Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/93WBbuSK6lvkUVQy63-alM7AgaM.roa
File: 93WBbuSK6lvkUVQy63-alM7AgaM.roa (raw, json)
Hash identifier: ggUsIUv1t4164qQQDnej8xBqTBOcJ4P1d49QwBleEJ4=
Subject key identifier: F7:75:81:6E:E4:8A:EA:5B:E4:51:54:32:EB:7F:9A:94:CE:C0:81:A3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B672CDFF02EE8BC129346A63D21833862
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/93WBbuSK6lvkUVQy63-alM7AgaM.roa
Signing time: Wed 25 Oct 2023 14:11:16 +0000
ROA not before: Wed 25 Oct 2023 14:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:2c:df:f0:2e:e8:bc:12:93:46:a6:3d:21:83:38:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 25 14:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f775816ee48aea5be4515432eb7f9a94cec081a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6d:95:64:1b:87:60:32:5a:cc:47:d3:46:02:
03:d7:49:c7:dd:38:9f:c0:98:ff:34:20:52:a0:78:
eb:aa:e7:84:1c:b8:b9:12:e7:b7:a7:c6:50:f3:29:
94:b0:90:fe:71:d1:4a:f8:8a:10:99:ab:7e:58:6a:
9a:11:f6:86:86:d6:b7:24:67:24:5e:00:4d:6e:84:
44:ec:2d:d3:ed:fb:f4:e6:ef:89:a3:6c:d3:c1:d6:
01:8a:92:c9:68:92:7c:b3:3c:56:d6:44:99:81:df:
1b:0b:73:81:ed:f8:09:30:c1:4f:5e:c2:d4:9a:fb:
5b:2a:f4:22:1f:e7:ac:dc:22:d4:28:b7:96:6c:ca:
ff:e1:fa:3a:23:b7:ff:37:7e:b0:8e:f4:2e:48:e9:
5b:eb:99:4e:6f:03:d9:61:34:e5:4b:d0:92:5c:f4:
e7:d0:04:8b:a7:34:a9:b0:f9:77:e2:12:34:e7:4e:
bb:98:53:de:16:9e:92:01:f9:29:b9:4a:6b:e0:fd:
20:61:9c:cd:4b:50:91:b6:39:e5:24:d3:9f:d2:ca:
dd:35:70:0b:00:09:3e:68:e6:45:0e:30:ae:70:46:
13:e9:e5:0b:80:3a:3b:6f:2b:f2:d3:eb:74:c5:44:
e7:89:5f:78:6f:9a:d7:d1:96:5f:48:f7:59:9c:66:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:75:81:6E:E4:8A:EA:5B:E4:51:54:32:EB:7F:9A:94:CE:C0:81:A3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/93WBbuSK6lvkUVQy63-alM7AgaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:8f:9e:a6:a1:93:f8:69:e8:3a:2f:64:ce:f2:e5:b0:16:d2:
2b:3a:a8:3e:41:11:0c:e2:0b:60:a0:3e:70:01:5f:c3:5c:34:
d3:c5:82:a0:8a:1b:2e:24:75:81:36:32:c5:89:b5:e7:20:2e:
88:af:2a:6b:77:c9:9f:6a:74:8d:7e:5d:74:3e:25:99:71:9c:
89:eb:ba:72:40:f6:66:02:44:57:d0:57:c1:a2:55:0e:3f:f0:
b6:7b:f4:0a:64:d4:83:64:4f:b9:92:de:81:cf:12:c8:37:0b:
8b:91:a0:6e:5f:f8:fb:9d:47:1d:9f:6f:94:fc:5b:e8:63:7c:
39:c7:06:04:30:86:1a:1b:28:40:62:04:a5:08:d8:e8:0e:bc:
96:7a:74:10:cf:25:01:ee:71:88:89:1c:21:d2:85:6c:b5:7c:
12:3e:b6:73:3b:dc:10:4c:72:5d:30:91:a0:82:f0:b6:80:60:
6c:bb:f4:d1:32:2a:09:52:00:3b:00:e2:d0:b8:4a:e0:87:f2:
39:e1:45:a5:80:f8:52:36:38:b5:8f:67:ff:6d:9b:ad:ff:96:
bd:82:21:8b:48:85:d6:97:3c:e3:ad:3d:fa:2e:91:79:e7:cf:
5a:74:49:e7:8c:f1:4b:b3:aa:c0:e1:5e:38:2c:c6:84:fd:ec:
e2:c7:ff:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:38:48 2025 by rpki-client