Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pN4r6a-F4vQs6L0JzM-Ui2QH_TI.roa
File: pN4r6a-F4vQs6L0JzM-Ui2QH_TI.roa (raw, json)
Hash identifier: xdY8SIaeHjAkLcSbMdvy5NYlo6ijdC7hXD2CD5n5p0E=
Subject key identifier: A4:DE:2B:E9:AF:85:E2:F4:2C:E8:BD:09:CC:CF:94:8B:64:07:FD:32
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1FF2EBD752A9953BEC3A5E6C07EA1C57
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pN4r6a-F4vQs6L0JzM-Ui2QH_TI.roa
Signing time: Wed 11 Oct 2023 18:14:55 +0000
ROA not before: Wed 11 Oct 2023 18:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1f:f2:eb:d7:52:a9:95:3b:ec:3a:5e:6c:07:ea:1c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 18:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4de2be9af85e2f42ce8bd09cccf948b6407fd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:40:d2:e1:81:73:0e:28:34:4d:e1:75:0a:
c0:f0:12:f4:58:4b:b3:35:23:b7:f5:a5:54:89:b9:
2e:f6:79:46:bb:03:41:6c:b3:72:b2:6c:5d:b3:56:
83:1a:b4:61:02:e2:47:df:52:60:b4:76:04:22:b1:
84:5b:0f:08:13:bc:02:0d:2e:c8:dd:56:1e:40:99:
31:27:b5:e2:9c:42:79:31:5a:29:79:fc:5a:92:d1:
4a:54:ec:4d:fd:a9:a9:d2:40:8a:b4:7b:09:15:47:
a3:05:e0:47:99:1b:31:c4:d8:a2:6d:43:f7:71:4c:
44:54:57:31:ef:58:6e:cb:1a:38:aa:1f:ce:e3:f2:
c3:e0:ba:7f:4e:52:9f:07:21:e4:92:82:fb:9d:f9:
1d:90:dd:e1:f1:8b:46:ba:a9:df:7e:8b:14:ac:5d:
47:60:58:d5:49:72:9e:41:05:f6:45:76:66:2f:1d:
1e:66:52:8a:a6:3d:e3:cb:0c:dd:39:e0:96:e1:9d:
66:27:0b:dd:b1:80:ea:0e:d5:30:4c:4a:ca:cb:ca:
23:90:8c:30:6d:18:cc:ef:f1:c3:8a:60:44:de:76:
e3:90:bd:11:44:8a:fc:98:b3:ac:5a:16:c7:76:e5:
ab:ff:98:b9:61:f3:fa:8c:6d:66:4b:42:1f:b2:d3:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DE:2B:E9:AF:85:E2:F4:2C:E8:BD:09:CC:CF:94:8B:64:07:FD:32
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pN4r6a-F4vQs6L0JzM-Ui2QH_TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b8:22:51:31:49:49:05:83:1f:ae:ec:97:17:a7:5e:b5:6b:08:
8a:c2:98:b4:57:27:46:b3:2b:67:9f:b0:77:12:49:e3:5b:3f:
4e:c1:17:1f:02:46:55:46:a3:ce:1d:24:c8:51:96:d8:97:90:
83:2a:1c:1f:be:b1:8b:3a:aa:98:59:fc:99:6d:cd:15:b9:b7:
ce:ac:45:9c:26:16:a9:5d:36:be:fc:7f:15:d3:bf:db:33:8a:
fe:03:77:d0:1d:89:ca:d2:e5:86:d2:08:f9:d3:b1:67:99:c6:
e8:71:9c:ce:38:f6:3c:ef:f1:17:89:df:fd:b9:96:20:d2:6d:
55:0e:48:fc:5e:c3:c0:6f:d7:24:9b:81:d0:12:6e:c3:b4:50:
48:54:83:12:5c:d7:ef:42:6b:a7:08:22:5c:3f:87:be:d0:8a:
64:5a:3f:8b:47:99:63:ef:e3:d4:74:e3:af:b7:07:a4:9f:29:
9b:38:10:89:29:e3:28:50:09:8a:82:da:99:38:c4:a4:ac:2d:
76:3c:cc:99:84:6b:14:15:13:fa:b5:f5:45:f1:03:c7:4a:9c:
97:0a:55:5e:ce:a8:80:1e:69:dd:98:d1:68:d4:32:15:6b:33:
56:65:c0:69:89:5b:c6:57:bf:fe:3d:2f:41:87:7c:17:b9:15:
71:21:6d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:32:39 2025 by rpki-client