Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/htiRxLoUDBvj4ORVTNhyjSt5RMc.roa
File: htiRxLoUDBvj4ORVTNhyjSt5RMc.roa (raw, json)
Hash identifier: HaU3VQITXdUSV6YcL/xQtMtTiABreKBrlufSD5Z6tJA=
Subject key identifier: 86:D8:91:C4:BA:14:0C:1B:E3:E0:E4:55:4C:D8:72:8D:2B:79:44:C7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C360792770AEBB9217DA76AFAE20B96B7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/htiRxLoUDBvj4ORVTNhyjSt5RMc.roa
Signing time: Mon 04 Dec 2023 18:11:55 +0000
ROA not before: Mon 04 Dec 2023 18:11:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:36:07:92:77:0a:eb:b9:21:7d:a7:6a:fa:e2:0b:96:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 18:11:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86d891c4ba140c1be3e0e4554cd8728d2b7944c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:21:cf:07:d1:a8:da:e6:a5:bc:65:ed:5c:70:
5d:ef:f5:97:cd:24:fd:cd:16:0f:69:0b:2c:15:16:
76:00:e5:f5:57:7c:b5:a1:e6:c7:c3:26:82:7d:43:
2d:04:c1:2c:28:a4:30:7c:8e:91:4a:be:7e:82:cf:
e7:4a:10:42:74:69:96:ed:e1:72:10:a5:29:22:14:
89:5d:9f:1f:1c:4b:58:ae:a1:6d:ca:50:85:79:1b:
c2:dd:53:69:6c:93:da:8a:57:6a:45:45:a1:e1:81:
e4:62:44:f0:27:c7:61:6a:85:f5:46:94:5b:5a:70:
35:4d:d8:f3:23:7d:ca:58:de:6a:eb:44:01:85:1d:
46:a9:b1:ed:01:dc:f6:37:3e:4f:f1:17:81:25:d4:
12:2b:df:c2:3b:26:dd:6b:3f:d9:db:2d:c3:41:3e:
c7:dd:bb:ea:70:81:96:8b:e6:36:08:3b:06:98:b2:
fa:82:a2:9c:c5:15:38:09:94:e7:4a:6e:78:d3:0c:
62:e2:c3:bd:53:d3:fe:19:07:0e:79:74:df:7c:2b:
6f:6d:35:14:90:e1:f9:ed:68:ec:f5:51:4d:42:0d:
f4:10:b4:fe:df:1d:9c:d9:3c:e5:31:4e:3a:1f:1b:
db:6d:c5:92:90:4b:c3:d6:22:9f:57:93:8d:3d:3f:
6f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D8:91:C4:BA:14:0C:1B:E3:E0:E4:55:4C:D8:72:8D:2B:79:44:C7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/htiRxLoUDBvj4ORVTNhyjSt5RMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bd:27:99:e2:1c:7f:07:82:89:7b:00:65:19:a5:35:b1:48:dd:
c1:58:28:88:26:8b:00:6a:d7:15:7e:54:09:30:74:a6:57:cf:
ed:ce:ac:71:42:ae:4a:d3:38:5c:4e:60:e4:d2:82:90:88:04:
9f:dd:80:4b:b0:04:6b:83:2e:7f:e2:a0:f9:cf:84:b0:da:22:
ac:04:bc:86:25:dd:47:9e:02:62:9d:dc:6b:21:93:e6:8a:f4:
b6:96:f0:c0:56:09:18:87:e8:45:a1:f6:91:df:cb:d5:cb:6e:
9a:00:9d:0f:9e:39:19:5e:c0:5c:cf:f1:4a:a7:6f:c5:57:ec:
07:96:40:3a:73:66:83:b3:fe:f9:95:56:e6:2b:9e:9a:8b:9c:
3b:95:6e:a4:8d:77:df:b3:7d:60:b4:3a:77:ca:e8:a0:e2:61:
cc:b9:ae:83:52:06:8c:59:c8:de:f1:10:41:47:63:40:2a:93:
01:e3:93:f0:6d:11:d7:4a:ce:92:c3:c3:04:3f:25:40:dc:0c:
ff:6c:3b:02:b9:68:83:80:8a:12:58:c5:79:c2:5a:fd:d8:54:
08:2d:0c:a5:f0:59:4b:b8:9f:9c:32:b7:25:a1:a0:a0:23:21:
53:e1:45:74:8c:8f:66:c1:fe:0e:fc:50:de:54:c9:0c:91:bc:
1e:0d:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:37:55 2025 by rpki-client