Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-Xw9pVNJIVkUdkRdaiG_dfVY5mM.roa
File: 1-Xw9pVNJIVkUdkRdaiG_dfVY5mM.roa (raw, json)
Hash identifier: XhvT2NxAlKhOZzPzrgxxFiDS3QqSg6ji9aaKuyXAbkk=
Subject key identifier: F9:7C:3D:A5:53:49:21:59:14:76:44:5D:6A:21:BF:75:F5:58:E6:63
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0520494A6952974C99BAB0A306A7C147
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-Xw9pVNJIVkUdkRdaiG_dfVY5mM.roa
Signing time: Fri 06 Oct 2023 13:14:43 +0000
ROA not before: Fri 06 Oct 2023 13:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:20:49:4a:69:52:97:4c:99:ba:b0:a3:06:a7:c1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 6 13:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f97c3da5534921591476445d6a21bf75f558e663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:cb:93:e0:1a:c8:ff:a0:31:73:1c:a4:62:
6a:f5:cc:eb:5a:5c:f4:7f:60:73:2f:3f:fb:d7:7e:
a8:5f:d6:50:cb:ed:b1:b4:da:fc:0e:40:c1:f8:cb:
a9:3c:b9:b4:87:e9:35:fd:d3:99:eb:5b:7c:f3:a4:
f2:3c:40:a4:c3:42:e2:c7:b8:03:3b:cd:7e:6c:34:
df:ae:46:f4:73:74:61:04:27:24:5f:ae:f5:fc:25:
40:ae:e8:a2:cc:42:00:13:c9:95:f7:48:f0:6a:18:
c7:bc:ca:76:63:cc:59:c7:4d:e5:29:24:4f:37:22:
e2:47:7c:c4:e0:fb:f6:04:50:9b:c2:ca:78:62:4d:
8a:c9:75:86:16:5c:ae:84:31:c3:7b:33:80:72:02:
f6:45:a1:32:18:18:8a:08:c5:ba:35:1e:27:83:e2:
68:98:9d:48:10:c9:f7:af:81:51:99:5f:8f:f0:6c:
04:81:6c:ba:74:a7:98:1a:86:2e:2f:16:22:af:84:
15:b9:1d:69:69:cb:9b:94:10:9c:8a:a2:29:cc:b7:
cf:1e:1a:1e:fb:52:eb:3a:43:fd:1a:b1:fe:ed:4d:
57:2a:cb:37:46:14:ae:5d:95:d0:18:d0:1a:36:83:
59:b8:b8:10:8b:50:90:2e:28:0a:7e:fb:17:0f:00:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7C:3D:A5:53:49:21:59:14:76:44:5D:6A:21:BF:75:F5:58:E6:63
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-Xw9pVNJIVkUdkRdaiG_dfVY5mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bc:b6:e7:68:e5:73:5b:f5:d2:17:42:72:4c:0f:3b:3b:ec:46:
18:98:7c:48:fe:3a:57:c9:1f:bf:5b:83:fd:aa:59:60:e5:96:
32:1e:4b:8d:a4:19:3f:16:7d:ac:b3:9f:93:89:8d:48:dc:9a:
ee:59:a6:83:e8:87:cb:2a:05:30:1f:65:cb:02:e7:47:93:f8:
ff:bf:d4:5f:7a:b7:e4:ea:0e:a0:a3:d9:fc:b7:d8:9c:02:e6:
55:97:29:99:09:23:b6:58:bd:a3:48:d2:33:3a:c1:dc:df:db:
98:0b:56:f0:34:44:87:aa:a7:d0:94:a5:a1:c0:cb:5c:1b:e1:
2d:c5:91:62:8c:87:be:fc:34:38:a2:d4:4e:7f:a0:73:a3:cb:
8c:e9:36:b0:e3:be:81:0f:70:d8:6a:71:06:ff:86:30:9c:f5:
fc:ec:24:4d:43:31:4e:d0:23:82:7e:6f:d5:64:2c:3f:93:03:
2f:75:2a:2a:d8:97:9d:57:66:8c:0b:31:5f:12:a6:3f:f0:ba:
16:d5:58:32:7b:13:3a:f4:1f:cd:50:54:ce:ae:30:2f:e3:30:
47:8b:0b:cc:6d:31:b2:5b:4b:29:ec:03:f0:84:57:d5:a0:ba:
48:5f:51:2e:1c:c6:3f:b6:f3:30:15:0d:e4:df:88:6f:54:49:
ed:c6:b0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:59:21 2025 by rpki-client