Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-3Z8cDWAlUgjPYFhHNId0gj5dEY.roa
File: 1-3Z8cDWAlUgjPYFhHNId0gj5dEY.roa (raw, json)
Hash identifier: 7BxFKxWl8dcqzCTSFEk5ALqVT8JuDVgL/JI9tiXFpeo=
Subject key identifier: FB:76:7C:70:35:80:95:48:23:3D:81:61:1C:D2:1D:D2:08:F9:74:46
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C21A662FA0657203395CEC94F06CFC2C6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-3Z8cDWAlUgjPYFhHNId0gj5dEY.roa
Signing time: Thu 30 Nov 2023 19:13:21 +0000
ROA not before: Thu 30 Nov 2023 19:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:21:a6:62:fa:06:57:20:33:95:ce:c9:4f:06:cf:c2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 19:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb767c7035809548233d81611cd21dd208f97446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:65:cb:74:a4:0b:87:9c:73:ab:16:bf:60:
42:13:67:e2:68:a4:19:a9:59:2b:5a:85:20:76:ae:
9b:39:a4:c5:89:a7:4a:39:26:30:b7:18:2e:57:c0:
f3:17:56:7e:aa:4e:8a:d3:77:f2:ac:e2:bc:87:42:
1c:a2:72:27:7e:8b:62:3b:61:fe:f5:52:6b:7d:cc:
43:46:98:b6:52:0f:1a:be:86:6e:50:db:ce:22:c1:
39:d0:5d:f1:c2:8d:ba:f8:2b:19:a7:77:a3:57:18:
c9:0c:12:3a:93:0c:a3:cd:7d:b5:98:81:e3:d5:f8:
de:e1:f4:c7:2e:99:c8:b4:c1:f7:fe:37:4d:7d:f0:
dd:41:0f:88:da:c2:a5:a3:8f:aa:86:fa:39:39:0e:
2f:b0:d8:f6:e7:fb:29:45:c3:73:e9:d9:2e:26:db:
0f:8e:a7:11:ae:6a:6e:13:ee:c2:d0:fd:d7:9c:6b:
1f:64:5e:e1:75:1b:56:2d:c6:82:86:12:13:78:08:
83:53:75:ac:30:26:df:7c:d9:05:c9:fa:da:a7:d7:
31:0f:64:53:f2:e1:75:90:3e:76:69:6d:ce:e1:f8:
ad:7f:d7:a8:7b:67:b8:4c:84:39:ba:45:38:99:b7:
8b:f4:d8:b3:01:fa:ee:0a:f1:2c:15:40:b8:e0:46:
42:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:76:7C:70:35:80:95:48:23:3D:81:61:1C:D2:1D:D2:08:F9:74:46
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-3Z8cDWAlUgjPYFhHNId0gj5dEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:cd:f8:fa:ca:78:e5:fe:7e:1e:84:50:60:10:bc:29:fa:26:
c1:7f:b8:ae:24:6b:30:c2:26:b4:e5:04:59:81:8c:55:42:59:
4c:a0:3f:d4:ed:26:57:37:a9:2c:3d:cb:a7:7e:21:1f:68:2a:
3d:b4:57:30:f7:35:45:3c:7c:c2:e7:1c:bc:e2:07:af:f0:4b:
c2:d5:f9:ed:3d:30:6a:4c:cd:37:58:70:09:27:8c:d0:e8:3f:
6e:bc:14:a5:a0:47:5f:62:8e:57:7d:95:d1:e2:cf:95:8b:fa:
53:e8:eb:b7:0b:f4:53:1a:93:ee:33:af:d2:5f:38:c8:9c:61:
ac:c3:a9:40:7c:5c:21:0c:52:a3:68:fa:ab:8a:d0:3a:d6:02:
85:06:f1:e5:f6:58:8e:0c:4b:92:96:5e:53:17:a8:bc:bc:e0:
c4:0d:c9:9d:ec:d4:5d:c1:aa:1b:a2:9f:31:ef:29:4f:a8:c5:
1e:34:02:26:19:23:52:68:9c:a5:d8:22:4e:6e:81:24:d0:da:
01:0b:2d:80:4d:9f:bd:18:54:31:87:f0:c3:67:41:94:72:8f:
bc:aa:cf:70:14:fd:b2:4a:d6:ea:48:16:9a:79:c0:87:34:23:
b7:14:04:22:72:92:78:f1:26:4c:db:e3:df:ea:e3:f1:13:f2:
8e:58:ef:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:26:30 2025 by rpki-client