Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CdiUZEnfrp3kf90NjCcnHUkjmKg.roa
File: CdiUZEnfrp3kf90NjCcnHUkjmKg.roa (raw, json)
Hash identifier: no0rGzQiMPljpsWzX/3AyAZMAXrpnO1Y7Ci8dvx7lWs=
Subject key identifier: 09:D8:94:64:49:DF:AE:9D:E4:7F:DD:0D:8C:27:27:1D:49:23:98:A8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5B969E632E1480D83110CA501543D142
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CdiUZEnfrp3kf90NjCcnHUkjmKg.roa
Signing time: Tue 12 Dec 2023 01:14:06 +0000
ROA not before: Tue 12 Dec 2023 01:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5b:96:9e:63:2e:14:80:d8:31:10:ca:50:15:43:d1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 01:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09d8946449dfae9de47fdd0d8c27271d492398a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:9e:bf:13:b1:2e:42:41:b3:4a:43:b9:77:
87:84:9c:ab:fa:48:2f:1d:31:be:80:a2:e7:d8:a9:
6b:6a:b9:a0:3c:54:bb:89:51:f3:f5:93:7c:a6:29:
98:c8:4f:7f:69:c4:99:43:7e:04:5b:bb:4f:99:cc:
cc:a3:72:42:a6:83:10:89:2d:a1:ab:d9:56:92:e5:
00:32:88:19:d2:c6:44:26:15:ca:2c:f8:ee:ed:7b:
61:16:f2:97:a8:55:bf:e5:f4:f5:2d:39:bf:a4:a7:
0f:b7:0b:8b:37:4c:90:fa:22:c1:72:e7:db:44:f0:
2c:9f:6e:39:36:24:2a:68:3d:3b:e6:6d:3c:56:53:
ec:35:c0:f0:82:65:55:75:79:f3:9e:8f:84:99:44:
af:13:ea:59:14:86:29:e5:67:ac:1d:e9:61:31:70:
2e:38:60:16:a0:9d:b6:a7:62:58:f1:b0:7a:2c:b6:
43:50:c5:32:20:ad:45:39:51:1b:63:9f:14:d6:d1:
8a:81:eb:30:ee:14:ef:08:fe:1b:9d:f7:34:65:6d:
4b:de:f9:89:d4:4a:b6:6e:ef:76:93:2a:97:24:25:
f1:06:b0:63:b2:88:4f:2e:2b:1f:1b:8e:4e:fc:60:
8c:26:fa:8f:19:1c:95:d6:d0:1d:ed:e9:32:16:70:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D8:94:64:49:DF:AE:9D:E4:7F:DD:0D:8C:27:27:1D:49:23:98:A8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CdiUZEnfrp3kf90NjCcnHUkjmKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:38:95:9d:53:03:9a:42:27:85:b7:0d:a6:40:9e:5e:22:98:
1d:fc:4d:7f:65:c3:6d:40:f0:71:58:43:f4:74:41:cd:43:53:
ea:2c:c3:ce:1d:23:70:a2:2d:55:7d:bd:ff:f0:06:b3:c2:50:
e4:24:12:1b:c7:64:ca:fe:e9:c2:31:36:b7:3c:dc:9f:df:3e:
28:d8:de:2d:d1:0c:fd:72:cf:e0:f6:b3:4b:1e:3b:3f:30:70:
56:4c:25:b8:e0:73:62:2f:cc:a0:8f:af:95:0b:b7:ec:c6:22:
fa:f5:2a:4e:01:27:de:d0:ad:91:55:aa:f9:15:e2:79:27:8e:
85:6c:d8:7b:54:33:15:11:00:d6:7a:e8:64:35:dc:db:aa:44:
8c:fa:9a:7e:16:81:07:f8:4c:d0:1e:0c:4a:f8:b8:f6:a3:c5:
1c:3d:58:0a:38:ac:62:88:6a:58:94:6a:ad:f6:16:e2:68:51:
ea:c9:52:e3:db:bc:a3:2b:44:ee:56:13:7d:c2:21:1a:d5:6d:
b5:89:ec:80:75:f1:3f:a9:bf:99:4e:1a:bd:58:26:50:14:55:
3e:a1:bd:1d:b0:73:0f:b1:c8:32:dc:e1:b5:ad:d5:47:41:14:
8c:52:84:2c:c8:06:82:0c:4f:67:69:ac:bf:55:a6:08:8a:f3:
4d:ef:8d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:46:42 2025 by rpki-client