Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d_LS0IpPWZShFH_WGwp-27tA_J0.roa
File: d_LS0IpPWZShFH_WGwp-27tA_J0.roa (raw, json)
Hash identifier: 5yvGdhyL+kepvPg6ivpV23fTB0B8BTN3DZarc9lTlVs=
Subject key identifier: 77:F2:D2:D0:8A:4F:59:94:A1:14:7F:D6:1B:0A:7E:DB:BB:40:FC:9D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2F9C2BD407DC27BCAA033FAAE7B1ED7D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d_LS0IpPWZShFH_WGwp-27tA_J0.roa
Signing time: Sun 03 Dec 2023 12:16:52 +0000
ROA not before: Sun 03 Dec 2023 12:16:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2f:9c:2b:d4:07:dc:27:bc:aa:03:3f:aa:e7:b1:ed:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 12:16:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77f2d2d08a4f5994a1147fd61b0a7edbbb40fc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:41:98:3b:80:6e:1b:a7:05:09:31:1e:17:
19:c4:44:45:73:05:6b:f0:76:40:a1:c5:64:db:6f:
9e:2b:1a:a4:48:68:bf:ee:87:3c:3a:df:7d:9a:c9:
86:01:16:e1:f4:66:39:a3:f5:f8:cc:00:3b:b5:96:
35:69:ad:17:2e:64:64:ac:73:fc:9b:47:83:d6:4a:
6d:1d:0d:74:d7:24:ae:10:b8:d9:22:0e:d2:86:38:
74:6e:13:39:42:fd:43:c8:02:15:90:27:81:85:b0:
e6:05:0e:68:f2:76:ac:94:06:6d:00:23:40:f3:bb:
5c:d2:6a:c7:8e:0b:54:aa:83:76:52:3d:0d:a5:bf:
53:9f:c5:a6:d9:34:9e:67:36:53:32:79:8a:c9:84:
94:16:60:dc:03:0d:89:8f:dd:44:bc:22:2d:9f:8d:
4a:2a:df:79:5f:a9:13:e0:15:7a:24:7c:09:10:ce:
99:1b:a4:91:0f:b4:d0:f5:e8:3e:ed:ca:1b:36:25:
11:d8:89:77:32:e1:e6:fa:6f:e3:aa:cf:de:3b:99:
05:c5:32:e8:fd:d9:6c:c9:2a:21:88:de:88:5e:5e:
aa:81:27:82:0a:ad:bc:5a:24:9d:66:e6:a7:da:35:
73:de:11:54:8d:17:c8:6c:7c:87:fd:54:4f:0d:ea:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F2:D2:D0:8A:4F:59:94:A1:14:7F:D6:1B:0A:7E:DB:BB:40:FC:9D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d_LS0IpPWZShFH_WGwp-27tA_J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:90:5f:75:d5:bd:87:94:aa:c9:6a:13:2f:39:c6:56:6e:ec:
bc:cc:95:e8:2c:f6:50:5d:b8:50:ae:00:c1:ec:87:57:95:24:
e3:d8:55:c8:65:51:d7:f0:80:e5:b4:dc:97:cf:3f:57:5d:9e:
4e:c8:f0:11:b7:e6:0a:9a:ad:54:65:3f:3e:2e:6d:d1:6a:94:
17:ed:9c:a6:27:d6:19:ae:9f:f8:db:a6:a7:c6:87:92:d3:67:
ed:de:14:bf:e9:69:f1:53:d5:a6:0e:72:12:ac:4b:49:fa:9a:
9a:d0:74:c3:6b:24:60:56:6f:ec:29:86:62:db:e6:de:22:f4:
2e:37:f9:75:48:9f:75:3c:84:18:be:c1:84:96:68:e8:3a:03:
6c:22:f4:36:9c:0f:3c:0c:4a:fe:0b:2a:2e:94:5a:76:35:64:
bc:bc:a0:23:38:5a:f4:2f:03:83:0d:b6:6b:99:da:3e:88:f2:
8a:0e:8b:ab:75:6e:b6:22:af:4a:3a:67:92:dd:12:ec:f9:72:
62:8b:13:44:1c:74:43:00:60:0a:63:4b:1f:bb:6e:df:05:67:
a4:69:d1:be:f7:8d:e8:e5:9d:23:b5:f1:54:7a:f9:00:65:a2:
16:6c:d4:0d:f0:60:bf:c8:b7:bb:f4:08:d6:96:0e:e7:80:1c:
3f:1c:9c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:15:19 2025 by rpki-client