Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tU6JszorT2-hOI5FFz9BOAK0d7c.roa
File: tU6JszorT2-hOI5FFz9BOAK0d7c.roa (raw, json)
Hash identifier: CpM6XX8jZcI90vidXpyhOUPBz2EivhGDqbz3plxkhhQ=
Subject key identifier: B5:4E:89:B3:3A:2B:4F:6F:A1:38:8E:45:17:3F:41:38:02:B4:77:B7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8EE3CDC7495C00F72DA2B43FD17930EB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tU6JszorT2-hOI5FFz9BOAK0d7c.roa
Signing time: Thu 02 Nov 2023 07:16:15 +0000
ROA not before: Thu 02 Nov 2023 07:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8e:e3:cd:c7:49:5c:00:f7:2d:a2:b4:3f:d1:79:30:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 07:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b54e89b33a2b4f6fa1388e45173f413802b477b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:e2:29:8b:d9:62:8b:12:1a:82:6b:4e:9c:
86:d2:38:df:a6:c0:ea:b9:ae:4d:e4:cb:4d:80:1c:
8d:73:43:53:fa:76:f6:de:86:ff:b5:6e:65:a3:c3:
8a:eb:f5:2b:8b:13:ea:b4:6f:49:e4:36:7a:68:19:
99:ff:55:f6:d5:b6:bc:a0:dc:57:eb:79:aa:a3:00:
62:1a:e4:5a:47:42:91:51:0d:55:d9:07:55:bc:ea:
5e:30:91:aa:7f:0d:07:8b:3b:4d:ae:b1:05:9f:4c:
6e:de:fc:aa:1e:04:40:5a:d2:cb:41:92:40:de:93:
7a:5a:14:dc:c2:74:01:ed:6d:d5:11:22:7c:a3:73:
c9:a5:21:ba:81:42:3d:8d:5e:7c:66:3e:5c:ab:bf:
4f:76:9e:d0:9d:22:fa:de:ac:5e:53:e3:d0:a6:ef:
ac:99:c0:be:14:15:6c:c1:55:ef:c3:4f:d0:29:b3:
a9:d7:0e:aa:92:f2:04:04:97:29:24:d4:e3:0a:f3:
cb:3f:09:b1:59:09:68:df:c8:c8:74:69:ae:26:a6:
1c:66:28:3a:c1:0f:b6:0b:48:b4:09:dd:fc:fd:d3:
97:bd:58:fe:eb:b6:d3:8a:fe:77:f0:37:95:64:e1:
d8:57:b3:e8:b1:12:12:46:2e:b5:8a:57:49:ad:b0:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4E:89:B3:3A:2B:4F:6F:A1:38:8E:45:17:3F:41:38:02:B4:77:B7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tU6JszorT2-hOI5FFz9BOAK0d7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c3:90:59:09:ee:73:d0:99:61:7f:53:a8:c4:c3:f1:52:25:f6:
bd:36:65:58:8d:b6:4a:a8:07:11:1c:cc:df:e4:ab:13:2b:25:
47:77:90:e9:97:dd:41:e7:23:f7:d8:52:56:2d:d5:52:f4:ae:
12:83:46:b6:65:f0:c5:c7:5f:97:8f:3a:86:9f:48:c7:20:28:
86:5e:3b:69:74:fa:a5:20:bf:de:fe:27:bc:ce:6e:f3:37:e8:
23:07:60:77:ae:23:23:c1:2a:aa:7f:c5:2b:1d:8e:c5:0d:d6:
65:11:a8:73:80:3e:92:1f:1e:9b:8b:d5:87:49:39:a6:72:fd:
00:80:f8:ee:b0:57:5c:18:79:13:f1:a5:9e:6e:ad:c3:37:89:
72:79:8f:ef:fe:b3:64:63:20:81:ae:4f:4c:f0:18:bf:7a:1e:
2c:24:39:f6:56:b6:83:8e:c2:82:de:0c:93:e2:2b:2c:a7:0f:
b6:32:24:2e:1d:30:bd:68:5e:7b:21:c4:f6:78:fd:94:56:c8:
55:b2:62:ec:13:df:77:38:e9:75:91:f7:56:8e:dc:f9:bd:65:
f4:0a:e0:7f:f5:a0:fd:b3:3a:7c:db:5b:03:47:b4:60:38:64:
7d:c7:30:7c:35:c9:bf:6e:ef:71:20:10:30:89:12:53:24:d7:
fc:bd:92:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:22 2025 by rpki-client