Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vtRgxElvpfY3MmxLheRQtOMJ9hs.roa
File: vtRgxElvpfY3MmxLheRQtOMJ9hs.roa (raw, json)
Hash identifier: 6RwjVT4pIvxbeW27giNeodPQtXbjimbXT6J15CCdLLo=
Subject key identifier: BE:D4:60:C4:49:6F:A5:F6:37:32:6C:4B:85:E4:50:B4:E3:09:F6:1B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C359C7460E7981DA108912AC4415AC818
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vtRgxElvpfY3MmxLheRQtOMJ9hs.roa
Signing time: Mon 04 Dec 2023 16:14:54 +0000
ROA not before: Mon 04 Dec 2023 16:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:35:9c:74:60:e7:98:1d:a1:08:91:2a:c4:41:5a:c8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 16:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bed460c4496fa5f637326c4b85e450b4e309f61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:02:83:b0:06:06:aa:08:9b:c6:b1:f8:76:26:
7d:6a:d1:1a:02:a0:4e:82:d7:65:d8:5f:8e:37:d5:
ff:45:93:eb:a8:93:99:d7:cd:cc:c6:58:b5:da:d5:
35:9d:a4:f0:69:10:6f:c1:73:9e:c2:86:78:02:25:
9f:b4:cb:e2:36:79:65:b2:85:dc:b2:9d:fd:22:9e:
82:5c:21:6e:d7:4a:61:ae:46:c2:86:98:8f:e4:de:
f3:1f:13:96:3f:43:b7:f2:ef:3d:be:f3:40:1c:be:
67:22:fc:40:be:0b:e3:a9:1a:08:fe:3a:ab:6f:e1:
4b:dc:94:53:8b:00:76:30:45:93:8c:b8:d1:fa:9a:
29:bf:22:a6:1e:cc:ba:bd:b2:8f:22:fc:b9:d0:79:
bd:7e:b3:c7:aa:24:ac:a0:e3:56:34:25:01:db:71:
6c:7c:c8:53:1a:58:ae:d7:38:d4:72:37:ed:1e:15:
75:ea:a0:fb:2a:9b:97:2b:ff:2b:65:56:e6:62:6e:
de:f2:6e:1a:5d:f6:c7:6b:1d:dc:14:aa:56:50:b3:
07:2c:65:9f:f4:2f:d7:42:b3:1b:54:75:c3:39:77:
d0:11:8c:3b:7a:a5:f1:27:86:63:5d:23:12:3c:c5:
42:5c:8c:36:ec:f8:49:27:d9:6e:cb:08:90:b9:d9:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D4:60:C4:49:6F:A5:F6:37:32:6C:4B:85:E4:50:B4:E3:09:F6:1B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vtRgxElvpfY3MmxLheRQtOMJ9hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:b2:ac:43:89:6e:5f:7a:9e:29:fb:51:e2:61:3a:c1:f9:88:
e4:65:9e:73:c8:fa:aa:42:20:f1:7d:43:35:7f:42:07:53:71:
d9:80:9a:33:f6:7a:ab:01:d7:7a:05:c6:d6:2b:ae:c1:34:51:
9f:1f:bc:45:77:b3:45:57:ea:71:aa:03:8e:dd:79:80:12:8e:
88:30:79:0f:10:bc:ed:fa:d1:81:4f:d4:66:39:59:3c:6c:12:
99:6c:3e:37:b3:49:34:77:57:14:4a:91:73:15:7a:c0:14:cf:
fd:cd:d6:18:71:ec:87:31:55:87:26:ef:74:17:1c:3e:29:04:
ca:cf:13:eb:18:d9:c6:7c:83:4c:b7:75:bc:26:87:e9:d0:4f:
0d:5a:6d:a7:92:c9:89:22:dc:a6:c7:59:7e:df:a5:43:03:f9:
78:8d:fb:78:f2:f2:81:ae:7c:8c:62:1f:aa:99:c6:dd:9c:65:
69:69:e2:c8:d5:0b:0a:4c:ea:69:d6:08:41:1c:49:93:68:6d:
99:3a:46:86:ee:ae:1e:8c:32:2f:8a:2c:fc:5d:6a:0d:4c:8b:
e9:34:60:5a:b9:2c:40:58:bc:e9:cc:98:57:93:53:2e:e2:93:
a5:45:b4:a7:48:35:2d:90:a4:34:51:2c:aa:c4:94:c7:21:3e:
99:b1:18:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:36:24 2025 by rpki-client