Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wo6jEMHPBszpoDnRfJqcOgJuiR0.roa
File: wo6jEMHPBszpoDnRfJqcOgJuiR0.roa (raw, json)
Hash identifier: vLPogQaurUjCPC4jebP4FwfZBzv17FzgilVRM8tIsU4=
Subject key identifier: C2:8E:A3:10:C1:CF:06:CC:E9:A0:39:D1:7C:9A:9C:3A:02:6E:89:1D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5415C9E2B593F79555420FD1C3DB4A64
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wo6jEMHPBszpoDnRfJqcOgJuiR0.roa
Signing time: Sat 21 Oct 2023 21:13:15 +0000
ROA not before: Sat 21 Oct 2023 21:13:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:54:15:c9:e2:b5:93:f7:95:55:42:0f:d1:c3:db:4a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 21:13:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c28ea310c1cf06cce9a039d17c9a9c3a026e891d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:a0:cf:5f:fc:04:9f:95:c6:ec:0f:8c:e3:
1b:c9:0e:0d:89:3b:a4:c7:5a:04:45:09:d0:cb:27:
6a:28:53:4d:69:0a:41:7d:f6:19:cb:cb:ea:b7:9d:
ae:de:86:12:c0:fd:8e:3d:a1:d9:6f:80:5a:ef:99:
d5:94:b7:c4:ec:25:07:4a:62:05:41:8b:31:45:f8:
dc:92:0a:00:51:6d:4b:3a:c8:4a:63:30:81:57:19:
32:ff:b3:7d:cd:e7:a0:30:0e:8a:61:0f:e4:26:fe:
60:83:d2:f6:51:cc:8b:1a:6c:92:ae:8a:15:6d:58:
f5:f2:19:34:ad:5f:1a:3c:7e:90:05:38:de:b3:a8:
75:c6:6a:8c:1a:1a:8e:90:e2:3d:a1:bc:a2:41:93:
ac:d0:aa:84:fb:ed:1d:08:79:70:79:44:f4:03:af:
9f:8b:f8:36:21:25:15:d2:fc:24:bc:79:9e:06:90:
c6:c8:af:f0:41:fe:be:50:2d:a8:98:98:e9:49:e6:
7d:8f:99:9a:88:1c:62:92:32:09:cf:79:bd:26:ac:
f5:ab:4c:2c:d5:0a:c9:60:b6:57:8f:57:26:13:e0:
62:ad:bd:49:58:f6:13:d3:bc:2d:54:55:55:f8:eb:
60:5d:9f:86:a3:34:bf:30:7b:f0:79:e8:5d:5f:29:
ff:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8E:A3:10:C1:CF:06:CC:E9:A0:39:D1:7C:9A:9C:3A:02:6E:89:1D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/wo6jEMHPBszpoDnRfJqcOgJuiR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:9f:18:81:e5:b8:a9:df:23:af:40:1b:e7:61:cb:97:2c:94:
86:b9:b1:05:b1:07:ae:0d:13:6c:7c:3a:9f:8b:9f:2b:6c:79:
a5:a8:8b:45:35:fd:e1:44:04:09:6a:3c:d9:f5:c7:8a:80:27:
7e:28:74:f0:39:2a:14:50:97:c4:a6:e8:37:a5:7b:5d:82:e2:
90:af:24:00:d7:86:cc:27:27:d8:a2:b1:4f:1b:2b:b8:13:ad:
9b:08:5a:0c:d9:ea:c3:f7:77:5f:1d:e8:3e:10:05:33:20:78:
f5:7f:94:4e:0c:99:cb:03:d0:e3:ed:56:62:97:7c:0e:8f:ae:
e0:b1:dd:1a:51:20:be:90:9a:e2:97:87:b2:1a:76:3a:8a:f0:
14:f2:ac:9f:ca:b3:66:60:cf:d5:a9:9c:84:e0:f7:a6:02:76:
51:36:01:94:dd:ed:1a:26:45:93:14:aa:4e:3a:af:b6:ce:a9:
06:6c:cb:cb:3e:90:a7:00:2d:32:10:68:46:5e:a7:d1:e9:68:
48:a0:e4:15:6e:9f:c1:d6:fc:86:c3:1f:78:b1:ef:f4:d3:d9:
44:94:8c:d3:90:ce:9a:c7:1a:21:0a:bb:bb:ec:e7:40:9a:33:
86:b7:95:ba:22:b9:b1:d5:f4:26:dd:d5:da:58:5a:d3:df:d6:
5e:01:9c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 06:53:50 2025 by rpki-client