Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v3oGkhoEwE-0rN0D_engTlR59GM.roa
File: v3oGkhoEwE-0rN0D_engTlR59GM.roa (raw, json)
Hash identifier: 67tHiCgdgJl+6DHSMbs0w+60TpvBsGHUZbl3poCm27I=
Subject key identifier: BF:7A:06:92:1A:04:C0:4F:B4:AC:DD:03:FD:E9:E0:4E:54:79:F4:63
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1B6833E6B860131E46577EE7AF60059A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v3oGkhoEwE-0rN0D_engTlR59GM.roa
Signing time: Tue 10 Oct 2023 21:04:55 +0000
ROA not before: Tue 10 Oct 2023 21:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:1b67:8ee7/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1b:68:33:e6:b8:60:13:1e:46:57:7e:e7:af:60:05:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 21:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf7a06921a04c04fb4acdd03fde9e04e5479f463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:b3:9b:c7:ea:45:64:e9:27:46:2c:77:b6:
31:62:0a:5f:ef:53:84:83:63:99:d4:8e:9a:7d:7f:
f4:a7:28:0e:bb:95:52:00:f9:ab:1b:66:51:ee:1d:
88:6e:ef:28:36:5b:4c:f3:f2:28:d5:ca:d7:cb:06:
59:25:2b:9b:59:c5:f6:da:be:21:48:5c:1f:e3:6e:
f1:ac:7b:c6:8c:b0:07:bc:29:99:ee:e9:8e:95:2d:
07:6a:8a:9b:76:75:d4:a3:5e:48:26:b6:22:1b:75:
a0:8a:d6:4b:8a:6e:f9:b5:be:21:c8:45:20:5e:c8:
11:3f:91:24:f5:ac:8e:bc:42:80:c3:0d:93:5b:85:
bb:95:94:0a:bd:e7:90:22:f6:93:fb:6b:0c:32:4b:
fc:d6:85:b6:c3:2e:fc:93:2f:7c:a4:8f:0b:f1:9c:
2f:69:96:75:62:ad:ba:ca:5f:5f:5c:4b:cc:2b:b6:
36:9f:89:5b:1f:d1:ae:c0:ce:f2:7f:3b:88:b2:27:
cd:22:43:44:a3:2d:e8:2e:0a:f0:04:60:ba:e5:f5:
c4:06:83:ae:87:2f:91:05:12:35:31:e2:40:ed:2b:
ea:d1:72:e0:5d:27:31:d9:de:9e:52:78:75:db:07:
88:89:6f:6e:bb:b0:6a:0b:9c:fb:5b:fb:3f:9d:de:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7A:06:92:1A:04:C0:4F:B4:AC:DD:03:FD:E9:E0:4E:54:79:F4:63
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v3oGkhoEwE-0rN0D_engTlR59GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:c9:fb:26:c5:98:1b:73:b0:a8:92:c2:3a:9b:47:b8:09:6c:
7b:c0:0e:fb:db:f2:f3:3a:3e:c9:90:fc:46:eb:25:fd:73:81:
47:9c:df:73:14:39:8a:5b:28:d8:cd:59:41:d7:8b:02:c5:d6:
7a:df:e6:d4:f5:ef:0a:3c:d5:d0:e8:5c:5e:2c:11:30:0c:b3:
93:30:f4:a1:1e:23:c3:4f:d3:7c:b1:4f:41:55:10:1b:05:dd:
a3:a6:d0:77:e1:9c:f2:6f:85:d2:33:46:df:3e:2c:02:40:a2:
38:79:68:70:a2:a4:22:13:61:ba:28:03:27:fc:bc:00:9f:f5:
6e:e0:3d:9f:7f:4d:e2:f9:c2:1c:ea:c8:a2:88:0b:08:50:75:
2a:da:4b:61:9a:57:d2:74:3c:3a:f6:a6:e1:3a:a6:26:72:72:
c2:14:44:88:d6:c1:c3:53:d6:a4:c8:36:27:04:46:06:5a:23:
0e:7a:53:d7:ee:71:3f:73:04:c3:c4:8f:aa:e5:21:6f:5a:a8:
77:61:f4:3a:32:5c:46:0f:03:13:09:1a:9d:a9:5f:7e:aa:1c:
ed:76:22:9c:2c:b5:2c:d8:ff:7a:05:35:c1:43:a3:46:31:18:
95:f9:4b:87:8e:7f:db:ff:9c:f6:9b:4a:e6:c1:d5:d9:a5:6b:
2d:4a:2b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:49:05 2025 by rpki-client