Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T63-DtKMk7O3ra6g3Ne54NlWwHg.roa
File: T63-DtKMk7O3ra6g3Ne54NlWwHg.roa (raw, json)
Hash identifier: 7BTAmaNWqpebeozORuFNJuWLDBPjXcP8ZBawImwaDcU=
Subject key identifier: 4F:AD:FE:0E:D2:8C:93:B3:B7:AD:AE:A0:DC:D7:B9:E0:D9:56:C0:78
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7D7DCF30059B27C77C5F4C130334B2AB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T63-DtKMk7O3ra6g3Ne54NlWwHg.roa
Signing time: Mon 18 Dec 2023 15:14:06 +0000
ROA not before: Mon 18 Dec 2023 15:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7d:7d:cf:30:05:9b:27:c7:7c:5f:4c:13:03:34:b2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 18 15:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fadfe0ed28c93b3b7adaea0dcd7b9e0d956c078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b6:6a:3b:08:72:5a:67:30:9e:c8:6c:da:a8:
69:0b:a7:04:7e:b1:6b:85:7f:48:30:0f:6c:09:1d:
2d:67:39:a7:39:7d:45:ee:10:e5:e3:c9:4a:f4:bf:
08:cf:b0:e1:82:1c:6e:85:cd:52:91:83:a5:a6:c6:
0d:81:34:6a:ab:ab:9e:ca:32:69:96:2a:76:27:ea:
75:40:32:e9:4d:ab:eb:34:54:f5:d4:ac:d1:ba:6f:
be:49:93:82:bf:61:9d:9a:3d:78:c0:4d:92:76:89:
72:ac:76:87:54:6e:1f:47:a3:03:ad:49:13:2c:d4:
c4:3a:57:f5:b2:14:5c:ed:9f:bc:86:0b:f5:75:ca:
e2:53:fc:fe:32:4a:31:dc:10:4a:ec:ad:79:8d:17:
82:a0:37:21:a4:96:3b:60:41:b8:27:3a:71:a5:55:
1e:84:a0:9c:25:c2:b7:71:27:b5:42:d3:6f:31:43:
e6:b6:28:bd:8f:a6:09:69:82:b8:c3:e2:db:7c:2e:
7f:e8:a4:f4:e4:e8:64:57:33:27:51:6b:91:d8:e6:
55:79:fe:bc:75:64:08:33:12:1c:92:68:fa:7a:b2:
07:0e:bc:41:4d:67:c5:cf:25:81:1b:ed:0a:fc:bd:
a7:4c:79:cc:74:8d:04:54:7c:77:f1:b4:da:2f:00:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AD:FE:0E:D2:8C:93:B3:B7:AD:AE:A0:DC:D7:B9:E0:D9:56:C0:78
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/T63-DtKMk7O3ra6g3Ne54NlWwHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:d4:9e:4a:87:a6:80:f4:b3:39:98:7b:ad:61:9f:34:b4:95:
45:8d:91:95:5b:aa:5d:fb:2b:08:75:cc:48:02:1d:d3:2a:49:
f6:0d:0b:a4:da:03:2f:65:9d:ed:23:90:f4:8f:f0:08:e4:ff:
6e:ba:4c:43:21:ca:d1:9d:e5:09:7f:d0:25:e8:15:1f:5a:6f:
df:ff:c4:26:9a:d0:1c:11:67:1f:dd:49:4d:1c:c5:9b:3b:3c:
af:fc:79:8d:66:a2:f4:5b:e6:06:4a:63:76:d1:1f:f4:ee:7f:
11:3d:98:21:86:6b:57:ad:04:eb:8a:03:61:06:fb:a8:5b:a6:
fc:c5:2b:e4:4e:c1:39:33:c9:0f:ac:82:ae:bf:af:75:4f:dc:
61:5d:34:56:5e:88:71:1e:32:5c:27:40:47:98:3f:f8:29:79:
53:62:ed:99:33:98:99:32:09:93:67:54:d1:73:30:3f:62:cf:
68:9b:39:7a:f8:82:b5:8c:6f:b6:d7:98:b1:6b:8a:5b:b6:83:
e4:8a:8c:e2:dd:8d:df:f9:41:8c:58:1f:c6:19:9e:41:b6:4f:
3d:02:10:52:ca:58:60:28:0e:56:cf:5d:10:8c:9d:bd:69:63:
e8:c3:dc:77:04:45:f8:bb:50:10:39:ab:8a:f5:33:7e:78:18:
c8:b7:df:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:20:43 2025 by rpki-client