Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_SSaB_vc0nBVFwe55egoDDkAYdM.roa
File: _SSaB_vc0nBVFwe55egoDDkAYdM.roa (raw, json)
Hash identifier: c7XNA2WcQg8OAO9YHwpLBmrmMtoghSF5gqoWvFmiTkA=
Subject key identifier: FD:24:9A:07:FB:DC:D2:70:55:17:07:B9:E5:E8:28:0C:39:00:61:D3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5411C7EC15599DB8883F51FE4C1848D8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_SSaB_vc0nBVFwe55egoDDkAYdM.roa
Signing time: Sun 10 Dec 2023 14:11:40 +0000
ROA not before: Sun 10 Dec 2023 14:11:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:54:11:c7:ec:15:59:9d:b8:88:3f:51:fe:4c:18:48:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 14:11:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd249a07fbdcd270551707b9e5e8280c390061d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6b:90:1d:1d:78:a7:79:70:31:18:57:ff:2f:
e4:6e:c5:ac:84:f5:15:a0:49:6e:5c:fa:0f:90:6e:
4f:5d:a7:f8:b7:eb:79:dd:d3:3e:e2:0a:05:c6:51:
9e:6e:95:37:59:b5:fa:66:25:4b:0b:68:bb:4d:7f:
5d:75:bc:d1:77:78:cb:a1:ce:4e:65:d9:c0:ce:2d:
ee:14:2b:f2:15:33:2b:4f:a5:85:07:86:0a:c3:d5:
47:7e:40:44:7e:b4:98:d5:7f:57:cb:78:68:74:c6:
b3:bf:ef:7e:0b:77:7f:20:2b:64:bc:ea:bc:fc:ed:
41:56:01:dd:6d:e3:f2:6a:1a:a8:70:c0:ce:b9:02:
b6:02:7a:99:16:79:82:c2:7c:c3:e6:07:82:c4:84:
fa:47:49:a0:99:bb:64:c5:12:a8:de:2e:12:30:6e:
85:f0:eb:be:7c:b6:41:ae:0d:af:16:55:e1:a2:13:
ba:5e:0e:2d:51:38:22:f0:5a:cd:66:8f:e8:4f:96:
ba:5f:32:08:d8:66:3b:14:b5:3e:f0:c7:14:13:76:
22:d1:1c:09:28:43:47:64:b1:90:e9:8d:26:c5:dd:
34:2f:fd:48:7c:90:78:45:42:ac:25:5e:39:5e:53:
f9:14:9a:10:cf:b3:d5:5b:82:94:a2:8b:5b:2f:86:
d3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:24:9A:07:FB:DC:D2:70:55:17:07:B9:E5:E8:28:0C:39:00:61:D3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_SSaB_vc0nBVFwe55egoDDkAYdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d2:10:2c:cc:b9:57:6e:2b:22:75:1a:03:f9:a7:99:f0:2f:49:
d4:85:e0:56:0c:f3:1b:f6:65:9d:9b:cf:0f:2a:27:d5:23:da:
b5:68:53:e9:74:12:df:02:1d:71:9c:f7:d8:30:a4:ef:85:62:
cb:81:43:17:51:80:94:ff:83:6e:fc:e5:2e:00:d1:f4:bd:67:
ba:49:0a:2a:6d:d6:68:0f:6d:d1:d1:4b:df:85:a3:4d:ad:48:
04:4d:f1:21:61:3c:6c:12:47:aa:cd:5a:6f:51:dc:59:41:ee:
12:c0:d2:7a:cf:dc:94:2f:03:30:f6:b8:20:29:65:5c:c5:50:
30:d2:16:f0:94:86:2d:16:12:25:ab:b8:4e:c9:2f:0c:3d:17:
65:5d:62:ca:63:8e:f2:4e:16:1f:09:80:8a:ea:76:7e:fc:ae:
60:14:4e:bd:f6:bf:b1:93:1c:92:c4:29:b5:3a:55:4f:72:b4:
55:de:8a:4d:97:ea:e1:32:2a:24:64:a5:32:84:67:85:1a:f5:
75:e4:a3:12:27:32:ba:cf:51:a7:34:7d:6c:03:41:f6:f6:db:
02:9e:d4:71:d1:2d:d6:17:b3:c7:33:7a:03:de:a9:0f:d9:2c:
2c:ea:b8:d1:93:25:28:75:d2:01:9e:3b:6b:c0:26:e8:1b:2b:
60:68:06:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:45 2025 by rpki-client