Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/59FDR6c6x9CcqljnP3ffwAB4b6Y.roa
File: 59FDR6c6x9CcqljnP3ffwAB4b6Y.roa (raw, json)
Hash identifier: iy+LljpP18MPvlIQtDo+U4hUooi6hl9LBxEUiDoI00w=
Subject key identifier: E7:D1:43:47:A7:3A:C7:D0:9C:AA:58:E7:3F:77:DF:C0:00:78:6F:A6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBB7FD0060B07E56E6918895746D21B82
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/59FDR6c6x9CcqljnP3ffwAB4b6Y.roa
Signing time: Fri 10 Nov 2023 23:09:57 +0000
ROA not before: Fri 10 Nov 2023 23:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bb:7f:d0:06:0b:07:e5:6e:69:18:89:57:46:d2:1b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 23:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7d14347a73ac7d09caa58e73f77dfc000786fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:de:83:9e:30:17:28:eb:31:24:46:73:cd:a4:
80:33:83:3c:81:83:1f:67:a2:0c:5f:a0:87:12:74:
ab:09:4f:2e:38:33:21:7a:92:53:02:ab:69:94:0e:
9a:64:d9:a3:0f:52:64:85:30:e0:c2:da:0c:97:3d:
88:a1:f0:c5:92:3b:53:e0:32:35:f5:01:59:b5:a3:
66:17:6b:4a:83:c2:09:6d:c5:f9:54:72:9a:9d:53:
ea:e5:48:1b:99:89:c9:e8:5e:a4:6d:71:7c:62:80:
e7:c6:f7:b2:b0:d7:18:aa:09:37:1c:ce:2e:ae:40:
a5:14:ba:b0:37:48:5e:4d:3e:45:9b:39:3c:36:e3:
2d:da:aa:fc:ee:02:21:82:64:52:03:39:d0:ab:25:
fc:ce:d1:35:c7:0c:eb:14:6e:b2:44:58:cf:7a:bd:
0c:35:45:da:ac:a0:46:53:ef:e5:a7:5f:94:d5:0d:
9a:39:f1:c7:f9:a8:37:51:80:55:90:79:22:c2:b8:
1b:60:c2:ea:25:eb:32:f3:9f:28:b2:79:c2:29:6a:
77:d5:3a:9a:a8:95:07:16:49:14:ed:2c:22:d4:33:
1a:15:c4:75:fc:a6:4e:ca:da:ef:0a:06:6d:84:a5:
d1:8e:f6:3b:8c:62:d9:6e:48:60:f9:cc:64:0c:16:
da:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D1:43:47:A7:3A:C7:D0:9C:AA:58:E7:3F:77:DF:C0:00:78:6F:A6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/59FDR6c6x9CcqljnP3ffwAB4b6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:34:53:b6:52:13:26:cc:92:98:c6:8a:0c:81:a2:1c:70:47:
80:69:0e:a6:b2:cd:fd:ad:18:48:3c:d6:13:24:41:a1:6f:0d:
df:98:28:fe:be:61:0f:54:2a:0c:1c:83:ba:99:b4:b2:7b:d5:
02:e7:c0:22:74:e8:ff:6c:a0:0f:24:5b:79:4b:ee:ea:68:f6:
a8:0d:b4:9b:08:55:3b:98:ee:3b:11:1f:46:4e:58:7c:56:d8:
16:ca:90:5d:7e:47:43:56:42:2b:0d:e7:fb:44:85:38:fd:a4:
07:1b:39:3c:0e:f7:33:57:69:ac:26:3a:e8:cc:28:f7:ef:52:
3d:8c:56:14:76:92:94:00:27:24:55:84:36:fa:64:27:dd:c9:
48:7a:27:b9:88:dd:4c:78:48:fe:7d:3a:0c:99:bd:ce:33:4c:
d3:39:0c:50:02:ba:67:22:0b:72:51:32:24:db:76:fc:12:83:
fe:dc:4e:97:8f:c3:66:7e:51:f7:7a:9c:e2:8b:a9:4b:5a:f0:
a9:b8:73:e1:f7:3e:b2:c3:63:ff:51:9e:39:ce:77:9f:e5:b4:
4c:0b:a4:ff:5f:ee:bd:f4:b2:7a:db:fc:05:0c:93:5e:a4:a8:
f4:c2:82:6a:67:74:ea:d7:27:e0:6f:13:cd:04:27:61:6f:3d:
8b:b6:56:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:54 2025 by rpki-client