Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/C66xvWBy-RtXUOlv-Mcfzpomi6k.roa
File: C66xvWBy-RtXUOlv-Mcfzpomi6k.roa (raw, json)
Hash identifier: uFB/pKog3nQjKgHsA3rsFBekzyMbUZLfUeHtJTtT3iI=
Subject key identifier: 0B:AE:B1:BD:60:72:F9:1B:57:50:E9:6F:F8:C7:1F:CE:9A:26:8B:A9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B20CEA5D0567565B327FBF1A0C36931E6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/C66xvWBy-RtXUOlv-Mcfzpomi6k.roa
Signing time: Wed 11 Oct 2023 22:14:55 +0000
ROA not before: Wed 11 Oct 2023 22:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:20:ce:a5:d0:56:75:65:b3:27:fb:f1:a0:c3:69:31:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 22:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0baeb1bd6072f91b5750e96ff8c71fce9a268ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:67:27:9c:e3:1e:76:0e:7f:a3:35:7f:4d:8b:
f5:0a:67:9b:51:9b:69:01:bc:86:da:21:9d:f0:aa:
7d:ff:5a:e6:dc:a3:08:a4:f6:1d:63:2d:c9:65:db:
c2:ea:bc:d6:31:21:69:82:fd:66:3e:5f:97:b7:30:
61:3f:51:32:8e:98:d4:a6:a5:1c:8b:c2:e9:f7:7a:
5f:f9:db:ba:d4:1b:48:a6:39:08:b2:34:ef:82:31:
89:91:f4:41:a9:28:54:46:c4:ef:18:ef:0a:8d:9d:
91:4a:e1:d8:e0:ae:b8:2d:f1:fa:8a:a9:2d:3b:b0:
c5:11:93:57:6a:66:1a:45:41:70:c5:d4:f3:9b:bd:
10:54:54:6d:a1:2e:41:08:5d:53:7a:5a:c9:f6:f6:
c1:c2:dc:95:e6:49:a5:e8:7f:18:b9:e6:63:d7:46:
ef:3e:20:2d:1a:bd:75:1c:4d:79:a8:57:49:09:72:
2c:14:71:14:9f:3c:b4:16:fb:74:e5:db:0e:ab:63:
62:13:4a:d3:fa:6b:e6:c5:ef:c4:8c:96:0d:52:f7:
ac:ae:3c:f2:30:89:12:c3:f1:64:d6:11:31:0f:3e:
31:46:7c:26:c5:99:bb:7d:ac:27:ef:67:e2:2c:9e:
e1:1c:29:cb:df:ed:01:8f:eb:94:23:e2:74:a4:5d:
ea:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AE:B1:BD:60:72:F9:1B:57:50:E9:6F:F8:C7:1F:CE:9A:26:8B:A9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/C66xvWBy-RtXUOlv-Mcfzpomi6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:40:a7:ff:0e:6b:43:f8:54:4c:8b:cd:f9:01:aa:04:0b:ef:
fb:2c:6c:c6:fc:b6:a9:29:db:99:76:cd:95:1a:6f:07:a9:c3:
77:f1:65:2b:3b:a4:3f:a2:16:87:2b:b5:b5:dc:e1:f0:5c:24:
65:59:86:6b:0a:ef:4f:13:bb:54:9d:7e:4b:3f:17:a9:5b:73:
af:9d:f5:46:38:d4:48:a1:69:71:ad:3d:eb:35:7b:9d:fd:74:
db:c3:c1:1d:5f:66:78:7e:95:80:95:b9:3c:d2:81:6e:99:c4:
cc:20:e0:c4:54:e6:c1:c4:e0:3b:e8:c7:9d:f0:85:dc:f6:93:
82:4b:d6:2a:ae:cf:5d:aa:d9:d3:5e:84:e8:e0:b0:01:f6:3b:
12:98:50:37:1e:1d:92:3e:5b:9e:a0:7a:4c:ed:50:31:55:d9:
f9:4f:41:b1:0c:ca:4b:77:5e:9f:ed:54:4a:b2:f2:d3:40:65:
dd:bb:74:4c:b8:c0:0b:ee:5f:35:ff:28:e8:b6:6d:d8:60:b4:
16:9e:23:45:c4:30:26:bf:7f:77:c3:b4:98:ad:15:a3:53:99:
5e:3e:12:72:e1:1f:3e:08:e6:a1:43:dc:ae:b1:bf:64:be:86:
4d:96:50:25:4e:1c:4b:fb:d7:9c:65:72:97:11:7e:14:03:ac:
73:c4:09:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 10:20:39 2025 by rpki-client