Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4eOoj7N6_mVQtrbxDW1CI0ywlVg.roa
File: 4eOoj7N6_mVQtrbxDW1CI0ywlVg.roa (raw, json)
Hash identifier: slqQ5g33zlBwAK+Zx3B440OnTmMgFCrLS1RruOoWA0w=
Subject key identifier: E1:E3:A8:8F:B3:7A:FE:65:50:B6:B6:F1:0D:6D:42:23:4C:B0:95:58
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2DAD4DF02371E9C1B08DBF547A018FA7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4eOoj7N6_mVQtrbxDW1CI0ywlVg.roa
Signing time: Sun 03 Dec 2023 03:16:21 +0000
ROA not before: Sun 03 Dec 2023 03:16:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2d:ad:4d:f0:23:71:e9:c1:b0:8d:bf:54:7a:01:8f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 03:16:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1e3a88fb37afe6550b6b6f10d6d42234cb09558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:16:51:e6:61:f5:92:d4:5b:fc:9f:1a:94:e5:
03:73:9f:a5:4c:67:f9:99:3f:d3:f5:f3:95:f0:2b:
8d:b7:96:84:0e:de:3c:34:fa:f8:7a:77:29:74:59:
97:8a:d9:47:14:83:e7:62:c1:b8:62:dd:e5:2a:01:
27:81:72:d1:8c:99:de:76:0d:be:1f:38:3a:dd:f5:
fc:bc:9a:bb:d7:b6:55:1f:70:6f:f7:34:45:62:5f:
db:94:5e:51:9f:bd:40:14:dd:86:f0:2d:90:28:06:
1f:dd:f3:31:b7:2c:eb:2c:54:7c:de:56:d9:3d:e6:
a2:0d:9e:99:54:d2:94:f7:d7:83:9b:20:0b:04:01:
d2:78:31:a7:a0:3f:50:8d:5b:bd:aa:cd:47:70:eb:
a0:e9:8f:a1:34:63:d1:af:a2:2e:38:22:be:cc:31:
25:a1:ea:10:c9:57:db:5a:30:26:dc:fa:82:c8:1b:
b7:07:6d:45:0f:bf:79:26:24:c9:db:35:54:6a:16:
74:db:2a:5a:59:47:0d:53:c2:05:da:f9:65:c5:a4:
2e:a0:42:4d:90:8f:cf:68:60:a6:6e:1c:42:94:43:
48:64:f0:80:61:0c:5e:9a:1c:70:2c:d3:e3:4a:95:
ef:fa:37:5a:2c:78:de:bf:87:b6:ed:5c:fa:1b:61:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E3:A8:8F:B3:7A:FE:65:50:B6:B6:F1:0D:6D:42:23:4C:B0:95:58
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4eOoj7N6_mVQtrbxDW1CI0ywlVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:a2:e9:c7:85:7f:7f:ce:3d:d1:1f:c5:d8:9b:4c:c0:9b:31:
86:35:d5:48:a7:2f:a9:38:d4:c5:b2:4c:f4:bb:d0:10:a7:cc:
0a:96:6d:a3:92:dc:e3:58:b5:ba:fc:93:c1:b7:de:20:eb:2f:
00:26:18:57:70:20:d8:0e:a8:37:e5:4b:3a:d9:14:90:55:30:
8b:f7:70:e0:60:0e:e9:3f:cc:1a:0f:d9:48:5f:70:fb:f1:62:
63:f9:40:a7:dd:f6:58:7a:8a:3c:42:e9:b8:dc:43:d2:f6:fa:
5c:ed:fe:bd:30:e7:da:93:ec:dc:58:78:5f:3b:be:00:fe:50:
50:1d:d2:e3:bb:53:82:8e:44:7a:81:88:43:64:f4:3c:a0:0b:
90:70:d0:ac:b4:a7:55:ac:1b:1e:8f:af:78:0f:88:84:9b:b3:
8a:41:42:76:e2:f3:7a:99:7b:46:08:c8:58:0e:bb:04:e4:5b:
e9:29:83:72:9e:10:b2:ac:09:8d:3b:e0:b1:61:0c:84:ea:af:
20:b0:c2:c0:6e:84:09:9e:ba:8a:bb:cb:7e:d9:ef:5e:69:55:
f2:8e:e2:45:08:58:fa:44:25:06:37:67:d1:15:86:7d:df:b6:
90:ad:6f:bf:6d:28:dc:07:e4:79:c1:99:56:89:c4:88:57:61:
0b:01:7e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:56:19 2025 by rpki-client