Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vAX3BHwPiQL9Jc0KA9exvqiTpb8.roa
File: vAX3BHwPiQL9Jc0KA9exvqiTpb8.roa (raw, json)
Hash identifier: 7vDbtpnp9C30w1fHt2P9hNi8KyxfvDvJusGSbIFcKEM=
Subject key identifier: BC:05:F7:04:7C:0F:89:02:FD:25:CD:0A:03:D7:B1:BE:A8:93:A5:BF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD43572A3A87AE8F9B220D72784312B81
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vAX3BHwPiQL9Jc0KA9exvqiTpb8.roa
Signing time: Wed 27 Sep 2023 01:16:27 +0000
ROA not before: Wed 27 Sep 2023 01:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d4:35:72:a3:a8:7a:e8:f9:b2:20:d7:27:84:31:2b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 01:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc05f7047c0f8902fd25cd0a03d7b1bea893a5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3f:8a:04:7c:ec:dc:fb:be:0c:05:35:fc:ef:
b7:03:cb:53:3f:70:64:0c:15:32:e2:ad:6e:50:58:
5c:6b:e9:05:3c:99:5f:4f:4f:37:2b:ee:82:3d:0d:
83:1a:d6:fd:29:c4:f1:1f:d4:7f:16:5c:8c:60:6d:
26:a8:40:53:d0:f1:55:7c:95:ce:d1:b8:33:cf:a3:
93:73:6d:06:95:71:3c:c8:c9:f7:b7:54:6c:f1:94:
33:a2:4e:d8:96:69:df:e7:b7:16:18:c9:a7:c7:47:
10:78:c5:a4:b3:fc:75:63:67:92:c2:af:6c:b6:ed:
b3:10:08:27:62:30:2c:17:b7:5b:1e:75:04:4f:54:
ae:cf:eb:c7:c9:14:9a:51:a4:e0:ba:b0:cc:fe:76:
eb:76:fe:2f:5e:95:38:03:2f:29:a4:fb:c8:52:b1:
0f:f3:d1:89:4f:c7:2b:8b:56:3f:d7:cd:f5:66:6b:
69:f0:51:20:a3:cb:b3:62:6f:d4:ab:74:ed:4c:de:
22:25:f5:ee:09:30:32:e2:88:c5:58:20:b4:ed:05:
be:cb:d0:48:63:2e:5e:ca:45:5b:1e:46:f7:a7:5e:
b7:44:1a:cc:74:0e:43:c2:b8:f9:7e:03:28:67:82:
7e:05:d5:ae:8a:ba:e1:bf:14:98:aa:43:0e:f5:b2:
5e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:05:F7:04:7C:0F:89:02:FD:25:CD:0A:03:D7:B1:BE:A8:93:A5:BF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vAX3BHwPiQL9Jc0KA9exvqiTpb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:55:cc:6f:30:b5:db:46:26:9e:08:b6:af:bb:fb:63:71:b7:
03:98:bb:31:f1:22:57:87:71:4e:29:5a:d5:9f:da:54:4d:cf:
7d:c1:47:8a:e5:bf:0e:27:8b:14:67:ff:81:32:dc:a4:0b:d8:
1f:ae:d2:4e:7c:a9:1c:5d:3d:b3:21:0e:00:c7:1f:86:b5:ab:
7f:96:d8:a9:0e:9d:74:e2:27:70:3b:b1:b9:89:39:bd:18:b4:
a8:2c:b0:19:35:ac:38:8a:3e:11:9e:7d:10:84:08:e2:6e:8d:
c6:58:a8:ad:16:e8:94:5f:de:92:f2:4c:45:58:13:dd:ce:c7:
35:ca:78:c9:a6:9b:e6:46:9c:f3:fc:b5:5b:be:62:fe:4d:6a:
57:5f:24:af:e5:f3:0a:f0:6c:4d:ad:f8:d0:b4:ca:1f:df:c2:
56:5a:05:8a:93:48:70:d8:2f:04:ac:5e:b1:7c:71:9d:68:76:
60:3b:e6:c0:1f:93:a4:4f:70:e3:fb:f5:5c:4f:cb:00:89:bc:
25:77:87:b0:4e:8e:03:dc:e4:2d:97:30:92:02:43:db:4c:c7:
8d:66:6e:55:a0:9a:46:d6:c0:cf:0d:0f:26:40:87:e5:2e:7d:
e9:00:80:5b:00:01:1f:67:cf:7e:35:3b:61:24:c2:ae:71:4b:
d4:f3:e7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:15:51 2025 by rpki-client