Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/updwksFJYr5VKXmmtUByjcPQPQA.roa
File: updwksFJYr5VKXmmtUByjcPQPQA.roa (raw, json)
Hash identifier: J28cK1XGnt+QU3XAvb7XEB3dwrFwx70yQw8YhXPJlLQ=
Subject key identifier: BA:97:70:92:C1:49:62:BE:55:29:79:A6:B5:40:72:8D:C3:D0:3D:00
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2A6A57AB4A61C84DCFA0A6CAEBE0AEFA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/updwksFJYr5VKXmmtUByjcPQPQA.roa
Signing time: Sat 02 Dec 2023 12:04:21 +0000
ROA not before: Sat 02 Dec 2023 12:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:2a6a:529e/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2a:6a:57:ab:4a:61:c8:4d:cf:a0:a6:ca:eb:e0:ae:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 12:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba977092c14962be552979a6b540728dc3d03d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:10:1e:13:26:d9:93:dc:e6:c0:34:8b:4b:
83:4f:dc:7b:27:45:4e:8d:ec:db:f4:ce:6f:3a:f6:
b7:f3:99:e3:83:3f:6b:91:d3:b6:c8:8f:95:c5:5d:
63:42:29:ce:4f:2c:90:a7:a4:07:6d:02:ae:37:11:
6e:63:88:ff:6a:91:e2:db:66:43:ac:60:b0:f5:57:
36:38:10:c0:bb:ea:33:11:b6:27:bf:64:43:19:2d:
d5:39:75:2d:00:9d:bf:76:76:47:3f:40:b9:e5:c0:
1a:1d:96:f3:85:95:63:83:9d:0b:da:d3:81:12:17:
97:35:87:50:55:1a:2d:86:54:5f:0e:a5:5d:ab:3d:
2f:0a:c4:01:f1:8a:7e:1e:8a:c8:c1:1e:31:d4:e1:
33:fa:fe:00:19:a9:0f:5f:a6:b7:29:f5:a7:30:93:
39:df:b8:27:8d:bb:f8:6c:9a:87:1a:02:6f:30:3b:
b4:87:5e:d0:e6:58:24:44:ab:50:bd:54:6a:08:4a:
b8:12:4a:62:13:49:bf:c3:90:e9:26:bc:66:5b:ae:
0f:b2:5c:63:4d:07:2d:f2:c8:39:9d:8f:7c:8f:00:
70:07:b0:9a:7a:12:bb:ce:c6:de:0f:ee:6e:ba:bc:
46:24:84:00:3d:aa:72:74:cd:a3:82:f6:c9:b8:2c:
82:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:97:70:92:C1:49:62:BE:55:29:79:A6:B5:40:72:8D:C3:D0:3D:00
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/updwksFJYr5VKXmmtUByjcPQPQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:4e:52:51:d1:89:a6:e1:2c:19:1a:62:3e:b3:3f:5e:6e:25:
4d:ff:90:8c:cf:cb:6d:12:c9:b9:79:38:26:49:67:82:9d:e7:
80:16:5a:63:1f:36:f0:8d:a7:a8:d5:cb:13:7a:d0:ec:13:00:
51:ed:c3:82:22:22:4f:dc:17:d0:7f:9d:c3:89:c4:ee:2b:45:
47:98:33:a4:41:e0:88:f1:b2:91:9b:0c:ea:e5:af:9c:98:3a:
90:84:36:d4:ca:b3:c4:98:b0:dc:49:49:da:d7:75:4e:dc:81:
b9:04:36:d5:8f:05:fc:e9:48:fe:d1:9b:fe:51:84:f4:d1:1b:
98:bc:32:65:26:30:f1:c5:29:aa:b9:04:51:c3:ba:f7:26:57:
ca:5f:9b:b8:49:c0:5a:b0:3f:c7:ef:6c:c2:39:60:96:eb:d4:
90:1f:e4:a3:13:35:49:76:63:29:bc:46:d7:88:27:d8:62:d2:
6e:46:01:05:7f:31:f3:3d:65:a9:f5:13:db:5b:3b:a5:4d:7a:
e7:80:c2:22:e3:73:e7:f8:e8:a4:0a:4c:f7:6f:8c:15:4c:44:
bc:d1:32:2c:c6:a7:68:aa:5f:da:3b:15:20:e4:7c:8d:b1:11:
09:0e:74:fe:32:54:85:83:c4:5b:06:fa:2e:a7:cd:f4:79:5c:
49:a0:e6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:53:48 2025 by rpki-client