Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P6Ifz6Glq08m40I-YSEmiF1PDnU.roa
File: P6Ifz6Glq08m40I-YSEmiF1PDnU.roa (raw, json)
Hash identifier: fjVRu590d+dNRyWspda08DU/VaVSAQdqYyZa/Zzr7Rw=
Subject key identifier: 3F:A2:1F:CF:A1:A5:AB:4F:26:E3:42:3E:61:21:26:88:5D:4F:0E:75
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD05554CA3D1FD9E80A1FA06F59170F44
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P6Ifz6Glq08m40I-YSEmiF1PDnU.roa
Signing time: Tue 26 Sep 2023 07:12:47 +0000
ROA not before: Tue 26 Sep 2023 07:12:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:55:54:ca:3d:1f:d9:e8:0a:1f:a0:6f:59:17:0f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 07:12:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fa21fcfa1a5ab4f26e3423e612126885d4f0e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:97:2b:7a:5e:bb:65:f6:e0:87:ca:54:18:
84:1e:26:fb:9f:03:18:7b:d4:84:b5:8d:d8:d9:81:
20:04:48:ee:ab:90:2f:31:d5:c2:8d:2d:80:8f:74:
07:00:25:0d:3a:49:f9:e2:28:97:bd:2f:21:7f:e9:
8f:89:62:bc:8e:a0:11:a7:ba:d1:c6:cf:af:16:08:
78:16:77:36:58:78:aa:d3:fe:df:23:74:d1:21:26:
c6:83:bf:68:86:d0:6b:08:f7:f0:1a:02:61:0b:33:
96:ea:cb:e4:15:d5:04:ff:e1:41:6a:5a:0f:4a:a7:
d1:83:db:b2:8e:59:f6:a5:01:b5:c7:a0:dc:62:46:
bb:1d:a3:a8:30:2b:e1:a7:ec:5f:99:ff:43:0c:32:
3e:3f:49:62:42:0d:67:47:6e:7b:bf:2c:0d:a1:f6:
f5:b8:7d:65:70:90:7d:7a:e1:42:5e:5b:11:93:a2:
a9:2e:5e:55:a7:4e:c2:97:cb:9c:e0:36:89:a1:e2:
f3:d4:a3:6d:da:11:f6:23:db:a4:e7:62:49:ec:ea:
6a:6b:ec:53:9e:49:bf:b2:7b:01:6b:77:d6:e0:d3:
b6:06:57:1d:90:3b:33:1a:a2:63:d2:61:56:a8:73:
bc:68:65:f8:52:ee:95:34:06:72:56:8b:e5:84:74:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A2:1F:CF:A1:A5:AB:4F:26:E3:42:3E:61:21:26:88:5D:4F:0E:75
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P6Ifz6Glq08m40I-YSEmiF1PDnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:8d:47:c6:19:65:d8:29:c6:ff:c4:69:ba:13:0f:24:54:ed:
4b:af:fa:57:0d:86:e2:94:86:df:da:85:a6:d0:3c:ba:c6:d3:
94:0b:46:53:f6:9c:75:47:1d:dc:6e:0f:0d:12:0d:c7:c2:20:
e4:f9:c4:a5:08:8e:de:53:4e:ce:a6:ee:50:4b:f5:3b:28:8f:
06:47:2a:27:0c:c0:aa:4c:21:4a:2e:9a:5f:c2:9a:29:17:1b:
de:1b:2e:ce:b1:47:8c:cf:bd:8e:e4:5e:76:ab:ef:c2:c1:c5:
cb:19:cc:b9:ca:c6:9e:4c:cb:dd:d9:c7:95:e9:70:42:b7:20:
7b:92:66:86:13:22:ad:f3:01:f2:8d:f0:c3:59:20:d7:f0:c2:
fc:05:b9:2a:8f:15:9a:c6:e6:6e:02:16:d8:21:f8:36:2f:0f:
97:73:b9:e8:87:60:22:d9:a0:b9:d1:c3:76:a4:04:3f:20:b4:
52:bc:18:70:c2:4e:bb:f5:80:3d:be:cd:a9:14:49:9a:2a:8f:
91:b5:ea:ec:d0:ff:53:0d:e6:ee:8b:72:80:23:88:73:82:e5:
ea:8f:77:76:06:ed:fe:aa:ac:20:01:3e:e8:2c:bf:c3:12:d0:
80:ce:28:b7:b6:e2:58:e4:97:47:bd:c7:ef:b5:29:ef:8e:05:
86:1a:0a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:47:55 2025 by rpki-client