Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tyDtYjIyDG7htI_g1HnI6ozzU7Q.roa
File: tyDtYjIyDG7htI_g1HnI6ozzU7Q.roa (raw, json)
Hash identifier: QZEVgbYUAegqtkG4Lo8tQJqVVX+f4Q6eXq6s6PYsIZE=
Subject key identifier: B7:20:ED:62:32:32:0C:6E:E1:B4:8F:E0:D4:79:C8:EA:8C:F3:53:B4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDF8CB11BEAE53F439E0CDE35B7AD13A1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tyDtYjIyDG7htI_g1HnI6ozzU7Q.roa
Signing time: Fri 17 Nov 2023 23:10:21 +0000
ROA not before: Fri 17 Nov 2023 23:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:df:8c:b1:1b:ea:e5:3f:43:9e:0c:de:35:b7:ad:13:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 23:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b720ed6232320c6ee1b48fe0d479c8ea8cf353b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:47:97:de:a9:65:82:19:23:c6:05:aa:20:
02:27:f1:7e:04:11:75:d4:4d:67:b2:f1:1f:c0:66:
5b:63:19:7b:3f:60:6b:d7:ca:bc:fb:d4:0e:f9:30:
9c:d7:e0:d3:c8:22:82:1d:ed:0a:32:ec:a2:ee:65:
fa:f6:2e:e6:9a:38:5c:83:24:b1:55:16:18:7b:4a:
3e:05:e3:a5:11:49:b2:5c:f6:74:f6:c1:aa:22:6a:
74:97:da:12:bd:5e:2a:bf:86:66:da:0a:9c:bb:aa:
b0:23:74:55:d5:f3:9e:40:a3:a6:fe:87:82:f1:5e:
f8:30:24:64:d6:3e:e3:93:62:d7:2e:08:90:46:b3:
97:23:55:ef:74:1e:53:70:d3:14:d6:53:d3:9e:3c:
31:d9:9e:be:88:c8:7c:1e:dc:d0:32:ca:3b:b8:9f:
5c:65:b4:f2:8c:d9:f9:fe:f3:01:a1:96:5f:db:76:
41:eb:e9:b8:80:b2:7d:d7:ca:4a:dc:e0:64:60:9a:
2e:2b:ae:8a:5b:ec:b1:e4:96:11:2d:47:7b:06:4d:
b6:c2:48:3c:c7:69:07:16:49:ac:2d:cf:c6:a1:a8:
e1:b2:22:d3:a0:77:69:9d:ab:d9:37:47:ce:8b:88:
b3:77:a0:e3:26:0e:62:8b:36:72:53:df:46:7d:2c:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:20:ED:62:32:32:0C:6E:E1:B4:8F:E0:D4:79:C8:EA:8C:F3:53:B4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tyDtYjIyDG7htI_g1HnI6ozzU7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:f3:99:af:78:59:93:99:6e:ad:a0:2a:b1:e6:25:76:13:eb:
d5:de:32:5a:f5:8e:e2:02:31:2f:71:6d:2a:f2:88:6b:85:fb:
c9:88:d4:d2:ba:44:3b:86:7c:5d:91:17:d6:52:71:07:20:32:
4c:a0:2c:ca:52:71:91:23:b0:d4:8f:4f:76:7f:5f:af:e4:ff:
20:73:01:77:03:3f:3f:78:58:c6:81:ad:4e:a3:fc:d1:8d:e4:
7d:28:41:4f:ca:ff:4d:ca:19:45:e0:40:ff:62:06:d7:85:e3:
b8:9c:11:77:ce:e8:b9:b8:1f:59:fe:68:2f:bf:16:77:56:db:
88:51:f2:45:54:fd:89:d1:66:89:fe:cf:9d:c9:45:f4:f4:ef:
0d:f5:2d:0d:0d:db:eb:82:63:80:ed:b9:5e:89:40:c2:0e:89:
65:48:34:7d:f0:ed:45:0a:62:da:39:41:23:82:e5:bd:ea:b7:
14:3d:bf:85:46:22:ad:c6:b1:ce:93:b8:bd:7e:db:4f:11:68:
c2:31:a2:d0:77:a2:0d:32:6d:b6:a5:fb:f6:06:88:51:da:7b:
c3:94:d9:72:e4:be:ed:b8:54:27:8f:f1:06:44:3a:4e:04:86:
fb:b0:74:f8:80:43:44:77:5e:62:f1:fa:3f:9d:db:60:95:c2:
92:89:fe:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:21:06 2025 by rpki-client