Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0B9sn7FEIn54Mp6gax77RArH03A.roa
File: 0B9sn7FEIn54Mp6gax77RArH03A.roa (raw, json)
Hash identifier: uTyNn8Vhs/t+4zkywNYElHkDgnGhKQSP92oYOKWigs0=
Subject key identifier: D0:1F:6C:9F:B1:44:22:7E:78:32:9E:A0:6B:1E:FB:44:0A:C7:D3:70
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF574234B60A36623C6AF87797DC2AEFA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0B9sn7FEIn54Mp6gax77RArH03A.roa
Signing time: Tue 03 Oct 2023 12:12:23 +0000
ROA not before: Tue 03 Oct 2023 12:12:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:74:23:4b:60:a3:66:23:c6:af:87:79:7d:c2:ae:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 3 12:12:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d01f6c9fb144227e78329ea06b1efb440ac7d370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d5:c0:39:af:b2:99:cb:2a:c4:94:06:50:07:
93:43:33:8d:90:58:8a:e8:15:84:19:cb:59:d2:fa:
bb:ad:6b:41:7a:2d:7c:fa:68:16:28:67:30:63:0d:
3d:75:85:31:0b:d8:8e:49:e4:db:d4:26:b3:c9:ce:
a1:81:78:25:75:53:af:1e:81:9f:f6:84:c6:77:08:
8a:a0:8f:06:5b:79:d5:04:8e:af:37:90:42:43:2c:
7b:c0:a1:54:10:e3:c6:64:60:94:3d:80:73:bf:5c:
5c:7b:97:59:31:5f:64:a3:80:71:c5:b9:ab:b3:d1:
ad:98:95:b6:6c:f5:19:c8:62:87:a5:04:58:cb:81:
86:61:82:9d:b1:de:69:9d:70:6b:66:79:d6:df:e5:
26:f5:3b:27:9a:ed:7e:ac:c8:63:52:2b:06:36:f7:
0e:68:c1:29:2f:7a:2b:49:0f:3d:34:a2:90:da:6b:
de:14:dc:31:23:e2:e2:6c:d7:96:85:a2:d7:bf:e5:
3f:8e:bf:85:da:cf:29:69:37:4d:a0:08:bd:19:bf:
28:a8:fb:c0:b2:de:56:49:99:4b:bd:99:d3:28:95:
26:94:7f:a6:bf:61:9f:65:2e:2f:d6:b5:ec:63:38:
f5:5a:90:af:9c:7f:39:19:7b:b9:bd:fc:c5:95:cb:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1F:6C:9F:B1:44:22:7E:78:32:9E:A0:6B:1E:FB:44:0A:C7:D3:70
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0B9sn7FEIn54Mp6gax77RArH03A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:a4:64:53:ca:e9:7d:9e:7f:ab:2e:e8:2d:76:e3:2e:0a:e6:
ee:05:7a:f9:94:c1:10:22:da:30:60:00:b8:ee:62:73:c2:c7:
4b:87:70:af:0e:62:fd:da:03:f3:cc:78:f7:9c:e5:c8:85:55:
e7:3c:e5:d0:97:84:f5:61:ae:ef:b9:27:f9:49:aa:1d:7d:6b:
8f:f6:b0:ae:a0:65:69:19:61:e6:27:bc:21:ff:e2:6a:70:96:
e5:dc:34:0b:fa:47:70:d2:76:38:e8:c8:79:5a:23:ef:6d:8b:
03:55:37:9f:00:3b:e6:5d:69:e4:b9:ec:d9:e3:c4:b4:d5:5c:
63:eb:22:50:cf:eb:cb:cc:23:01:ba:d6:8a:36:63:de:16:8e:
f6:70:54:9d:86:dd:5d:98:ab:82:72:eb:1b:73:9e:f8:e3:b6:
9a:36:3c:88:90:1d:f4:70:85:55:de:da:80:c6:24:82:e2:0f:
fe:6c:a8:46:4f:75:41:f8:5c:ce:5e:e2:4d:d2:c6:b4:0d:51:
2b:8e:55:dc:b5:f7:e2:f2:65:58:cc:1c:8f:3b:4a:51:9f:d0:
00:33:e4:47:14:cf:cd:68:31:54:54:83:b9:e4:87:8d:86:c3:
44:81:cb:31:16:a8:65:2c:6e:e0:bc:44:0d:77:01:d3:3e:47:
6b:fa:43:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:11:56 2025 by rpki-client