Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-U6TeAErMDUmJRnePmZ41LJ0j5c.roa
File: 1-U6TeAErMDUmJRnePmZ41LJ0j5c.roa (raw, json)
Hash identifier: k3AgvU7jmbF/weNZpJ7P7Pf1WNGamTIYT/1wzZ9eKOg=
Subject key identifier: F9:4E:93:78:01:2B:30:35:26:25:19:DE:3E:66:78:D4:B2:74:8F:97
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC10F746A2016C511987B096E7294EE06
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-U6TeAErMDUmJRnePmZ41LJ0j5c.roa
Signing time: Sun 12 Nov 2023 01:04:57 +0000
ROA not before: Sun 12 Nov 2023 01:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:c10e:bb78/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c1:0f:74:6a:20:16:c5:11:98:7b:09:6e:72:94:ee:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 01:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f94e9378012b3035262519de3e6678d4b2748f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:77:d0:d5:34:d8:d9:91:92:96:d8:0a:85:
87:4a:cc:6c:4a:3c:25:e0:bc:16:6d:a0:d8:43:78:
03:7e:c2:ed:50:61:65:9a:11:c6:8b:f8:6a:78:f0:
61:fa:9d:e5:92:78:12:57:5e:3b:5f:83:6b:64:22:
5f:34:b6:fc:3c:16:c7:47:b6:a7:ff:fd:a8:b4:fa:
ea:14:10:b7:28:06:e6:6b:44:69:dd:02:16:e2:44:
a1:3e:94:b3:06:0e:79:dd:82:bc:c7:09:a2:01:7d:
3d:18:f5:fd:3d:db:5b:58:67:3b:58:eb:3b:a2:f2:
7f:89:b0:ff:8b:36:49:87:db:21:08:ee:95:60:19:
7f:ea:f9:4f:5c:f3:e9:e6:97:7a:21:89:0a:2b:10:
0b:f9:f9:2e:78:d6:0d:8d:6d:f0:c4:ff:57:f5:cf:
82:46:2b:7c:16:35:ba:96:81:4d:3f:82:f3:41:d2:
8c:d3:fa:69:17:07:eb:a4:0f:a9:77:80:cc:44:44:
ae:da:d8:1a:06:ee:9c:80:8a:6f:3d:03:07:0e:d6:
ba:7d:d6:88:47:88:86:84:1c:51:f2:c0:36:ca:7a:
2a:9e:a8:99:d6:dd:de:2d:05:7a:13:73:cd:cc:13:
82:e1:35:9b:14:f9:50:e9:2a:eb:19:3e:4a:9a:c9:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4E:93:78:01:2B:30:35:26:25:19:DE:3E:66:78:D4:B2:74:8F:97
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-U6TeAErMDUmJRnePmZ41LJ0j5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:a6:d9:c9:7e:2b:ea:5f:ce:13:d2:ae:24:ba:7f:f2:d7:89:
5d:75:41:2b:c6:e3:47:55:e8:09:00:6e:4c:d2:31:44:d1:5d:
7e:92:da:10:67:8f:de:da:36:8a:e2:80:79:b1:3b:65:ff:af:
a5:db:ea:73:c8:ac:1c:bd:89:d5:c8:ee:a0:7a:ad:86:a5:9b:
a8:84:47:d3:2b:88:85:c9:c9:98:e1:c3:0c:3f:18:9d:e6:b2:
e2:5e:5e:43:ff:24:9c:93:57:79:26:4a:5a:e5:26:4b:0f:74:
2c:f4:08:77:19:e7:80:13:d1:8d:ab:0a:d1:7e:42:3b:d1:6d:
aa:2f:c5:44:64:ab:64:fb:8a:71:04:94:b7:fa:28:c9:48:b9:
93:08:d0:a1:d2:61:a1:4f:f2:fc:28:6d:87:f7:db:83:87:9a:
9d:13:85:f0:83:f2:f6:1b:6e:f4:83:a7:f1:88:5f:fb:6f:f5:
7e:2e:49:60:b2:7a:61:40:b2:33:0c:6c:04:1d:ed:b3:6a:1e:
da:12:2b:6e:5f:b1:3a:1f:10:70:e1:1c:71:a9:4d:f4:42:9e:
42:74:61:c8:90:c6:98:d9:df:98:f3:d4:1f:55:9e:0e:ee:5d:
2b:3a:a3:37:1f:df:aa:a6:f0:4f:b3:a4:f1:b9:07:1f:b6:a2:
e8:76:c5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:56:31 2025 by rpki-client