Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9gbwD7sZoiz2QVkc-kNFUwDEHgc.roa
File: 9gbwD7sZoiz2QVkc-kNFUwDEHgc.roa (raw, json)
Hash identifier: KBXfwoQ0i8foldSLJdgeh3RbphAzWq+OpzKE52rsp3k=
Subject key identifier: F6:06:F0:0F:BB:19:A2:2C:F6:41:59:1C:FA:43:45:53:00:C4:1E:07
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB2EC5F5F7E6B2AB6833AEA3105B65C59
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9gbwD7sZoiz2QVkc-kNFUwDEHgc.roa
Signing time: Thu 09 Nov 2023 07:11:57 +0000
ROA not before: Thu 09 Nov 2023 07:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b2:ec:5f:5f:7e:6b:2a:b6:83:3a:ea:31:05:b6:5c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 07:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f606f00fbb19a22cf641591cfa43455300c41e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:49:c4:09:58:0b:78:56:f0:f8:4d:d6:80:
80:1f:57:f3:04:56:35:e7:1c:8c:a8:4d:29:70:55:
b4:cd:43:13:e6:63:32:e9:94:46:a1:1f:3e:f9:01:
92:8f:e2:e2:01:85:a1:d7:f5:9b:a5:78:da:e1:f3:
22:88:c0:a8:be:22:74:aa:d6:b8:76:91:c8:0f:a8:
5e:ba:3c:4f:bb:35:45:0f:b3:bf:91:da:24:47:27:
ed:36:36:71:00:7f:7c:96:8a:f7:22:82:87:19:86:
25:5c:f4:87:ec:b7:60:d2:88:5d:39:f8:eb:72:c4:
44:e5:1c:50:01:a0:7d:4c:4b:5f:ca:7d:11:07:b7:
cf:09:c2:9a:07:e7:1e:ae:ab:79:34:63:cd:39:83:
2c:27:54:cc:f0:ec:9f:0a:72:a5:3e:b5:88:1a:5a:
e3:6e:b5:fe:b2:a8:2d:b3:b3:2e:b7:74:ad:f5:88:
94:ad:05:5f:66:72:ae:11:dd:91:41:07:fa:5e:ac:
b1:ed:8e:d1:59:cc:51:41:da:56:d0:01:9d:e2:37:
53:1e:3b:3d:14:a2:0d:f8:e0:78:02:ae:fd:c2:77:
3e:91:c7:34:ff:6b:9f:80:9d:15:6e:f2:30:84:22:
d1:99:4a:bc:c6:11:71:c5:d4:29:28:78:e8:61:68:
24:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:06:F0:0F:BB:19:A2:2C:F6:41:59:1C:FA:43:45:53:00:C4:1E:07
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9gbwD7sZoiz2QVkc-kNFUwDEHgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:03:7c:ac:39:93:aa:99:8c:0c:85:b4:e7:0c:3b:dd:f7:f1:
27:c4:07:4a:4c:96:97:65:98:ac:62:f8:d5:63:9e:58:9d:8f:
96:cb:51:24:2a:34:6e:ce:bb:b1:30:ac:95:19:56:18:6f:aa:
a3:53:1e:89:55:de:27:8c:9c:c5:8c:7b:ba:4b:cc:53:09:7d:
bb:45:05:3d:7b:cf:1f:ad:d1:43:1a:47:37:1b:99:72:c5:90:
7a:5d:68:a6:42:8b:2c:a7:6a:00:b8:77:30:35:89:af:36:2b:
7c:0f:2b:d9:76:e1:1a:66:08:a6:3a:2c:35:1b:92:2f:4c:96:
74:70:75:8d:7b:c8:e9:f5:72:53:60:ba:8d:90:e7:3d:9a:c1:
5c:9a:5b:23:10:b3:c3:1a:48:f8:c4:8a:bf:81:83:71:5f:1e:
41:3d:a3:d7:b1:d2:97:80:b2:84:78:d1:2d:26:cd:b3:f2:40:
11:5c:52:b1:1d:33:a6:85:a9:fc:18:25:29:7c:c5:51:12:8b:
41:92:09:18:ec:d1:ce:25:2a:64:a9:ed:50:c3:68:2c:b3:ea:
c9:81:c2:7b:65:eb:ee:50:49:13:68:4b:f3:db:cf:af:39:24:
f2:d3:3d:2b:68:01:49:4a:aa:69:a0:c4:bd:57:6a:6e:ea:0a:
2a:23:42:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:07:21 2025 by rpki-client