Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6ht1jELTQRFpAPQVAYnid09B_pI.roa
File: 6ht1jELTQRFpAPQVAYnid09B_pI.roa (raw, json)
Hash identifier: f/CeImZ3+LlqUjNM5hG86qcT2aUuAxK/SuFo+TGl/YY=
Subject key identifier: EA:1B:75:8C:42:D3:41:11:69:00:F4:15:01:89:E2:77:4F:41:FE:92
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B06D8A7C5005128D68E0A1CA7DCD1FA45
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6ht1jELTQRFpAPQVAYnid09B_pI.roa
Signing time: Fri 06 Oct 2023 21:15:43 +0000
ROA not before: Fri 06 Oct 2023 21:15:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:06:d8:a7:c5:00:51:28:d6:8e:0a:1c:a7:dc:d1:fa:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 6 21:15:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea1b758c42d341116900f4150189e2774f41fe92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3c:cc:68:8b:b7:29:5f:a3:bd:3e:a7:6a:6b:
11:e7:76:53:ce:c7:4e:5a:a9:c7:88:dc:58:df:33:
b9:b6:2a:0d:ec:56:0b:89:7c:0b:30:6b:0a:4e:b5:
af:f0:0a:12:29:60:00:79:52:34:29:6c:fe:5e:14:
68:b1:63:ef:a4:19:78:94:13:8a:5d:3a:85:a0:c6:
ff:09:07:b0:4c:47:55:4c:3d:fd:43:bd:1f:5d:e4:
59:7f:bf:0f:42:e1:e5:ee:67:93:d0:c6:d2:6c:bf:
f1:5d:be:d0:c9:f8:af:42:0c:2b:f6:1c:ea:ff:80:
f4:f1:9b:82:df:00:cb:d2:4c:66:77:a0:19:30:09:
4a:f3:b8:08:b7:f5:85:fd:3b:66:57:d6:29:1a:5e:
b9:4f:34:a3:ef:38:17:69:20:e8:d2:83:a0:a6:df:
d8:eb:ce:94:8f:00:94:45:08:dc:fa:51:ef:ae:74:
bf:77:06:b9:b3:35:8c:ce:d5:d3:56:68:2f:18:49:
1d:a3:1b:f4:04:89:f7:3c:51:d5:c8:18:e9:e3:1e:
45:41:41:6e:0d:05:1b:33:77:8f:26:57:c3:e8:8f:
46:9a:79:65:a1:42:e4:33:de:32:a3:81:e8:1e:99:
0e:e4:fe:90:04:37:4a:78:b3:0d:71:17:1c:14:46:
4f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1B:75:8C:42:D3:41:11:69:00:F4:15:01:89:E2:77:4F:41:FE:92
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/6ht1jELTQRFpAPQVAYnid09B_pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bf:88:de:43:f8:19:16:52:58:38:51:d7:cf:e6:ff:82:b5:11:
81:1a:20:37:06:91:e3:56:db:1b:5d:2b:c3:ec:6c:9d:75:d6:
36:3e:e8:47:4c:dc:58:d0:4e:d0:1f:3f:79:62:12:de:13:d7:
d8:31:59:c6:46:3b:a0:06:4c:ed:af:b9:44:0c:c2:a1:ad:a5:
e4:76:2d:ba:f6:d5:98:f8:da:b7:aa:c0:fd:f7:6e:36:22:e9:
b5:00:64:9f:6f:d0:ea:e8:c6:dd:f3:8f:22:5b:df:3c:81:99:
98:af:0f:fb:59:5e:2c:69:96:3a:8e:c6:8e:e1:c0:88:37:a7:
40:49:30:23:28:f3:62:5f:0b:93:a4:20:10:96:b1:8c:a0:74:
75:2a:72:3b:a9:eb:32:df:c8:fd:c1:44:a3:1a:56:79:14:19:
12:b0:4a:a1:0e:fa:69:5c:3c:44:51:7b:ae:20:1d:f6:11:01:
fc:d0:24:09:71:95:bd:14:fc:51:d1:a9:51:18:a3:ed:f3:a1:
fe:07:a8:7c:fa:2f:bc:95:0d:39:c3:51:39:22:21:4c:5d:fc:
e8:bc:6b:b5:d1:2c:41:24:3a:3b:ed:78:72:51:67:04:f8:47:
4d:1c:a9:87:aa:b2:d3:13:75:70:36:de:0f:ac:90:7d:66:3b:
68:d9:05:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:09 2025 by rpki-client