Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uOMjW2EysHsAqe25BdF2Ql2dMV4.roa
File: uOMjW2EysHsAqe25BdF2Ql2dMV4.roa (raw, json)
Hash identifier: Y4r2t5smAon3FnlUw2FlsnDeetr7UlduceYZ5P4ddb0=
Subject key identifier: B8:E3:23:5B:61:32:B0:7B:00:A9:ED:B9:05:D1:76:42:5D:9D:31:5E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF34E10C2C50B0B16B6B7FF0486559DB4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uOMjW2EysHsAqe25BdF2Ql2dMV4.roa
Signing time: Tue 21 Nov 2023 19:14:21 +0000
ROA not before: Tue 21 Nov 2023 19:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f3:4e:10:c2:c5:0b:0b:16:b6:b7:ff:04:86:55:9d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 19:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8e3235b6132b07b00a9edb905d176425d9d315e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:fe:d2:17:a8:e3:a6:1b:86:a8:7b:30:07:
35:dd:5f:35:22:0f:f9:47:8e:6e:d4:fa:62:3c:b8:
15:ac:70:a1:ec:ea:b8:47:07:50:1d:58:58:f6:73:
91:32:9e:66:f4:f9:71:b7:67:75:d1:ef:cc:e9:d6:
b6:58:41:b5:43:c5:8b:47:b1:d0:51:cb:68:a4:e1:
46:88:cb:8c:72:10:7d:cf:7a:63:ae:ba:27:dd:50:
31:73:f9:b4:4a:60:0a:4f:c6:63:77:0a:fd:08:b4:
a7:66:e4:9c:60:75:64:e9:c2:18:1c:8a:3d:86:11:
49:37:aa:e6:ea:cd:8d:9f:94:6e:07:63:af:77:51:
6c:7e:9f:1f:ab:d8:7a:4b:f4:aa:94:b6:6e:af:63:
28:4e:96:8f:95:6b:12:11:74:ea:56:ab:98:34:f1:
8c:f5:9b:c2:54:33:b1:c7:d8:b6:3f:f2:bc:44:1e:
ba:0a:0b:d6:8b:83:55:06:eb:df:da:5a:2c:36:ae:
6e:ca:d8:09:5f:43:58:62:32:d4:d8:86:ef:69:57:
81:69:61:5b:fd:80:9f:ff:b4:d4:03:bb:bf:9c:c9:
c9:cd:1a:ce:8e:4b:4e:45:68:32:ae:3a:50:33:c0:
88:18:c8:04:ff:54:fc:b3:30:6d:20:f3:4d:30:36:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E3:23:5B:61:32:B0:7B:00:A9:ED:B9:05:D1:76:42:5D:9D:31:5E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/uOMjW2EysHsAqe25BdF2Ql2dMV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:21:22:a4:02:95:b3:58:ff:ec:f7:d2:7a:75:90:06:5a:e4:
a2:8e:a0:3e:fa:9f:99:9e:e7:ff:66:9f:a6:d6:c7:32:2e:83:
a3:60:ef:82:8b:c2:b5:7b:c0:1e:92:2d:fd:b4:97:e1:a7:1e:
00:00:8a:0b:16:f3:c0:40:62:7d:79:db:f5:7e:ee:e7:30:45:
2b:df:c4:fa:61:13:90:33:a8:a6:a5:4a:b3:39:a7:4d:5c:fa:
49:5a:2b:e9:88:fe:ed:f3:14:0c:b6:33:c8:24:df:73:d7:ae:
2e:78:7e:b0:4d:9a:5d:99:c6:35:cd:80:b8:3c:8b:71:e0:51:
15:d1:f5:2d:c8:a9:06:39:25:51:e8:da:cd:78:93:9e:42:1e:
53:0d:55:51:97:22:f3:76:89:07:8c:dc:33:02:93:01:c0:8c:
a8:fe:05:e6:56:95:2a:06:63:7f:94:5e:49:5e:a7:9d:5f:44:
f9:00:12:9d:77:ff:09:39:01:6e:bb:9e:39:03:d1:12:0f:03:
62:5e:04:24:ab:53:47:55:c1:85:15:e9:f7:58:86:e0:77:22:
36:f6:da:75:41:70:91:4a:b3:62:8b:eb:ba:c2:9d:a9:64:44:
52:f2:49:d7:e2:e4:f7:13:9a:23:ec:dd:a9:e4:f6:ee:b1:10:
90:97:c6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:32:31 2025 by rpki-client