22:16:49:
59:79:d1:f9:40:a9:1d:4a:49:f5:e9:e1:6b:6a:3c:
42:28:8f:88:17:7c:ec:93:41:92:33:af:32:28:10:
91:af:d2:1e:16:37:29:a5:a3:85:cb:fb:f4:ea:18:
83:af:66:8b:4f:3e:49:45:26:15:21:67:2f:bf:3a:
ec:f7:3d:ed:0e:49:b4:3b:fa:04:fc:e6:cb:db:a5:
2a:ba:50:2d:0d:bc:02:36:40:c0:2f:91:0c:bd:c8:
18:d6:7f:46:f3:45:26:fc:72:cf:73:24:c3:f4:62:
6f:8f:af:7f:2e:d0:5f:a9:f3:6f:c1:68:db:84:94:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9C:7E:8E:92:71:3B:2A:09:79:AC:E1:66:16:D4:2A:C8:45:84:A8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t5x-jpJxOyoJeazhZhbUKshFhKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b8:d8:60:ac:44:63:4d:f8:b1:f3:ef:dd:8e:6c:96:27:c8:0b:
d6:b6:23:87:57:8b:6b:17:82:3f:3b:46:83:91:0f:5b:c9:70:
6c:df:4a:bb:d4:90:27:9c:af:95:9b:36:f8:53:01:4e:ab:09:
8e:12:26:f0:f7:8e:f0:7b:63:df:40:49:92:63:bc:c2:73:7d:
78:f0:f8:00:08:60:f0:a1:a6:ed:2d:93:77:3b:c9:39:15:8a:
7b:ee:4e:00:61:13:53:85:c1:cd:40:70:9e:26:bf:31:44:a0:
99:1b:86:18:24:02:49:0d:0f:c5:75:41:99:49:9f:ab:14:7d:
ea:84:bb:04:0f:32:11:a5:e8:fc:0d:71:40:0b:e8:a1:77:ab:
40:af:b7:69:26:99:82:22:56:47:b9:1d:99:8e:89:7b:51:9d:
8e:1e:66:0a:2b:45:71:59:5a:70:73:81:60:08:4f:fc:ee:6f:
6c:84:d1:8e:18:e3:9c:16:28:b1:07:75:e4:0b:47:28:bb:8f:
fe:9a:a7:af:07:2e:b2:eb:68:c6:44:db:09:1c:80:96:5c:05:
74:10:a2:a3:ed:f3:d7:e7:80:b6:fc:ee:e3:d7:2b:64:f5:d2:
e2:e8:c4:f6:32:6b:d6:91:3a:0b:b5:75:c6:9a:ee:af:c2:db:
42:c0:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:31:21 2025 by rpki-client