Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tECvUl68-w9p2jlW4RindRdDD3U.roa
File: tECvUl68-w9p2jlW4RindRdDD3U.roa (raw, json)
Hash identifier: SU4oFLmuJHkO8uhmPgvstSZenY7I9hi/h9pYjJvj3W0=
Subject key identifier: B4:40:AF:52:5E:BC:FB:0F:69:DA:39:56:E1:18:A7:75:17:43:0F:75
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8F84068CFE65D24ADBA8C1A753676691
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tECvUl68-w9p2jlW4RindRdDD3U.roa
Signing time: Thu 02 Nov 2023 10:11:16 +0000
ROA not before: Thu 02 Nov 2023 10:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:84:06:8c:fe:65:d2:4a:db:a8:c1:a7:53:67:66:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 10:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b440af525ebcfb0f69da3956e118a77517430f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:54:1a:cf:34:2b:c0:b1:aa:cc:fb:ff:98:b8:
0c:d0:df:c5:b5:f7:f9:4b:a2:59:c4:33:c8:44:ec:
f9:0c:a0:2f:3e:99:21:aa:2e:b0:ef:59:bc:4b:87:
38:9a:a6:90:f7:2e:d5:dc:65:56:97:a9:9f:4d:3f:
57:00:f4:da:e2:3c:5c:1b:e0:81:b5:e4:96:af:01:
73:1a:2a:09:25:e7:ec:bc:52:b3:5a:30:0d:99:68:
1e:5e:54:63:60:e1:ec:e1:24:53:1e:3e:0c:d2:d3:
68:1c:ed:3a:2b:24:7d:92:1c:b4:86:ca:a5:ae:4a:
aa:c2:3e:33:e1:6e:d1:3a:f7:65:1c:1f:b3:e2:3d:
1e:65:d4:39:14:4b:2d:a0:d7:63:7d:2a:3b:41:c6:
a5:e1:a9:a0:f3:e1:64:c6:85:f2:d4:a0:af:6b:b0:
43:08:41:f1:50:fc:8b:3f:8b:94:d6:27:02:e8:5e:
df:2f:04:eb:35:a3:92:c1:b8:22:d6:8e:c1:21:da:
8a:35:b6:3a:3b:67:1f:ba:b0:ed:24:84:de:01:79:
f2:7f:31:ff:2f:87:06:6b:38:0c:00:e2:0d:c9:45:
be:36:b3:30:2d:38:6c:cd:30:c0:9d:a9:50:61:1f:
39:8f:f5:9a:af:fa:ac:f6:72:8b:3f:da:3d:e4:3d:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:40:AF:52:5E:BC:FB:0F:69:DA:39:56:E1:18:A7:75:17:43:0F:75
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tECvUl68-w9p2jlW4RindRdDD3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:7b:3c:37:ab:64:55:41:8a:6c:5c:be:96:e3:28:20:5f:fd:
07:9b:48:a8:ed:fa:6d:49:89:d8:37:e4:7b:6f:9a:7b:7e:df:
54:1f:35:00:40:30:6b:8c:6a:cd:8a:ea:90:b3:08:cc:5b:2e:
f2:36:1b:99:c2:4d:1a:57:2f:93:ba:b0:2f:87:3e:e2:f5:89:
12:98:f9:8b:67:ed:43:19:8c:2c:07:6c:44:cd:7c:a8:ce:6f:
98:e1:b2:c3:82:4e:f5:cb:61:01:da:8f:3f:73:08:2d:a5:3e:
fd:63:32:f2:d2:5a:e1:25:de:42:89:07:f3:ce:97:f9:14:cf:
89:d7:73:20:cb:62:01:fe:6c:e7:8a:19:8e:7f:28:ca:ab:82:
d6:2e:69:04:3b:63:70:43:16:9c:06:14:f6:f0:f1:57:6e:d5:
1f:dc:0b:e8:aa:94:05:6e:51:9d:87:9c:fd:23:50:ee:5c:06:
50:11:77:ea:c1:02:0f:d9:f8:af:d8:09:6c:29:32:0e:39:98:
32:35:c1:57:b7:27:06:c9:65:cb:1f:9a:89:84:14:84:79:5e:
51:c5:1a:b6:db:21:b5:59:7c:96:db:ef:66:b2:27:85:85:b0:
38:ab:d3:f6:da:9e:32:f3:e5:03:32:97:d4:71:82:da:5d:59:
8b:8b:2b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:41:25 2025 by rpki-client