Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3WJa8fOSpSWOC7EmUar2W21oRzg.roa
File: 3WJa8fOSpSWOC7EmUar2W21oRzg.roa (raw, json)
Hash identifier: EVHeJXDJ53txOAY4pxi+ZXK1fGx3qbkEiW+hgWn5YJc=
Subject key identifier: DD:62:5A:F1:F3:92:A5:25:8E:0B:B1:26:51:AA:F6:5B:6D:68:47:38
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFBAEE80809CBBBB16EADB20725B33296
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3WJa8fOSpSWOC7EmUar2W21oRzg.roa
Signing time: Thu 23 Nov 2023 10:17:05 +0000
ROA not before: Thu 23 Nov 2023 10:17:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:ae:e8:08:09:cb:bb:b1:6e:ad:b2:07:25:b3:32:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 10:17:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd625af1f392a5258e0bb12651aaf65b6d684738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:5e:47:99:c6:fe:37:17:40:b9:66:c6:de:
5d:09:5b:85:cb:05:34:de:c2:ac:6c:87:d9:9d:95:
ab:1c:39:1f:0c:8e:79:e8:b2:13:34:03:3b:17:fb:
cc:c6:27:71:cf:04:b1:f0:21:86:29:32:f1:b8:7c:
f3:f9:c0:c7:4b:bb:ee:12:84:0c:37:4f:ea:96:49:
2b:36:63:54:13:3a:8c:19:b6:05:be:dc:ee:3f:7d:
4d:34:21:cf:e4:06:3f:33:a4:29:16:65:12:00:2d:
e5:d3:9c:e6:cc:c2:bf:80:8c:2d:34:92:ff:e9:5c:
af:14:45:f5:e3:60:2e:3c:7e:a2:9c:85:5e:8b:b3:
8a:4f:4d:6b:8a:2e:83:78:81:3b:fd:73:14:76:b2:
d2:4b:0e:5f:16:96:30:e9:d6:29:79:ab:21:e0:f3:
ce:22:f5:84:cc:2e:05:64:07:46:f8:91:05:ad:34:
b4:55:c6:5a:3d:a2:cb:0e:7f:52:9e:2d:d2:55:65:
c2:eb:96:66:78:30:da:32:97:be:36:3e:83:bd:f8:
95:1e:87:71:97:05:9f:ca:47:ce:40:3d:d4:1b:48:
05:32:74:fb:ea:b9:7b:b8:39:38:61:92:d7:78:a9:
64:bb:9f:28:ea:52:4d:60:36:cf:e1:bf:91:d1:fd:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:62:5A:F1:F3:92:A5:25:8E:0B:B1:26:51:AA:F6:5B:6D:68:47:38
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3WJa8fOSpSWOC7EmUar2W21oRzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:72:cb:8c:98:e2:6a:42:83:4a:2f:04:7a:3c:63:d8:6b:fd:
c0:f3:4a:03:fb:fb:02:59:4b:9a:f6:85:c4:b9:50:0e:75:fa:
6c:4d:5c:aa:60:42:70:32:c6:82:b2:8f:b9:7a:8a:dc:85:c8:
02:d9:88:4e:1e:e9:2a:54:cd:f2:2a:b4:71:ff:67:91:5a:1b:
40:6a:1d:01:ce:7c:c9:f9:c1:da:5b:54:9b:dd:df:e2:96:c5:
72:26:65:96:19:ed:59:62:80:47:eb:b5:1f:45:b6:50:e9:e2:
4c:b6:2a:3f:3f:0b:56:26:1b:02:bf:d0:23:14:84:85:4d:b6:
a7:a7:cb:a7:29:07:3d:c3:35:a8:f3:6c:d7:9a:20:f5:de:be:
81:4a:f8:74:bc:4d:27:48:b1:1f:60:cf:9c:e6:6f:de:16:74:
9f:b4:e1:d0:e3:00:66:6b:da:9d:dc:01:73:d5:dd:93:dc:2d:
c6:1a:70:32:33:fc:40:bd:55:ca:e1:38:ed:d2:8c:8b:16:15:
34:c0:06:90:1a:82:d6:28:fb:a2:16:1e:4e:e5:be:67:4d:13:
6a:06:c4:b0:17:39:6d:f2:06:f4:3e:e8:52:83:bb:f0:c2:cb:
4d:74:e0:d0:95:32:3b:72:be:ba:25:f7:7f:e5:b5:63:7e:97:
d2:6a:42:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:47:54 2025 by rpki-client