Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DpzBE2sbp9HGsNTrsCUDlR-01PE.roa
File: DpzBE2sbp9HGsNTrsCUDlR-01PE.roa (raw, json)
Hash identifier: b/HISbiBfqUD0vsMs1lGQ9j4aHSCbc8pEkOfoG0SZQ8=
Subject key identifier: 0E:9C:C1:13:6B:1B:A7:D1:C6:B0:D4:EB:B0:25:03:95:1F:B4:D4:F1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3487F6DE0D8129D95CC2250A247A2F3E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DpzBE2sbp9HGsNTrsCUDlR-01PE.roa
Signing time: Mon 04 Dec 2023 11:12:54 +0000
ROA not before: Mon 04 Dec 2023 11:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:87:f6:de:0d:81:29:d9:5c:c2:25:0a:24:7a:2f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 11:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e9cc1136b1ba7d1c6b0d4ebb02503951fb4d4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:2d:bf:df:d8:f2:87:b4:21:8c:25:4f:da:
2e:ac:e0:22:30:ce:47:06:ff:9d:f9:d8:7b:e1:c0:
45:39:7e:d8:35:a1:3d:97:a9:32:04:22:1c:34:61:
82:36:24:c3:fa:a9:43:f8:ad:33:8b:65:67:72:f7:
52:5e:e5:5e:d1:17:54:a6:2e:03:e7:66:a9:0e:fe:
1f:45:b0:19:29:50:f3:09:9e:8a:a9:4c:72:61:5b:
3d:2f:35:cb:d8:a7:e3:97:81:d1:80:15:0b:f9:98:
4f:0c:51:76:56:3c:f2:47:1c:10:c7:79:62:c6:37:
8f:47:9c:92:1b:49:16:f2:ca:49:45:e7:f8:2e:9a:
5d:6d:eb:4a:ab:ea:83:40:89:74:44:df:9f:aa:61:
d4:87:3c:33:ed:c5:dd:57:ea:0a:6b:75:7d:c9:f3:
da:fa:ad:7d:a1:e4:bd:a6:6d:03:24:58:41:82:70:
b5:9d:bc:a5:95:78:03:34:b4:09:42:86:88:c5:4f:
91:65:35:42:de:3b:9a:e6:1d:94:0c:b8:cb:7b:bf:
0e:ed:13:17:39:1e:42:41:c9:a2:f5:a1:20:4c:1b:
56:45:60:74:a0:a9:96:67:ff:d2:08:bb:50:5b:b5:
ed:a3:0b:0b:43:c7:6b:78:87:b5:f1:39:e6:64:b0:
98:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9C:C1:13:6B:1B:A7:D1:C6:B0:D4:EB:B0:25:03:95:1F:B4:D4:F1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DpzBE2sbp9HGsNTrsCUDlR-01PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:63:2a:12:2d:e8:ae:13:55:52:81:2b:28:e7:77:84:a1:ec:
92:2e:7a:67:5a:1f:f3:ba:71:c1:e9:5e:57:a0:68:ef:3f:a9:
7e:a7:79:4d:c6:c1:f5:fb:64:a7:ce:16:6e:1a:04:7a:a0:74:
5a:34:68:0f:5e:af:b9:70:ab:75:0a:f7:98:89:31:1c:5d:6b:
46:25:3f:a3:9b:6b:7e:88:cb:29:a6:3d:02:a7:fd:a7:b2:32:
2b:a5:04:17:0d:79:10:bc:92:45:2f:96:c7:a3:6b:02:9f:f4:
9a:b7:7c:40:98:ae:8d:30:59:a3:e7:20:0b:dc:2c:da:3e:e8:
49:2c:67:c4:2d:64:68:8d:3d:6d:59:19:dc:ac:21:1d:bb:cc:
60:cb:5d:b4:8c:a1:53:42:c0:78:e4:6d:dd:58:0e:51:6a:a5:
37:3b:fc:d0:24:76:10:92:a3:a8:43:ad:bc:f7:8c:34:ff:aa:
45:e4:d9:6b:d6:d9:b3:2c:e2:29:44:e6:ea:22:20:56:cb:9c:
52:4a:30:a8:75:4a:5f:81:8b:e8:1b:20:1a:cd:c3:b4:31:7f:
b2:ac:72:50:8e:64:79:7a:dc:c3:1b:ec:dd:cf:ab:6c:3b:4f:
1b:8c:96:a7:4e:43:5a:2d:49:d6:de:0f:0b:e0:80:3b:37:9c:
a4:c9:aa:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:48:35 2025 by rpki-client