Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RgTpHdCSW12NtWXFbhXPAn7S4pc.roa
File: RgTpHdCSW12NtWXFbhXPAn7S4pc.roa (raw, json)
Hash identifier: aDO/xBPV66QKTgAv1hjwjeKRvLlHOxT146oN5BYD4Ds=
Subject key identifier: 46:04:E9:1D:D0:92:5B:5D:8D:B5:65:C5:6E:15:CF:02:7E:D2:E2:97
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBE81C3B5790645366D6282307160CB0A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RgTpHdCSW12NtWXFbhXPAn7S4pc.roa
Signing time: Sat 11 Nov 2023 13:10:57 +0000
ROA not before: Sat 11 Nov 2023 13:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:be:81:c3:b5:79:06:45:36:6d:62:82:30:71:60:cb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 11 13:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4604e91dd0925b5d8db565c56e15cf027ed2e297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:78:3d:a6:bb:3d:4e:10:f9:45:eb:53:c2:5d:
fa:1f:4b:5d:3f:59:11:6b:7a:b2:23:59:b4:72:b2:
74:77:e3:05:7e:ad:3f:c3:7a:90:e7:9d:a8:35:08:
f4:1e:63:78:33:0b:56:4c:e3:86:d0:e7:47:c5:44:
93:ba:a9:1b:f8:ee:b0:69:92:a5:7e:77:b6:a1:0a:
03:7f:4c:4d:1f:e9:42:7b:52:f1:bb:0c:b3:06:29:
dd:17:3b:98:1c:1f:66:64:90:18:7e:3f:32:6e:01:
08:a0:ee:4e:7f:d9:7b:13:85:78:bb:e2:43:59:4a:
97:d4:ac:c5:dd:98:d4:91:99:b0:39:2a:56:90:4b:
60:f9:ea:f8:a1:be:93:6d:1d:c6:f3:ee:92:ce:a4:
a2:e3:df:f4:b0:ab:30:3c:1b:b5:11:5e:4d:ef:d0:
61:ee:e0:87:34:11:8d:0f:12:f3:e1:01:ed:bd:d0:
ff:ad:d1:71:fb:a4:76:e5:2f:47:33:7c:b7:6f:70:
08:7d:0a:d8:d9:0a:f3:2e:77:a1:bb:39:97:07:12:
93:84:74:1e:70:ad:ae:06:53:98:87:9a:e1:12:0e:
91:e8:1d:b6:1c:96:a4:e4:6e:62:aa:9f:40:b2:2b:
9a:0b:e8:c2:1a:1a:28:31:d1:64:94:ba:9f:5a:30:
07:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:04:E9:1D:D0:92:5B:5D:8D:B5:65:C5:6E:15:CF:02:7E:D2:E2:97
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RgTpHdCSW12NtWXFbhXPAn7S4pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:98:a5:df:84:82:5a:0a:f1:a8:ac:33:75:b5:99:6a:2a:b1:
ab:c2:bb:03:8c:94:a9:31:fb:f0:b5:7f:07:25:20:1d:55:84:
98:d2:7d:77:e4:91:ab:88:6e:7c:99:f6:68:7f:10:b9:40:b0:
af:62:8b:03:0d:03:df:82:ba:a2:e7:ca:7d:b7:aa:0c:8a:9e:
71:f7:85:de:18:f4:f5:b5:64:ae:be:67:19:f8:c4:0f:2e:9b:
32:73:7a:39:4c:3b:81:03:6f:a8:df:86:b4:92:ed:6e:1a:a5:
f3:37:93:90:4e:d3:83:d0:91:ba:ce:da:a2:9f:f8:d1:85:64:
e1:b2:f5:9c:23:02:e9:1a:f4:95:54:b2:24:9b:37:19:c0:a4:
56:d9:5d:93:c8:da:af:39:c1:64:34:27:24:aa:6c:4f:64:6f:
1b:52:ec:8e:fe:27:f1:66:bd:71:4f:40:b4:c0:18:dc:80:9d:
35:a7:71:6f:64:be:22:a4:11:b0:f8:7d:da:54:db:26:19:7c:
39:ba:41:e4:59:e9:05:29:52:95:bb:7d:dd:98:92:9c:5a:fd:
e4:40:67:73:bd:bb:9a:8c:a3:0f:69:0d:91:d0:c6:a6:ae:88:
81:d1:67:03:23:ce:00:eb:19:b6:bb:d2:e6:05:9e:eb:38:fd:
85:b9:70:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:19 2025 by rpki-client