Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ax_pxXWLyWa6yxRcrTviNcDbxzA.roa
File: Ax_pxXWLyWa6yxRcrTviNcDbxzA.roa (raw, json)
Hash identifier: +UBEgrHy4LIEDYVqKp3YeAeHdWAsaSKQPO9yKq8OOOg=
Subject key identifier: 03:1F:E9:C5:75:8B:C9:66:BA:CB:14:5C:AD:3B:E2:35:C0:DB:C7:30
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFF8B717027A29974BF0CFB0CFDC99E59
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ax_pxXWLyWa6yxRcrTviNcDbxzA.roa
Signing time: Fri 24 Nov 2023 04:16:50 +0000
ROA not before: Fri 24 Nov 2023 04:16:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ff:8b:71:70:27:a2:99:74:bf:0c:fb:0c:fd:c9:9e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 04:16:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=031fe9c5758bc966bacb145cad3be235c0dbc730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:1b:37:01:40:ab:0c:4c:5b:1d:d3:d8:a1:
f9:db:02:2b:40:47:04:a3:51:15:3e:99:b1:58:48:
8e:98:9c:5f:0c:b7:58:91:ea:f5:6e:8c:3c:0d:20:
20:c1:17:c3:22:c6:c4:b1:76:4c:24:fe:3c:8d:4b:
b4:8c:9f:05:55:86:f3:d4:00:c5:f7:b7:c0:14:2c:
fe:6e:7b:20:91:b9:b9:4a:46:6c:03:f8:ea:2e:b9:
bc:63:fe:d3:72:47:60:7c:5d:a1:ab:35:73:02:1a:
5b:77:1c:15:60:09:95:2b:25:ea:84:45:a5:9b:88:
7f:b3:db:4b:f1:b9:f5:d3:30:e6:e3:fd:dd:49:5c:
36:16:d7:e7:82:b9:7f:6a:3a:bc:3b:a4:a6:d4:e4:
66:d9:70:f0:6e:6d:df:2c:19:6e:59:a7:fa:fc:8e:
e4:4a:ed:10:fd:93:aa:df:08:09:5a:8a:3e:5e:2a:
cd:46:c3:f8:13:0e:1c:73:dc:9b:c9:04:07:32:0d:
5e:26:c9:75:3a:14:37:35:a2:ec:25:3c:44:00:38:
15:96:eb:ae:86:b2:3a:c5:71:7a:da:ad:48:67:81:
5e:3b:25:0f:3f:8f:09:83:b1:ef:70:f5:89:4f:13:
a2:fb:aa:6b:cb:99:5e:88:1c:42:61:91:b2:d4:1f:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1F:E9:C5:75:8B:C9:66:BA:CB:14:5C:AD:3B:E2:35:C0:DB:C7:30
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ax_pxXWLyWa6yxRcrTviNcDbxzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:3e:c1:a2:6d:49:8a:7b:28:28:92:fc:2d:01:e5:e3:a6:7f:
af:c6:31:a8:bc:c5:6b:58:6f:cc:91:9b:57:d9:93:c1:32:2f:
55:7d:87:25:6a:bf:87:b8:63:de:f9:31:f0:94:4d:39:22:e3:
27:56:f9:42:17:7e:da:9e:90:94:47:54:ed:99:7b:aa:15:83:
aa:d5:af:dd:b0:3d:f3:37:d5:d2:99:2f:63:b2:d8:6a:03:53:
3d:01:e9:b0:ce:13:18:ad:ef:a7:e3:01:03:1e:eb:d9:37:3a:
fd:da:f6:0b:0a:a5:2b:4e:bb:5a:df:d4:08:8a:52:b6:54:af:
de:b8:74:ba:8b:52:90:cf:62:d5:99:ba:75:97:98:8c:03:91:
df:a6:40:08:14:8b:82:50:1b:92:bc:6a:1a:b5:ff:dc:e5:e4:
e4:33:2f:69:2d:ec:4d:91:89:7a:ab:e3:34:6e:ee:39:38:d6:
ee:ae:e0:df:5d:f5:a3:62:2e:b6:00:15:56:3d:d8:14:a8:51:
79:72:ed:d8:c1:c9:9d:73:1b:45:6b:a5:a2:af:8d:0c:18:0b:
55:c2:dd:c0:0e:64:cf:7a:66:b2:07:cc:c9:d7:68:85:8d:48:
c8:fb:99:ff:ae:67:98:aa:4d:91:ec:fd:47:07:5b:aa:5b:30:
f4:21:65:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:20:36 2025 by rpki-client