Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0CjM4XsPycm_c1tZtNkdIqHIEX8.roa
File: 0CjM4XsPycm_c1tZtNkdIqHIEX8.roa (raw, json)
Hash identifier: ae+Uea+XjVakS7qGpe6uSksSOujdQnl5muYvpYtg3W0=
Subject key identifier: D0:28:CC:E1:7B:0F:C9:C9:BF:73:5B:59:B4:D9:1D:22:A1:C8:11:7F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C363FCB97D45A8AD1307C5E64231CA752
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0CjM4XsPycm_c1tZtNkdIqHIEX8.roa
Signing time: Mon 04 Dec 2023 19:13:19 +0000
ROA not before: Mon 04 Dec 2023 19:13:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:36:3f:cb:97:d4:5a:8a:d1:30:7c:5e:64:23:1c:a7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 19:13:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d028cce17b0fc9c9bf735b59b4d91d22a1c8117f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2c:23:6c:6a:0f:7f:74:6a:df:da:07:c1:0b:
57:43:f0:19:a4:f0:53:64:55:d2:bf:78:f0:1e:6e:
f3:df:4c:b4:51:1d:2d:ee:b5:d9:ac:6c:9d:bc:d2:
50:f7:ae:7c:20:df:a9:35:9c:1a:2c:0a:81:de:04:
51:71:b5:7f:85:d8:50:32:88:2a:8a:cc:97:33:90:
e6:66:63:11:78:71:1e:69:67:3a:c8:0f:3f:01:37:
3e:16:85:5a:af:91:e6:09:c5:2d:e9:18:a8:c4:dd:
02:d2:2a:53:33:fb:27:aa:21:d0:06:49:e7:ce:a3:
d2:a3:a3:f5:23:9f:b8:be:13:90:ab:56:a9:3f:e5:
63:26:55:61:3d:45:83:7c:78:e7:92:87:af:b2:9b:
e3:85:ec:d5:5e:a6:a7:c4:5c:24:6f:1f:78:a0:d8:
85:25:bd:23:7f:79:12:92:21:0e:1a:ee:5c:e3:9d:
1e:ab:9a:22:bf:8a:37:54:74:1c:a8:25:14:bf:ad:
f9:11:70:42:ed:b5:42:b9:88:60:cb:92:fc:aa:8e:
16:f7:ba:15:47:d3:6a:f4:29:e2:5e:9c:02:40:a9:
9d:81:9d:1b:34:51:42:97:ab:0c:0b:be:ef:00:e9:
2a:7f:84:ec:ad:d6:35:a8:cc:27:86:bf:e0:a0:43:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:28:CC:E1:7B:0F:C9:C9:BF:73:5B:59:B4:D9:1D:22:A1:C8:11:7F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0CjM4XsPycm_c1tZtNkdIqHIEX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:48:0c:37:d7:16:d3:89:6c:af:c2:4d:eb:d8:0a:58:b8:33:
5c:17:47:cc:4b:9d:70:32:99:e6:8b:a8:66:3d:b4:19:12:8b:
22:5b:cc:5a:9b:b5:ae:3f:8f:e5:a9:5d:f6:8d:38:d4:49:08:
82:8d:74:b1:31:2a:bd:b1:81:be:9d:e2:a8:be:f7:52:9c:32:
f8:86:b2:d7:04:02:a4:e2:4a:e9:e5:fb:77:8b:0f:ff:b6:e0:
d9:13:e2:b8:b5:ad:f0:74:b4:9c:14:12:fe:d5:0e:cc:d4:34:
7a:69:4c:b2:16:6c:d1:4b:8a:1b:ea:16:43:58:41:a9:c7:29:
82:50:9b:2d:ac:43:1a:3c:eb:fb:73:9c:67:83:ac:fc:e8:ed:
66:75:24:5a:51:8c:9f:79:2f:0f:c6:de:56:a5:39:54:6d:a5:
48:47:59:54:de:9b:74:e0:9d:27:7c:3f:f9:22:9f:46:31:26:
17:7c:be:cb:5c:5a:8d:47:07:8b:fa:74:07:2d:a5:75:93:ff:
11:22:68:69:54:f8:93:c8:6d:f2:9f:3e:d4:9c:b8:16:9e:ff:
81:71:da:ed:a5:96:87:6a:1e:f0:83:92:a9:69:c7:29:bf:db:
25:26:6a:58:65:8d:3e:d1:ac:a5:b5:61:f8:d6:e9:df:69:1d:
55:b9:e5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:16:05 2025 by rpki-client