Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O4J-62BkkHlylE_MK_NJe7XvlnU.roa
File: O4J-62BkkHlylE_MK_NJe7XvlnU.roa (raw, json)
Hash identifier: JrLQhjDuZFYarTdS+XsOOL9kQFQLfqSeCxb0wkxwOAA=
Subject key identifier: 3B:82:7E:EB:60:64:90:79:72:94:4F:CC:2B:F3:49:7B:B5:EF:96:75
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE4E567F9547C23EEBC112F9C4D32C5C8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O4J-62BkkHlylE_MK_NJe7XvlnU.roa
Signing time: Sun 19 Nov 2023 00:05:21 +0000
ROA not before: Sun 19 Nov 2023 00:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:e4e4:8907/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e4:e5:67:f9:54:7c:23:ee:bc:11:2f:9c:4d:32:c5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 00:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b827eeb6064907972944fcc2bf3497bb5ef9675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:75:50:4e:1c:c0:c9:f4:63:4a:d5:7d:42:52:
91:61:6f:3f:2e:51:7e:c7:d8:68:70:a3:68:89:c2:
d1:df:d8:34:5f:cb:d1:b8:67:c8:c6:0f:f4:fa:99:
2c:af:19:b9:5c:ff:f0:e0:61:36:a2:65:d9:5b:32:
e7:cf:e0:63:d5:b7:a3:53:57:7c:27:c0:22:36:2d:
03:3d:ba:27:64:d2:39:13:68:54:96:04:b0:68:09:
b9:a0:45:19:f1:fb:dc:45:5b:ac:f4:ea:b5:17:09:
8d:3a:8c:f6:48:89:59:4e:85:3a:54:af:a8:29:88:
5b:42:f9:e6:bb:f1:3f:96:13:6d:4d:6c:8e:f8:b7:
a5:6c:46:d6:f8:66:6b:48:95:6f:31:91:d2:c6:24:
c4:7d:a5:8d:bd:90:c0:6b:a5:9f:70:39:44:ee:dd:
1f:31:09:4e:17:4e:55:77:bc:ab:8b:e6:24:a8:3a:
2a:9b:0a:c1:2d:35:a0:de:0c:fb:82:b7:09:c8:a9:
6b:0c:e8:3e:80:2f:45:f1:26:d0:79:7a:50:fc:79:
a0:c9:ad:8a:68:f8:be:f5:a2:7b:32:95:92:ac:89:
42:a7:1b:55:13:37:b3:dd:69:f7:94:b2:ab:ab:61:
71:1f:f0:2d:c2:d2:2f:93:2d:cc:bc:be:f8:21:6e:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:82:7E:EB:60:64:90:79:72:94:4F:CC:2B:F3:49:7B:B5:EF:96:75
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/O4J-62BkkHlylE_MK_NJe7XvlnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:ae:0a:18:01:a7:d7:45:1d:26:4d:33:ab:e9:6e:71:30:6f:
ef:8d:d9:0f:b1:6f:a9:34:a6:24:df:de:4d:82:f0:e8:76:9d:
f9:95:81:76:c7:d4:13:97:1e:11:e2:ed:38:ab:f0:da:96:13:
fa:eb:b3:ad:02:8f:62:58:0d:1e:eb:b6:61:8b:79:14:05:9d:
cb:2e:52:84:bb:22:ef:47:b0:61:81:13:4f:f9:c0:37:e3:b8:
b6:25:34:9f:78:2d:78:ca:04:01:73:ca:0c:db:66:a9:03:fc:
87:ec:75:1e:91:85:fd:34:8c:50:63:b9:51:27:b5:63:ee:58:
9c:f2:32:cf:7e:be:62:8f:61:16:08:f0:25:c8:99:8e:be:a8:
76:b0:5c:33:52:87:a3:d5:8c:74:3b:65:e3:96:b8:f9:54:eb:
60:7c:da:8c:0b:99:37:35:19:dc:16:c9:1c:27:ca:b8:9f:cf:
a5:fc:4e:d8:12:db:ed:c2:c5:19:fb:51:1c:d3:a5:a5:43:ef:
f9:65:2e:c8:31:4f:40:4e:8e:cc:9d:9a:0f:9f:38:13:53:9d:
b3:47:94:5c:41:46:4f:15:42:ca:34:82:bd:ac:70:a2:40:82:
24:d8:b2:7f:3d:51:9b:fa:82:cb:c4:d8:d7:17:86:67:d3:1d:
8d:1c:ed:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 06:53:44 2025 by rpki-client