Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OqN5Fec5T7i6wkItId4lugskRxA.roa
File: OqN5Fec5T7i6wkItId4lugskRxA.roa (raw, json)
Hash identifier: RzfhLlt01TV1A8orkFaNnWReT4LW3JRGbVR4+9yUe+A=
Subject key identifier: 3A:A3:79:15:E7:39:4F:B8:BA:C2:42:2D:21:DE:25:BA:0B:24:47:10
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1E36905662F134F8EE5AC4E34975C79C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OqN5Fec5T7i6wkItId4lugskRxA.roa
Signing time: Thu 30 Nov 2023 03:12:21 +0000
ROA not before: Thu 30 Nov 2023 03:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1e:36:90:56:62:f1:34:f8:ee:5a:c4:e3:49:75:c7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 03:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aa37915e7394fb8bac2422d21de25ba0b244710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:af:8a:cf:ba:bb:ef:70:14:7f:a2:b3:ea:
3e:22:4f:37:cd:30:29:a9:da:4c:a8:d7:d7:4f:47:
52:c2:32:64:7c:12:f2:77:df:5f:f3:7b:ef:06:2f:
ee:29:4a:13:29:fb:ce:8c:f0:f7:a8:1c:41:5e:58:
34:33:69:9a:01:ca:4f:7c:6f:ae:40:36:ce:a3:00:
8a:21:a6:6b:49:eb:a6:5c:35:fe:ab:69:18:67:8d:
37:9d:12:94:69:b5:f6:91:16:27:98:9a:6d:9f:c3:
b5:a0:50:38:82:e8:9a:72:f3:18:c1:3e:11:0c:61:
5f:c5:8b:b0:5c:70:12:c5:50:dc:ec:97:1d:09:f1:
f8:ce:52:ac:c5:2a:3b:1d:7a:7c:14:0a:7e:f6:ce:
ac:76:8b:0d:f2:57:d3:e4:0e:71:cd:3b:e5:da:63:
64:0c:06:85:c1:90:92:2e:b3:40:10:9d:72:a0:9a:
39:07:34:31:3c:55:df:13:a6:ae:07:b9:09:6d:02:
20:89:b2:cf:11:61:51:87:3c:a6:1b:03:4c:c9:98:
83:40:01:64:19:d4:76:de:8e:e8:2f:34:fd:77:77:
68:9d:b1:54:ee:9d:3b:d2:8a:17:6a:ac:5e:5f:a7:
5e:38:a0:a9:7b:76:50:25:45:44:9e:90:cf:87:1f:
a9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A3:79:15:E7:39:4F:B8:BA:C2:42:2D:21:DE:25:BA:0B:24:47:10
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/OqN5Fec5T7i6wkItId4lugskRxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:93:16:87:0b:89:8d:0a:10:51:79:37:0a:64:bf:02:59:d0:
49:5d:a3:b4:9e:46:72:6d:67:92:b2:51:27:bc:fc:97:49:19:
59:89:c4:e7:c6:a4:03:64:33:d4:be:57:c6:3a:5c:bc:4a:ae:
f3:c0:ef:01:d1:ec:1d:57:6d:09:1d:25:b3:34:d6:93:2a:3e:
fd:82:e9:a1:14:49:8c:a7:c5:80:75:2a:44:5d:19:e9:86:9b:
d4:a0:74:b3:72:77:5b:87:42:b9:60:19:19:97:08:4a:37:ad:
1c:ba:da:b6:2d:0d:3e:eb:6f:ce:75:7b:de:d1:73:e5:98:f8:
54:22:ee:91:f6:38:9d:60:bb:06:76:70:6c:0e:4b:1e:6d:da:
9e:dc:41:08:0f:83:48:80:37:e2:50:9f:1b:ad:53:01:a2:ff:
9b:69:c0:d5:4e:2c:7d:96:67:5e:31:b8:1a:b4:d7:6d:1c:51:
ab:81:f1:29:43:0e:64:21:95:05:a8:2e:8d:70:18:32:aa:a2:
81:35:1d:b8:59:b6:e2:87:8d:59:83:da:95:dc:68:32:3a:66:
b0:24:af:95:65:eb:a7:d0:40:04:29:84:8d:63:22:68:d2:89:
92:82:e0:61:92:81:7f:fe:98:30:e2:8e:dd:8e:54:a2:ad:15:
e3:38:92:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:16:06 2025 by rpki-client