Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/73r3HDT7hDPFz9ayLGnlTSpR-Cg.roa
File: 73r3HDT7hDPFz9ayLGnlTSpR-Cg.roa (raw, json)
Hash identifier: wkUToDk950jlOlsQxTF0syB4LRrLUmAHL/c9KEWL7PI=
Subject key identifier: EF:7A:F7:1C:34:FB:84:33:C5:CF:D6:B2:2C:69:E5:4D:2A:51:F8:28
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA0EA1127D50021E58674D4964377BFF3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/73r3HDT7hDPFz9ayLGnlTSpR-Cg.roa
Signing time: Sun 05 Nov 2023 19:16:16 +0000
ROA not before: Sun 05 Nov 2023 19:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a0:ea:11:27:d5:00:21:e5:86:74:d4:96:43:77:bf:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 19:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef7af71c34fb8433c5cfd6b22c69e54d2a51f828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:c8:e2:3a:51:50:19:e7:3d:95:d0:29:83:
2c:07:f7:a1:7d:d9:e5:99:51:2c:0f:86:9e:18:24:
b5:97:10:39:44:1c:43:4b:bf:1c:c1:3c:45:1d:01:
50:86:a7:40:a4:3f:bd:1b:72:f8:c9:7e:e7:1a:1c:
fc:cc:6a:75:46:a3:ee:b9:96:59:bf:c8:c7:1c:05:
30:f7:03:b2:3d:76:f4:e0:fe:09:17:19:bc:5c:bd:
5a:e4:78:e5:ff:1a:3a:65:99:d9:1d:d5:5c:85:ff:
c4:06:36:a9:47:10:24:dd:54:6d:c8:33:1b:1b:1b:
e1:de:38:c0:c9:67:a6:7a:f5:7f:48:bc:2e:b1:ad:
63:90:af:34:b9:59:5d:ae:07:52:ac:d4:fb:73:1a:
86:b9:23:b8:1e:f8:eb:78:8a:2a:67:b9:7a:4c:44:
fc:64:fd:b1:3f:8c:9b:d7:05:81:b0:d9:03:8f:6f:
43:01:fc:47:7e:50:d9:2d:44:07:b1:f3:0f:e7:3c:
c9:f2:f7:f1:65:9e:b3:58:7e:06:4d:68:fd:b7:af:
f5:fb:3b:15:0e:1c:93:21:88:88:ab:a9:1c:5e:0d:
09:54:de:cd:7a:63:90:32:b8:a0:34:06:7e:df:ae:
44:ff:98:25:97:62:47:59:6c:48:40:0e:f6:aa:26:
2c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7A:F7:1C:34:FB:84:33:C5:CF:D6:B2:2C:69:E5:4D:2A:51:F8:28
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/73r3HDT7hDPFz9ayLGnlTSpR-Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:8e:a6:42:b8:08:74:45:db:7c:52:ba:d5:ba:10:82:c8:fe:
bc:48:5f:a2:3d:37:50:c1:2a:c3:f9:b0:ae:9d:10:81:de:b5:
8a:d7:3d:89:54:ac:c4:d4:32:0a:b7:5b:89:bb:8e:b9:5c:f7:
05:20:dd:58:bc:17:c1:3a:a7:d6:01:f2:23:7a:79:2e:82:f5:
8e:a5:d7:07:df:2e:e6:e2:e9:0b:15:45:b0:ba:49:b5:41:51:
aa:75:6b:4d:52:08:74:43:3e:af:83:13:72:03:b3:98:bc:ca:
a3:03:f6:b7:73:47:70:85:85:56:81:05:5b:2b:49:b0:fd:bd:
0c:ed:8f:6d:c4:4a:cc:1d:48:68:34:c5:62:f9:a4:5e:45:0e:
98:8b:e4:a7:d2:b2:6c:01:e7:9d:81:0d:d4:1f:71:6f:0e:ff:
79:0c:ff:ab:c5:b3:58:64:f6:0f:95:1e:91:9b:e0:5e:9b:93:
3e:c2:d5:aa:aa:2e:66:f2:e6:b9:99:4d:4d:8d:80:e2:d8:66:
e9:16:4a:09:97:8b:a1:30:d0:05:d1:c7:90:c3:00:1b:87:66:
c2:a2:a9:d6:10:80:8b:67:d0:e7:47:c7:32:03:c3:31:df:e8:
62:a9:2b:2e:2a:c4:08:6f:47:0e:76:25:f1:c1:1c:13:cb:cf:
84:14:36:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:25:33 2025 by rpki-client