Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/D4WKrtHil4bR-ugSklnAjS9JCQo.roa
File: D4WKrtHil4bR-ugSklnAjS9JCQo.roa (raw, json)
Hash identifier: jZHiWtDE8eOALm812OdWC5rkrIhOnIir59VS/t1nDfI=
Subject key identifier: 0F:85:8A:AE:D1:E2:97:86:D1:FA:E8:12:92:59:C0:8D:2F:49:09:0A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9779FC547AD35957550C97D8149F68A9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/D4WKrtHil4bR-ugSklnAjS9JCQo.roa
Signing time: Fri 03 Nov 2023 23:17:15 +0000
ROA not before: Fri 03 Nov 2023 23:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:97:79:fc:54:7a:d3:59:57:55:0c:97:d8:14:9f:68:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 23:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f858aaed1e29786d1fae8129259c08d2f49090a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d7:88:8b:f4:02:38:b4:d9:ab:00:dd:56:f2:
19:00:b2:06:87:65:a3:0c:af:a2:61:6b:f0:97:26:
da:54:24:67:65:bb:ee:50:c8:6a:d6:56:2d:8b:da:
d2:3a:33:5e:00:c5:dd:08:54:63:c0:8d:0d:17:c8:
9d:79:0c:5b:23:8c:95:da:ad:c0:26:61:e9:0d:15:
8f:1a:08:29:68:59:53:47:e6:04:7b:a3:ea:3c:71:
d9:da:5a:39:86:cc:f6:f3:7c:42:fd:87:20:67:bf:
f4:f3:b7:92:5d:d4:4f:70:6e:d7:b1:72:d2:cd:77:
d2:4b:9e:c2:dd:fc:66:14:85:83:c6:d9:f0:c3:12:
06:ac:c4:21:74:b0:ba:88:44:e6:e4:70:15:c0:bb:
ae:a8:57:41:95:30:79:2f:ef:e4:67:09:2b:85:db:
e6:ec:44:2b:ca:96:5d:ca:1f:50:e0:a6:f1:d9:b6:
6b:6a:c7:ff:c3:0f:b2:3d:e6:78:6b:d9:aa:e4:5b:
ff:8a:16:42:bd:16:d5:ec:fb:63:7b:b5:60:f7:67:
2e:dd:34:77:4b:ff:83:89:71:0b:b5:9c:70:79:99:
07:57:8b:a7:fe:52:f0:d6:74:0c:0e:0d:61:2a:d6:
08:93:4b:be:30:d5:97:38:2e:7f:6a:cf:0d:5a:77:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:85:8A:AE:D1:E2:97:86:D1:FA:E8:12:92:59:C0:8D:2F:49:09:0A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/D4WKrtHil4bR-ugSklnAjS9JCQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:8c:e5:66:7b:85:78:aa:c2:66:a4:a7:bb:39:69:f0:9a:85:
ce:14:f5:71:19:2d:47:04:89:17:f1:df:77:4f:21:5c:7b:de:
fd:fd:54:91:7d:e7:ab:b6:6c:a2:28:c6:36:15:f0:a3:5f:ec:
19:3d:0d:58:ba:2f:48:a6:03:ba:65:97:0c:d6:5f:e3:a5:c9:
bd:1d:69:e5:26:bc:c5:75:fd:53:b7:80:15:a1:3e:58:09:b7:
d8:a9:a9:cb:95:cd:30:d2:6d:73:7a:b6:0d:19:ff:f4:d9:e2:
94:9f:e3:93:c4:1e:24:31:07:2d:c6:21:d5:ef:45:04:de:cf:
7f:26:36:2c:69:5f:7f:08:33:23:23:d0:60:9f:68:e9:f6:04:
0e:77:9d:74:af:ba:c5:87:0f:17:ac:4c:3a:43:86:21:fa:30:
34:0c:72:60:d3:6b:10:df:ce:17:bb:c0:49:c6:6a:37:e9:bd:
f8:54:55:ed:65:b8:a1:5d:62:4f:f5:46:da:3a:8e:95:b6:71:
35:47:d8:cc:52:7f:76:5a:a5:1b:b1:d8:d3:7d:68:43:f2:44:
bd:b4:c7:83:39:b1:53:5e:aa:8a:8f:9c:9f:d7:7e:cf:ec:f2:
37:76:d4:7b:09:d8:fd:87:97:4d:91:87:4b:c2:dc:ef:05:6c:
10:b6:10:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:53:54 2025 by rpki-client