Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sDCfUW337oRsJWqWOTpVwIRO5-Q.roa
File: sDCfUW337oRsJWqWOTpVwIRO5-Q.roa (raw, json)
Hash identifier: ymJhf5mItLbWkG8FQQ7aokrhAdnSZpiWfyc/JIPbSUo=
Subject key identifier: B0:30:9F:51:6D:F7:EE:84:6C:25:6A:96:39:3A:55:C0:84:4E:E7:E4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C39A6FFBA14588A460C0CED3613417A91
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sDCfUW337oRsJWqWOTpVwIRO5-Q.roa
Signing time: Tue 05 Dec 2023 11:04:54 +0000
ROA not before: Tue 05 Dec 2023 11:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:39a6:514e/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:a6:ff:ba:14:58:8a:46:0c:0c:ed:36:13:41:7a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 11:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0309f516df7ee846c256a96393a55c0844ee7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:66:31:f9:19:0a:18:92:9d:ee:6e:54:37:33:
f6:5d:5f:64:ac:3e:8b:52:17:22:d1:3a:ed:2f:06:
8c:85:66:cd:40:19:58:a0:9c:90:61:78:77:da:30:
a4:43:13:f2:43:9a:09:a9:e0:e2:b8:d7:df:4a:c0:
af:0b:b5:cb:f5:6f:7b:71:91:cb:73:a0:97:22:c3:
08:e6:b9:e7:34:cb:cd:c5:59:16:d9:57:95:61:77:
7f:ca:b6:e7:00:e2:b5:6a:a9:43:45:df:8e:f4:6b:
f8:70:93:02:89:1c:fd:e4:67:50:45:d1:90:94:20:
8e:87:df:3c:2d:96:c6:53:fd:5e:1a:0e:6b:18:f7:
54:de:2b:11:8d:b2:4b:12:4e:68:35:04:0b:6b:e6:
71:20:fc:48:11:18:f8:b4:a9:b2:21:f0:23:1b:35:
b5:ca:a8:0e:70:e5:62:9f:98:76:1d:ca:fe:6f:bd:
78:69:4a:b8:b1:c4:f1:45:f5:98:6f:b3:44:de:9c:
25:72:c8:ff:f4:05:0c:cc:ae:f8:3f:89:dd:81:38:
28:75:4e:bc:58:cc:5a:41:73:55:e4:18:6b:df:ee:
64:54:3e:e1:e8:3e:88:f8:5e:94:c0:a9:23:51:11:
0c:79:04:78:59:b1:3d:db:1c:96:47:e7:16:b8:57:
b2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:30:9F:51:6D:F7:EE:84:6C:25:6A:96:39:3A:55:C0:84:4E:E7:E4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sDCfUW337oRsJWqWOTpVwIRO5-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:39:34:5d:10:c0:5a:d1:87:4d:5a:22:d5:cf:be:61:a2:3f:
8c:1d:b3:83:95:ea:e1:76:34:14:35:b2:d3:38:f7:c4:4b:b7:
5d:b7:6b:dc:eb:92:fc:e4:e5:30:70:59:7c:ec:cb:45:d9:40:
67:cd:c8:75:b2:66:6a:aa:00:e6:d7:a2:99:36:dc:23:7d:ad:
1d:c4:53:e1:93:c0:e2:60:41:a1:16:2f:7a:8d:db:58:3e:b2:
a8:0a:5b:fd:a3:74:cd:d8:10:57:5e:81:fa:62:ce:2d:1d:90:
6e:6e:4e:63:78:f2:49:63:d1:f1:f4:f4:50:72:a8:47:82:9b:
79:78:14:c8:6b:d0:74:47:25:c0:db:35:52:5a:29:ef:4c:c2:
23:e3:74:b2:70:2c:00:61:24:42:25:11:f0:ad:41:f5:c3:9c:
d0:63:37:b9:61:1d:2c:0c:eb:66:ca:d4:66:1a:5e:54:41:42:
90:8b:b4:4a:4e:e3:47:b8:d9:38:3e:bd:2b:68:b2:c8:90:a9:
c7:32:7a:6a:40:af:de:e8:d6:cd:40:e7:ce:61:67:da:85:c0:
f3:e4:a5:10:c6:47:94:15:86:c5:57:d4:28:48:af:2b:a1:e2:
f2:fe:a7:16:9e:5a:93:0f:d4:92:43:36:4f:e3:05:b4:e6:85:
db:93:8e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:51:49 2025 by rpki-client