Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/91tcCtnX63BzQdNXesMmtQO6pgw.roa
File: 91tcCtnX63BzQdNXesMmtQO6pgw.roa (raw, json)
Hash identifier: iN4lCLXchRlIUMRZCfk+PJovjwlSxQTiQSE8h1E0ckM=
Subject key identifier: F7:5B:5C:0A:D9:D7:EB:70:73:41:D3:57:7A:C3:26:B5:03:BA:A6:0C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF0F215EDBE099709D16EBAA0CC470EDA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/91tcCtnX63BzQdNXesMmtQO6pgw.roa
Signing time: Mon 02 Oct 2023 15:11:51 +0000
ROA not before: Mon 02 Oct 2023 15:11:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:f2:15:ed:be:09:97:09:d1:6e:ba:a0:cc:47:0e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 15:11:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f75b5c0ad9d7eb707341d3577ac326b503baa60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:28:56:64:d1:54:25:d5:60:a4:ed:c4:35:1b:
fb:9a:e8:80:a7:95:f4:c1:54:88:db:27:b8:0a:7d:
c3:71:d7:fd:be:0f:2d:9d:93:1f:5b:d2:01:0e:09:
69:c1:7c:66:0a:b7:d3:c5:f6:46:35:e8:2d:08:0b:
ca:0e:3c:ca:da:0d:b4:fc:f3:a6:b4:4c:14:59:71:
7a:51:45:0a:e3:fa:fe:3e:ae:35:18:f4:0d:dc:6d:
34:74:79:8e:f3:7a:c4:36:5a:8e:9c:fd:7c:0d:32:
7f:12:21:42:a1:7e:9f:14:d1:9b:7c:a9:94:8d:0a:
5c:ed:3a:35:96:43:c8:dd:3a:bb:16:0b:70:7e:2c:
88:fc:21:48:71:0b:6d:dd:63:91:45:e1:1a:6d:ff:
92:98:93:4a:cc:e8:ea:87:bf:c4:ea:40:52:e9:bb:
38:53:e1:f0:95:9d:63:d8:1f:5b:f1:fa:78:d2:7d:
02:37:29:2a:3a:94:5f:35:70:b4:e2:27:dc:72:0d:
cc:82:a1:3a:db:93:13:7c:2e:fc:02:3e:1e:85:d8:
68:1c:3f:b3:5c:c6:d1:b7:de:5d:99:78:4a:01:50:
ed:96:e2:7e:c7:d2:f3:d8:74:2c:64:e4:33:85:37:
a5:a1:c1:18:2e:c4:f6:10:f1:c0:db:ac:62:e7:f3:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5B:5C:0A:D9:D7:EB:70:73:41:D3:57:7A:C3:26:B5:03:BA:A6:0C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/91tcCtnX63BzQdNXesMmtQO6pgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bd:36:e5:2e:49:3c:d0:c7:6e:64:ec:a5:65:64:a0:64:42:65:
91:77:80:8c:0f:42:e5:b5:53:90:b3:49:e1:66:31:f3:6d:88:
26:78:9c:22:28:9b:33:00:22:dc:3d:76:01:49:f7:e9:85:5f:
6c:cc:79:5d:f8:74:d4:03:fb:b3:10:d9:c8:7b:a9:c5:34:ea:
be:b4:3a:57:59:c3:23:1c:94:a1:d9:96:97:a8:7f:0b:d5:73:
11:2b:06:24:6c:40:fb:84:2b:3a:40:c2:33:6e:e0:1e:1d:5e:
42:36:79:f3:e7:b3:db:48:cc:af:57:6a:38:d3:d1:c9:77:20:
63:f4:d2:54:00:b7:2a:e4:db:1a:63:42:95:02:90:cd:e5:97:
3d:08:92:df:b2:57:60:b0:ca:75:e0:89:8f:4b:8d:3e:09:12:
41:bf:d8:da:4f:b3:36:d2:64:a6:19:55:0e:85:39:6b:9a:b1:
5a:de:69:e5:e6:68:57:42:c5:33:37:12:b1:4e:c0:09:73:a9:
c2:61:5f:b9:15:83:e4:95:68:70:c5:9c:1b:4e:b2:5b:7a:60:
a5:36:81:4d:df:a5:f6:48:d3:28:c7:e9:63:de:d0:5b:28:fa:
10:17:ef:2a:63:02:33:81:7b:bb:05:3d:7d:68:e4:6d:6f:cd:
ea:21:2d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:02:39 2025 by rpki-client