Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ptwVp1E1qI4MdEvY9Awnt3M9vrk.roa
File: ptwVp1E1qI4MdEvY9Awnt3M9vrk.roa (raw, json)
Hash identifier: TK83X/M5idw0vo7SrqSmg2wqpxkWW/5e3IBrNCmXKns=
Subject key identifier: A6:DC:15:A7:51:35:A8:8E:0C:74:4B:D8:F4:0C:27:B7:73:3D:BE:B9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE7B50310C70FF3537166CD80847B51F2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ptwVp1E1qI4MdEvY9Awnt3M9vrk.roa
Signing time: Sun 19 Nov 2023 13:11:21 +0000
ROA not before: Sun 19 Nov 2023 13:11:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e7:b5:03:10:c7:0f:f3:53:71:66:cd:80:84:7b:51:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 13:11:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6dc15a75135a88e0c744bd8f40c27b7733dbeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:f9:7f:66:ca:aa:8e:ad:39:e8:65:8b:f9:
b5:8e:36:02:bb:0c:2f:df:2d:a2:09:11:de:27:76:
56:85:5f:b3:c1:d3:16:94:8e:69:32:e2:82:3a:1f:
a0:88:a3:12:f3:8d:5d:f1:e1:5e:ac:ba:e3:9c:ca:
7a:4f:cf:b6:77:ee:e0:61:48:ee:6a:b3:e3:25:09:
23:22:81:bf:e2:4c:c3:85:83:e2:74:29:59:25:a3:
94:54:c6:d1:30:49:fc:70:c6:94:76:01:be:5b:ed:
5a:4b:02:d5:ae:03:d1:67:ba:38:1a:22:36:58:03:
0a:e1:23:a8:f0:7e:19:9c:ef:e7:d6:96:f4:8a:7a:
a0:f0:6b:f8:6e:b0:2e:45:0a:07:48:8a:71:43:86:
78:22:91:61:a3:70:06:7d:4c:ff:cf:92:9c:59:d1:
d2:3b:3b:27:42:d0:74:6a:ac:c0:2b:45:8a:79:af:
84:c5:8f:ee:70:48:4e:3d:48:b5:5c:6a:73:1f:89:
b2:46:9b:3d:b7:90:ab:33:46:be:ff:c7:aa:ff:cf:
59:7f:ce:1d:00:a5:e8:83:b6:b5:34:16:91:3b:e2:
90:e7:54:f6:3b:e2:04:ad:49:66:d8:2a:00:b3:b7:
18:36:41:0e:74:c7:c5:ec:c6:ef:97:aa:5e:9e:52:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DC:15:A7:51:35:A8:8E:0C:74:4B:D8:F4:0C:27:B7:73:3D:BE:B9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ptwVp1E1qI4MdEvY9Awnt3M9vrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d0:64:69:e4:2c:79:c1:a6:a4:4a:8c:1c:d2:e4:ea:15:8b:0c:
f0:3b:f4:75:36:83:7e:15:cd:d7:8c:96:c3:3c:7a:19:1c:12:
cf:6c:19:fe:72:b7:48:a7:6c:14:ab:74:60:83:39:ec:fa:5b:
18:9b:26:be:73:8c:55:49:e3:81:8e:2a:fb:b7:25:2c:ca:27:
03:4f:ab:9a:83:23:e4:59:54:92:2f:88:c0:35:1d:69:aa:33:
ca:f4:82:8c:90:c5:5a:b4:e5:cd:71:27:8b:a7:55:bb:1b:95:
85:a0:16:60:7f:c8:5e:01:57:a0:b9:c4:48:90:60:20:94:12:
e5:3d:ff:ac:1f:ea:1a:ac:50:83:2f:d7:2b:d9:ed:5c:84:b4:
5c:82:98:1c:67:72:0c:b9:42:c8:97:5c:67:52:4f:40:bf:7a:
20:f7:27:dc:1c:e5:3f:2f:09:71:d6:bb:1a:9b:22:b5:54:7d:
b4:e7:eb:21:64:ba:29:27:e9:39:ff:fe:db:3f:90:e8:b4:cc:
a8:ed:e4:99:1c:fd:ef:84:1f:ef:d2:7a:c5:c0:09:5c:10:31:
2c:3c:8f:04:21:32:c9:68:cd:5a:41:36:c7:aa:f9:13:b0:5a:
1c:fe:54:b1:04:ba:cc:d1:ef:ee:47:8a:5e:29:b9:93:4b:e5:
20:d1:66:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:23:41 2025 by rpki-client