Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/45d_fB9bt99QK0WPv1DntKKt5RQ.roa
File: 45d_fB9bt99QK0WPv1DntKKt5RQ.roa (raw, json)
Hash identifier: PgnCt66CXnnIeNs8R5itqHRSfxShRCzb5twZPv89w08=
Subject key identifier: E3:97:7F:7C:1F:5B:B7:DF:50:2B:45:8F:BF:50:E7:B4:A2:AD:E5:14
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C777BB91E2B289DF4BE3DD6986594A81A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/45d_fB9bt99QK0WPv1DntKKt5RQ.roa
Signing time: Sun 17 Dec 2023 11:14:06 +0000
ROA not before: Sun 17 Dec 2023 11:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:77:7b:b9:1e:2b:28:9d:f4:be:3d:d6:98:65:94:a8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 17 11:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3977f7c1f5bb7df502b458fbf50e7b4a2ade514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4e:ef:ea:8d:58:3d:93:74:12:19:7e:59:4c:
a6:63:6d:ee:73:d2:8e:b9:85:a1:71:42:d5:cf:07:
08:4f:8d:45:f8:4d:41:57:81:85:be:bd:b7:7a:6f:
4c:33:fb:57:ac:b3:81:17:89:30:56:7f:ba:3a:00:
0c:d4:18:49:81:5e:ae:63:fd:71:a8:84:28:35:c2:
60:d0:5a:18:89:25:85:96:bb:93:20:39:a7:2f:af:
53:65:c0:81:fa:78:2b:5c:65:92:3e:5c:8e:04:46:
aa:43:60:be:97:d4:3e:b6:0d:77:12:c4:6d:97:69:
6a:e4:40:ba:9e:0d:d4:0f:cc:fe:dc:c6:98:16:59:
35:1d:12:18:60:b4:22:58:32:59:01:0f:32:3e:d9:
90:3f:6f:c9:75:aa:c1:a2:32:75:1e:20:77:63:0f:
f9:67:67:73:66:20:a2:30:71:f7:28:a5:5c:b4:5d:
99:4b:cc:f2:a0:65:04:bb:5d:81:c4:82:3c:fa:da:
69:36:36:03:93:02:f1:0b:9d:c1:03:1f:81:3d:51:
05:63:83:09:7f:31:03:4b:9c:b9:e5:86:37:92:a2:
c1:c1:90:7d:80:fd:ba:a5:b2:03:4e:f8:50:e3:12:
6b:d6:11:40:2e:51:65:de:d2:59:ed:d7:96:bc:10:
b1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:97:7F:7C:1F:5B:B7:DF:50:2B:45:8F:BF:50:E7:B4:A2:AD:E5:14
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/45d_fB9bt99QK0WPv1DntKKt5RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:4e:84:c1:11:86:01:d3:1f:4a:3b:1f:8d:34:d1:ba:df:58:
92:1d:55:1b:1a:56:57:62:ec:a4:98:f5:ad:97:7a:28:ad:1a:
63:0e:d8:81:5f:06:8a:e8:34:9a:53:7d:24:be:9e:13:68:99:
72:a0:42:70:4d:d7:b6:65:e4:7c:3c:aa:7c:c9:d7:dc:9e:1f:
c9:fa:f4:39:55:9a:5e:31:ad:e6:74:de:71:26:18:29:2d:bc:
9e:e7:5b:28:6d:85:5d:db:2e:ba:db:c1:8f:40:1e:00:10:fe:
73:0c:6e:02:fd:da:90:3a:ad:e0:e1:03:75:c1:92:0f:09:82:
1f:fa:d5:93:77:7c:b0:01:a9:0f:8f:36:53:1a:54:e9:01:a9:
85:2e:80:12:59:aa:42:dd:c8:a8:e8:5d:0b:4d:32:d3:a4:de:
eb:23:33:5a:43:d3:f0:ef:37:66:a5:79:1a:3b:74:cb:09:82:
ed:b7:9d:56:fd:fe:92:a0:c0:c1:e4:64:43:e8:10:c6:dc:8b:
f4:a1:51:42:d2:8e:71:27:8e:87:d9:bc:f4:f0:b6:13:bb:9d:
49:ef:f4:4e:c3:25:08:01:33:db:b3:9f:a9:d5:db:2f:d0:69:
c8:2b:2e:bd:da:6c:20:a2:2e:50:4a:d5:73:05:83:ce:24:e6:
9c:13:c9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:31:11 2025 by rpki-client