Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t1YvT2kozcx4orMXWSZWgICkY5A.roa
File: t1YvT2kozcx4orMXWSZWgICkY5A.roa (raw, json)
Hash identifier: 36fX7GEKSKAixngEURM0ggjuJ4pTv+PmY6Ahec/Bgzo=
Subject key identifier: B7:56:2F:4F:69:28:CD:CC:78:A2:B3:17:59:26:56:80:80:A4:63:90
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C8121D0B071626BB27E3F174F76D0450C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t1YvT2kozcx4orMXWSZWgICkY5A.roa
Signing time: Tue 19 Dec 2023 08:12:06 +0000
ROA not before: Tue 19 Dec 2023 08:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:81:21:d0:b0:71:62:6b:b2:7e:3f:17:4f:76:d0:45:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 19 08:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7562f4f6928cdcc78a2b3175926568080a46390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:22:f2:f1:03:8c:64:bf:3d:0c:f9:c1:00:
7a:9c:d9:80:59:b1:f9:1d:ac:90:4e:a7:f1:9a:fc:
cf:fd:8e:94:eb:d5:46:5d:3c:a9:45:17:ed:92:38:
96:02:bc:d1:03:76:44:be:6a:51:d6:4b:a1:43:22:
64:0b:ab:2a:ea:39:31:4a:4e:52:b8:42:d4:82:8c:
d9:49:65:4f:b9:5a:88:f0:9a:1f:be:81:51:4e:7f:
73:15:71:61:39:90:b5:d1:bf:7f:ff:da:64:74:b2:
64:74:90:3a:ef:91:46:42:f8:81:d4:90:5e:27:4a:
c1:ff:f3:5c:0a:5f:dd:7d:f6:96:bb:b7:25:56:6c:
4d:94:ea:8c:0c:72:99:00:17:19:c9:8b:df:1a:6f:
03:40:ef:e8:5b:9f:4d:ec:e0:ac:d6:4a:98:27:db:
5f:1f:5b:8b:ce:e5:9c:1e:74:ad:67:f0:af:58:86:
9c:0f:c2:10:5f:2d:f1:03:8f:fb:4a:8a:c2:c9:4f:
85:d8:a1:d2:74:f8:e2:b6:53:b9:0c:80:e0:ee:01:
b0:20:98:9f:8f:2a:75:57:d1:96:6e:71:e2:ec:da:
2e:51:84:06:b1:7a:c5:bf:69:71:9e:83:94:7f:cd:
8c:50:c8:7c:29:8a:38:4b:56:6b:64:23:0c:46:f3:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:56:2F:4F:69:28:CD:CC:78:A2:B3:17:59:26:56:80:80:A4:63:90
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/t1YvT2kozcx4orMXWSZWgICkY5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:c2:41:cd:fd:8b:1a:70:76:ea:48:9f:e3:3d:70:bf:3b:17:
02:25:7c:9a:9b:f0:6d:d2:fa:92:5a:e0:db:44:6c:71:b9:97:
b1:f8:f0:c9:a3:4d:6f:92:1b:fd:e5:3b:32:3f:4e:aa:31:60:
f6:5c:a5:52:e1:c0:41:a0:9e:73:dd:24:bb:8c:05:48:b7:30:
72:a8:34:f0:d8:9b:d6:b6:bc:5d:c4:85:a4:3a:f8:7e:47:d3:
c5:13:5e:1f:10:92:a8:4a:ae:6e:eb:b8:b8:87:a2:92:bc:05:
bc:c7:b4:6d:da:42:68:1d:2d:ec:d0:f5:01:8e:28:1d:f1:82:
9f:15:62:6f:0f:23:bc:86:25:da:0d:0b:59:2d:96:49:06:b1:
d5:d3:b0:25:17:aa:35:d8:46:7f:c5:c7:e7:1c:60:95:1a:6d:
21:86:04:06:9c:d7:d4:93:c2:88:6c:9e:fd:d4:e8:d9:46:30:
f9:ed:d3:d3:14:88:60:72:58:83:99:e6:41:7a:28:4c:ea:9c:
89:4a:cd:95:ea:40:ab:30:84:02:21:05:89:fb:75:45:5e:72:
7e:e2:30:95:97:f2:4d:24:ac:57:14:b6:40:c0:cf:9c:c4:5f:
a5:c2:3d:6c:d0:0b:00:78:74:2c:ad:c9:b0:08:d8:d0:03:1b:
bc:a5:63:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:55:50 2025 by rpki-client