Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Hd8e4RNwQFL_xmeIh13xQQuRGzY.roa
File: Hd8e4RNwQFL_xmeIh13xQQuRGzY.roa (raw, json)
Hash identifier: I8CfjPlpl0vSzIfwaPuDGKTyyBBGvREpmUy+cMLvwFw=
Subject key identifier: 1D:DF:1E:E1:13:70:40:52:FF:C6:67:88:87:5D:F1:41:0B:91:1B:36
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C14BF2A0B2F9C60FA561DED29A2CE3934
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Hd8e4RNwQFL_xmeIh13xQQuRGzY.roa
Signing time: Tue 28 Nov 2023 07:05:21 +0000
ROA not before: Tue 28 Nov 2023 07:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:14be:3e91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:14:bf:2a:0b:2f:9c:60:fa:56:1d:ed:29:a2:ce:39:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 07:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ddf1ee113704052ffc66788875df1410b911b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8d:bb:47:d1:56:f7:96:38:c7:45:1f:2d:16:
84:89:d6:13:0b:8a:5e:f0:9b:01:2d:e2:1e:81:be:
d7:e9:2b:6e:cb:f7:ff:fe:70:32:76:04:42:9a:20:
fa:e6:36:68:58:c4:95:51:13:e8:eb:a6:1a:31:75:
3f:3c:f2:b7:c6:02:a8:eb:07:7f:c9:64:da:b8:3b:
c0:58:6a:be:14:47:01:e3:ff:78:97:16:bb:bd:12:
68:d7:38:5d:da:93:3e:12:e1:a1:a4:86:60:ae:69:
ee:87:84:84:b6:0b:fd:67:ea:d7:86:5d:61:34:a0:
fd:d0:1b:96:5a:5b:e4:86:0c:ec:a7:a0:ee:bf:34:
ce:d1:95:eb:04:ae:8d:5a:bb:d8:8e:4a:ff:21:24:
0d:dd:65:52:d4:7d:28:58:cc:5f:ca:11:b1:69:a9:
3b:c6:be:6d:d2:79:7c:ca:9e:4b:8f:d4:51:ac:e2:
b8:34:84:05:8d:84:f2:d5:5d:2f:a0:83:e3:c0:14:
3c:5b:8b:54:8a:8a:e3:62:1d:b8:fc:6f:1a:42:37:
7c:08:1b:f4:fd:9d:39:49:8f:fb:eb:78:12:5b:08:
5d:d7:c2:7e:27:d7:ae:dc:35:31:39:16:e7:60:c4:
0a:e7:62:9e:51:10:c7:00:b2:30:4b:03:3d:f4:85:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DF:1E:E1:13:70:40:52:FF:C6:67:88:87:5D:F1:41:0B:91:1B:36
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Hd8e4RNwQFL_xmeIh13xQQuRGzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:d9:db:96:6a:f4:c8:f9:b2:4d:a4:32:8b:48:c5:eb:23:80:
f0:39:f1:36:61:5f:d9:5e:51:d5:4b:87:70:b6:e5:41:d0:b9:
fb:90:3b:ef:06:f1:33:71:99:19:f4:05:e9:ce:69:48:e1:bc:
72:87:72:8a:62:d0:a3:22:36:9f:51:36:21:8a:5c:11:1f:4b:
3f:51:6b:d6:38:70:2a:4c:33:82:77:25:c9:1a:b2:d8:bd:78:
49:77:83:e4:79:a2:10:53:c4:c2:cc:53:cb:0e:6c:13:89:f6:
bd:ce:fe:13:1e:5d:3c:73:ed:e9:ab:bd:16:2b:c5:82:b4:d7:
6b:67:66:eb:ba:d5:0f:23:4d:59:49:81:fc:5a:79:6c:4b:0e:
da:39:d2:7c:94:8d:d6:6b:a7:a8:09:a2:4e:b0:c1:4f:06:85:
a0:79:a5:dc:04:11:a4:b7:d3:cc:b4:7a:2b:b5:6a:7a:06:70:
42:9c:82:b9:a1:38:e6:45:5e:13:5f:1f:30:38:a7:79:fc:c6:
da:67:dc:4a:b8:93:96:fb:7f:a8:29:d5:11:ec:f8:50:a9:11:
08:f3:9d:9e:a2:f8:71:bf:53:89:bc:8e:11:25:7c:91:b5:ef:
fb:70:f5:ac:6e:7a:99:0b:18:ff:1d:50:32:9c:a3:d0:e0:45:
0d:9b:0b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:13:20 2025 by rpki-client