Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/seqA6hSdRVT4FcRWS2ddpTuRXUc.roa
File: seqA6hSdRVT4FcRWS2ddpTuRXUc.roa (raw, json)
Hash identifier: aIC013w8cvu11kE2wKa4BEld+xlSUe2Vsm5JyXkwDUc=
Subject key identifier: B1:EA:80:EA:14:9D:45:54:F8:15:C4:56:4B:67:5D:A5:3B:91:5D:47
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2DA33BDC8FF55EAF00F8233488899EAE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/seqA6hSdRVT4FcRWS2ddpTuRXUc.roa
Signing time: Sun 03 Dec 2023 03:05:21 +0000
ROA not before: Sun 03 Dec 2023 03:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:2da2:8283/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2d:a3:3b:dc:8f:f5:5e:af:00:f8:23:34:88:89:9e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 03:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1ea80ea149d4554f815c4564b675da53b915d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4c:60:67:71:07:13:68:ac:f5:04:aa:1b:94:
90:ac:78:dc:84:3c:56:a6:0b:1f:a4:a3:b0:80:67:
8f:49:49:bc:70:35:b9:ef:ce:8c:c7:82:d3:0b:1b:
ba:ce:d9:94:c1:37:b1:6a:eb:08:59:ea:ba:88:a3:
11:43:51:a0:1c:78:4a:90:04:38:f1:2e:11:a8:da:
3e:0b:2d:b9:06:46:85:7c:b5:ba:8d:38:f4:a9:91:
2b:34:04:63:68:9b:89:9f:5b:48:5b:f9:97:86:ec:
ab:0c:45:03:57:1c:86:94:df:f3:49:e8:3e:71:fe:
a8:7c:8f:5b:7d:23:c5:9b:2f:a8:fb:21:19:f8:b8:
11:28:07:d1:94:68:4a:67:aa:4b:b5:55:9b:d0:a8:
29:53:e4:05:0a:24:d3:d0:3d:ad:82:ae:bd:15:e7:
90:07:70:91:e4:9c:23:6a:a1:e1:18:e6:e5:86:bd:
28:d0:e6:72:ca:94:f2:59:5e:19:ec:79:94:05:f4:
0e:91:e7:0f:ea:bf:23:52:62:55:b4:ba:a4:d0:d6:
bc:67:56:65:fd:67:b7:cf:95:ef:a9:ea:06:c6:7d:
5d:a5:3b:15:d2:b0:76:da:e7:92:5a:63:4c:32:47:
2e:02:8d:95:dc:7f:aa:44:2a:b1:af:a4:7a:b0:5f:
a7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EA:80:EA:14:9D:45:54:F8:15:C4:56:4B:67:5D:A5:3B:91:5D:47
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/seqA6hSdRVT4FcRWS2ddpTuRXUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c7:62:c3:77:79:a9:40:ed:71:be:ec:89:29:3e:05:e6:59:aa:
03:33:e4:68:83:3d:d5:f2:4f:47:55:ee:75:ca:b4:9f:65:27:
6e:63:88:94:77:39:7f:aa:ae:da:bf:c9:50:02:0f:e9:74:6b:
2d:74:a4:db:56:23:50:c8:1e:27:6c:c4:ab:b9:99:96:bc:86:
2f:3c:d3:74:4b:76:91:c4:e6:da:78:8a:5b:8a:3d:f2:99:b3:
d6:26:d6:3c:ca:6c:21:d6:15:93:ad:84:67:0b:db:3a:fd:76:
68:29:8d:0a:7f:0c:8d:83:de:80:86:54:2d:69:be:2d:b5:67:
03:51:1f:30:5a:09:fa:cd:22:48:ee:a2:05:c9:05:d5:bd:06:
fe:30:db:69:77:14:2e:81:f2:cd:6d:53:5d:87:b6:7b:ca:03:
88:7a:64:42:15:d2:3a:de:92:20:11:10:3e:98:98:89:28:06:
8d:53:74:67:54:e5:bf:99:5d:5f:84:d2:5e:ed:cf:3c:70:6d:
1f:ae:9e:36:13:f8:ff:6f:20:1f:88:f3:91:d2:4f:45:15:68:
00:af:70:4e:25:7b:87:40:86:98:9e:e6:fb:47:9a:f5:94:f3:
b0:6b:17:76:7f:ff:c3:bb:de:7b:8f:1f:d6:82:e3:b8:9e:0b:
4e:16:c6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:49:02 2025 by rpki-client