Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BA1oqqQRvObqqLenQxo66C7r_TE.roa
File: BA1oqqQRvObqqLenQxo66C7r_TE.roa (raw, json)
Hash identifier: uOPRniUtje3tebemo1hHRR0VdnM7M7SqU/3238RT1GM=
Subject key identifier: 04:0D:68:AA:A4:11:BC:E6:EA:A8:B7:A7:43:1A:3A:E8:2E:EB:FD:31
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8272AFDAC36E874FBC55E0F4EA2319FC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BA1oqqQRvObqqLenQxo66C7r_TE.roa
Signing time: Mon 30 Oct 2023 21:17:16 +0000
ROA not before: Mon 30 Oct 2023 21:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:82:72:af:da:c3:6e:87:4f:bc:55:e0:f4:ea:23:19:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 21:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=040d68aaa411bce6eaa8b7a7431a3ae82eebfd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:af:14:e1:c5:1d:b0:77:5c:13:ad:b6:a6:
69:82:73:e3:4f:3d:9a:1c:f8:f2:45:51:1c:9e:0f:
90:67:d7:42:55:a6:2d:d4:78:c5:41:ac:6c:9f:2c:
14:86:da:f8:4a:ef:08:48:dc:a5:af:e4:b0:9c:61:
29:08:1d:fc:2f:dc:a9:65:0a:5b:18:9b:28:1b:b9:
33:e7:03:a4:a0:b3:4e:af:8b:15:fb:91:bc:53:5a:
be:05:d0:4f:81:3f:fe:f1:9e:40:cc:8f:1a:d0:4b:
cc:65:17:1e:52:ce:93:08:e2:9e:55:2c:c1:7e:c6:
f6:21:30:b6:44:28:02:8b:58:03:8b:15:76:98:cd:
bb:ac:4d:ca:be:3f:1a:e1:90:a6:21:f0:17:88:fc:
63:40:30:fd:aa:d4:2c:a8:06:24:8d:3b:6e:6b:21:
24:c1:54:58:e8:8a:fc:c3:e3:19:1d:c7:e6:50:c4:
ee:e5:08:23:82:38:0c:c8:24:6c:52:90:61:15:fe:
5b:ba:fc:57:b9:bc:64:45:85:08:4b:1f:6a:c3:40:
65:15:46:35:d4:31:11:b1:7c:a3:6b:67:85:76:23:
ef:9a:98:03:3d:e9:00:89:e0:fb:78:e7:df:32:6a:
12:97:fb:a8:73:b7:c1:a7:c7:13:f4:ae:4f:f4:b0:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0D:68:AA:A4:11:BC:E6:EA:A8:B7:A7:43:1A:3A:E8:2E:EB:FD:31
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BA1oqqQRvObqqLenQxo66C7r_TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:22:16:e4:ef:36:f9:43:e6:8c:81:a3:71:98:49:da:ca:ce:
ae:55:b3:19:06:bf:8a:aa:62:d2:d3:5f:45:a7:44:c0:1a:e4:
f4:12:fe:d2:67:8a:44:ed:8f:ba:f2:42:41:cc:46:b5:ad:d0:
23:02:21:ed:1a:02:a0:b7:91:66:d4:18:01:f9:31:cc:70:f6:
7e:4a:6b:80:7a:26:83:1f:ee:16:27:1c:12:21:86:b3:91:0d:
c9:7f:1b:78:95:d6:62:fb:29:38:6c:6c:bb:b7:52:bb:a9:03:
b7:99:30:0f:72:ab:14:89:c1:c9:b9:50:ff:4a:e3:a9:de:3d:
ae:86:79:3f:e0:da:35:87:75:32:f0:5a:aa:90:7c:69:64:1b:
4a:67:01:45:49:f7:ba:9c:2a:89:74:f8:a0:48:7d:36:50:01:
a3:97:ac:68:58:cc:b4:26:bb:52:89:50:12:bd:d8:00:49:6f:
27:7b:0b:72:db:3f:0b:b9:b2:7a:7d:1d:36:70:1a:c0:78:3e:
6f:3b:2b:67:a6:2b:6c:27:42:07:ba:d8:5b:6e:4d:6b:6b:72:
6e:db:ab:d1:c1:1a:71:12:57:89:6e:4e:e5:46:90:fe:63:d1:
41:ac:fe:32:bc:e3:10:ef:d6:4c:60:db:b4:ad:c4:97:9a:d3:
51:de:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:26:01 2025 by rpki-client