Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3dlk6Iv-emBeCZ1iYFVeeKtxHy4.roa
File: 3dlk6Iv-emBeCZ1iYFVeeKtxHy4.roa (raw, json)
Hash identifier: KqcRsBAFaKAdwrxKPyi4we6yBJzgKjubshHZ9krnOBg=
Subject key identifier: DD:D9:64:E8:8B:FE:7A:60:5E:09:9D:62:60:55:5E:78:AB:71:1F:2E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5B29AA5CA2D65887D49916F2AEB34BAA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3dlk6Iv-emBeCZ1iYFVeeKtxHy4.roa
Signing time: Mon 11 Dec 2023 23:15:06 +0000
ROA not before: Mon 11 Dec 2023 23:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5b:29:aa:5c:a2:d6:58:87:d4:99:16:f2:ae:b3:4b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 23:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddd964e88bfe7a605e099d6260555e78ab711f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:41:f8:2d:ee:ea:f1:59:2d:f7:40:68:8d:20:
42:ca:3c:3d:6f:37:34:aa:b2:81:25:64:66:84:33:
87:16:cb:a7:c9:03:de:a3:69:55:86:46:7e:65:1e:
f1:05:06:3c:70:54:69:75:50:81:e0:25:b6:89:34:
5c:dd:44:5d:a9:4a:ec:0b:e8:79:32:52:a5:48:03:
9a:28:1b:5b:ea:b1:a3:e8:55:dd:0f:5a:f9:3b:63:
fc:24:1f:09:e2:16:54:be:b4:02:a1:74:cf:73:43:
90:97:4d:d6:f4:5a:41:d1:eb:de:d7:9d:ee:cb:9f:
a9:4b:16:cb:34:57:40:d5:76:0b:9b:4f:e9:cf:94:
06:67:e5:06:bb:3b:4d:41:ee:44:26:bd:c9:7d:ca:
69:cd:c5:a4:8e:61:fc:50:ef:1f:ca:dd:f8:d1:fe:
5f:27:d6:35:1e:dc:50:e0:7f:16:a3:56:04:89:ed:
48:64:cd:c2:05:f3:cd:ed:bf:21:b9:0e:68:3c:9a:
32:07:19:f7:f3:05:72:5d:e4:7e:d2:6d:5f:67:50:
90:fa:5c:5c:96:1e:9c:55:b0:a1:08:e2:f9:27:ae:
71:f7:f3:06:71:b1:b0:f9:71:a6:96:3e:63:df:c2:
fe:bd:41:fa:08:f9:0f:37:52:9c:82:cc:64:67:56:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D9:64:E8:8B:FE:7A:60:5E:09:9D:62:60:55:5E:78:AB:71:1F:2E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3dlk6Iv-emBeCZ1iYFVeeKtxHy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cd:c9:86:3b:bc:e1:4e:0d:fd:6e:03:cb:cf:21:fe:17:8d:92:
65:cf:0c:1a:4a:c5:b3:85:c2:04:ca:1b:08:8e:fc:61:90:63:
7d:f0:75:53:3e:0f:93:06:fc:44:0b:e7:b3:18:17:49:65:3e:
30:80:10:dc:ad:5b:26:2a:99:bc:75:a4:c8:3e:48:d7:29:d9:
67:95:35:ff:c5:ff:9b:91:f6:10:4f:49:21:a0:12:7b:81:d8:
2d:a4:d6:16:ee:6a:07:22:72:e0:22:33:5b:23:c0:8b:37:f0:
44:87:e2:5e:28:b6:13:af:93:be:92:f5:36:6e:61:3c:85:be:
d9:5b:f0:93:92:35:16:41:06:ff:80:bc:5d:6a:30:ba:89:8b:
e5:87:3b:45:3b:11:aa:6d:ad:a6:f7:ba:01:ac:7d:cc:24:fe:
13:bb:a2:14:21:bf:99:c9:19:f7:35:fd:d7:9f:dd:c0:76:46:
74:d3:5b:ac:fb:ee:f0:2e:b3:a1:7e:80:c3:76:9b:05:dc:cb:
ca:15:e8:d8:7f:de:73:98:b8:e3:37:65:ca:fc:c6:f1:d6:86:
ec:0b:4e:e4:7b:52:91:a0:02:0e:5c:a2:d8:4d:37:e7:24:04:
5f:66:1e:f7:be:28:f7:5c:51:12:1c:02:b9:69:3e:f2:2b:ab:
61:70:6c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:39:46 2025 by rpki-client