Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v2QkZZZ98XCOYIva_Iaiaj9a-a8.roa
File: v2QkZZZ98XCOYIva_Iaiaj9a-a8.roa (raw, json)
Hash identifier: 0LBwhaw5AbEhWggNDgZ1zptZywWa5TtRZMLEM0/zknI=
Subject key identifier: BF:64:24:65:96:7D:F1:70:8E:60:8B:DA:FC:86:A2:6A:3F:5A:F9:AF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BEC3BBD9B3BAB0D6EE958ADCC57FE01E1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v2QkZZZ98XCOYIva_Iaiaj9a-a8.roa
Signing time: Mon 20 Nov 2023 10:16:59 +0000
ROA not before: Mon 20 Nov 2023 10:16:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ec:3b:bd:9b:3b:ab:0d:6e:e9:58:ad:cc:57:fe:01:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 20 10:16:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf642465967df1708e608bdafc86a26a3f5af9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:e1:33:73:0e:b1:84:ce:ce:21:be:d7:7f:
ef:80:af:f6:92:40:47:c6:2d:ba:55:4d:4d:da:ae:
92:9d:88:21:0c:ea:92:bc:35:42:b1:73:f6:f4:a6:
75:63:2e:fb:3d:44:93:0c:43:ac:5c:c4:39:0c:4b:
be:3b:33:19:93:92:32:9b:5e:8e:b9:23:7e:5c:ba:
60:2e:d0:9a:26:c6:1c:85:8f:28:c1:9d:9b:93:a6:
98:6e:0e:cd:b6:5b:a6:51:96:a3:0d:64:ec:19:af:
08:b8:ad:7b:be:1b:7c:12:c3:cb:58:a0:ae:86:73:
94:32:56:a6:f8:95:85:bc:7a:ac:b6:90:1b:db:8c:
f4:10:45:72:ca:6e:f7:2f:68:51:d4:4f:18:ad:1f:
ef:28:8c:89:2d:55:4d:74:2a:01:44:5a:bb:e5:c7:
fb:5a:6e:2c:ee:f7:4a:c5:3b:a2:6d:c7:aa:4b:19:
d0:58:6d:51:73:f8:34:df:e1:96:88:ee:57:fe:ab:
ca:35:20:21:23:3c:a4:5c:62:88:d4:54:8e:3f:7b:
c9:da:06:73:f5:14:13:eb:aa:e8:62:d6:3a:c2:ea:
af:a0:6c:92:71:ba:56:22:a4:ac:b0:fe:b5:6c:cb:
8d:76:df:25:39:9d:fb:90:35:20:87:66:14:93:61:
71:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:64:24:65:96:7D:F1:70:8E:60:8B:DA:FC:86:A2:6A:3F:5A:F9:AF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v2QkZZZ98XCOYIva_Iaiaj9a-a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:02:a3:6e:70:8b:b6:a3:2a:f3:05:93:d5:84:35:b2:7a:ba:
e2:e8:cb:e7:50:46:c7:aa:2e:ca:e5:8e:be:b1:44:a0:66:7b:
98:4c:f9:27:a7:af:66:70:f5:b3:36:6b:06:5c:85:15:5e:21:
a3:6d:98:fa:b5:43:37:a8:37:d7:4c:a2:2c:e0:a8:e8:82:82:
4e:6e:fb:57:51:51:9b:ff:98:7f:72:da:ef:45:14:8a:dd:9d:
f6:72:f2:29:32:c2:29:7f:e4:3c:7f:a2:cd:f0:fd:69:73:0f:
57:3a:80:41:d6:00:ee:d0:cc:8d:7e:a4:d6:c6:6f:e6:b5:86:
0e:d8:84:e1:46:e0:d5:b4:b2:76:b9:14:4f:86:2e:3a:f5:ec:
25:2f:be:10:84:c7:9e:1e:28:a1:5e:a4:2b:6c:28:a9:ee:12:
e2:a8:1d:d5:91:99:65:eb:aa:79:25:cf:0d:6a:fe:76:4a:ab:
00:fa:9c:18:28:70:cb:32:ee:83:41:4b:a8:e8:a3:0c:1a:5f:
4b:65:ce:eb:a5:f1:93:dd:9b:93:5e:6d:b4:4b:ca:58:2d:26:
ea:75:a4:54:68:70:55:d5:4b:27:77:91:98:e6:df:c3:0b:ee:
86:55:0a:04:27:96:5a:2a:9c:64:fa:ec:0e:7a:a5:49:5c:62:
a4:c8:f6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:24:19 2025 by rpki-client