Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_dge7Dfa__MipPWKiq4-b8wP3Tc.roa
File: _dge7Dfa__MipPWKiq4-b8wP3Tc.roa (raw, json)
Hash identifier: zlWaGwj3FutgtVJUSatXAeJNeQyru7dbe/HKvxnlwsQ=
Subject key identifier: FD:D8:1E:EC:37:DA:FF:F3:22:A4:F5:8A:8A:AE:3E:6F:CC:0F:DD:37
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B42795791A26DF62F5B111503288947EF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_dge7Dfa__MipPWKiq4-b8wP3Tc.roa
Signing time: Wed 18 Oct 2023 11:08:50 +0000
ROA not before: Wed 18 Oct 2023 11:08:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:4275:6417/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:79:57:91:a2:6d:f6:2f:5b:11:15:03:28:89:47:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 11:08:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdd81eec37dafff322a4f58a8aae3e6fcc0fdd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:08:b5:bf:a9:4d:da:a6:74:b1:15:6c:cc:7d:
af:7c:c6:5d:25:67:de:43:10:cb:43:18:ea:d2:04:
9e:d8:6b:b8:82:95:88:42:81:d7:68:0d:17:d2:a2:
db:3b:5a:f7:cb:2d:0d:92:b1:40:3f:74:24:f2:b3:
40:55:96:c3:8a:61:50:b3:24:12:56:1d:b7:44:33:
ee:cd:ca:55:7f:87:f1:1e:ce:42:00:3e:87:98:ed:
b4:79:93:3e:fc:d4:be:52:9c:59:f3:a2:99:f7:87:
28:78:c8:c9:06:a1:e8:68:cd:ed:dd:92:a1:1e:1a:
5a:ff:dd:64:da:fb:c5:5e:c3:6a:16:b7:b4:48:66:
00:86:26:8c:00:74:da:a7:2c:a2:d1:02:ee:26:d7:
4d:84:cd:aa:71:c5:b2:99:9d:e0:ad:00:61:12:b0:
ce:f6:5e:2f:b8:0b:56:74:2e:a6:37:6e:cc:43:7f:
2b:fc:a5:be:4f:64:4e:01:3d:a5:50:ce:54:11:0d:
a1:ba:a2:17:3f:48:78:38:7e:e4:7e:ca:a1:83:f7:
71:bb:e2:c7:30:b6:dc:0a:b1:84:44:7c:16:67:b6:
d5:d9:e7:f5:8e:4c:48:b8:f6:a8:19:d8:99:0d:f4:
ba:7a:75:bc:dd:0a:8f:50:dc:fd:fb:9f:87:32:7d:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D8:1E:EC:37:DA:FF:F3:22:A4:F5:8A:8A:AE:3E:6F:CC:0F:DD:37
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_dge7Dfa__MipPWKiq4-b8wP3Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:81:96:63:fc:1c:de:99:44:ac:1a:81:a8:ca:5a:bb:09:8b:
98:19:2d:61:65:f3:df:aa:a9:75:b6:6b:5a:0f:92:3f:18:9e:
c3:aa:e2:b2:ad:d2:b4:aa:34:e3:4e:38:f4:2a:41:ff:d5:cf:
72:16:85:a8:cd:0a:d5:85:ca:d6:ba:4e:fa:b2:d5:95:27:25:
56:36:e5:5d:75:08:2f:dc:5a:cd:67:f3:9b:1f:da:70:1c:b0:
da:e1:f2:ca:be:ca:7b:ab:00:f0:37:b6:bb:93:49:ef:7a:57:
91:fc:49:38:34:1c:f1:70:67:52:cd:b3:cc:25:d8:16:a7:48:
89:09:9f:28:9b:a4:ce:97:85:37:9e:67:f5:58:6e:0d:75:70:
57:d2:27:e1:f3:3b:6e:93:57:1f:7a:43:52:cc:84:c1:22:db:
a3:4d:50:e3:76:be:69:0d:68:f2:4e:6b:64:a7:63:b1:08:83:
8b:5b:4d:7c:6d:18:93:3c:f9:b8:a2:8c:5a:40:58:39:97:01:
54:af:90:32:ce:cc:d9:33:0f:22:86:b8:7b:e0:a8:62:48:82:
92:34:d9:8d:88:d4:5f:11:0e:a1:5d:e9:ab:80:45:05:9f:7d:
0a:ea:ba:88:ce:ca:31:68:31:ab:5a:ad:37:20:64:f9:1c:df:
a8:1a:eb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:12:55 2025 by rpki-client