Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kfiW3pPWW2yJzFZZPzpm8_fE_GU.roa
File: kfiW3pPWW2yJzFZZPzpm8_fE_GU.roa (raw, json)
Hash identifier: z5hWNEhOfm3pbiS6/YEZttLcGOTR7BJYBbGX990tXCY=
Subject key identifier: 91:F8:96:DE:93:D6:5B:6C:89:CC:56:59:3F:3A:66:F3:F7:C4:FC:65
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C341D40A7510BD6A7C6D6EDDE7CB2C3BC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kfiW3pPWW2yJzFZZPzpm8_fE_GU.roa
Signing time: Mon 04 Dec 2023 09:16:21 +0000
ROA not before: Mon 04 Dec 2023 09:16:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:1d:40:a7:51:0b:d6:a7:c6:d6:ed:de:7c:b2:c3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 09:16:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91f896de93d65b6c89cc56593f3a66f3f7c4fc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:f0:8f:c0:76:f6:4e:ec:08:00:2f:4b:73:
c1:45:82:b9:8f:01:2c:89:80:c0:d4:7b:36:27:1f:
f8:8f:8b:d9:a6:c0:b5:61:fa:eb:3c:1e:a6:9c:d0:
bb:43:38:58:36:8c:02:a4:a7:59:4b:38:8c:ff:5a:
bb:f8:95:8f:e6:ed:c2:bf:c3:cf:91:a4:11:bc:9f:
cf:81:e7:9c:02:92:4b:d6:2e:c6:77:5a:85:f6:22:
5b:f1:f3:49:aa:5d:86:4f:5d:aa:1f:ff:65:8a:e4:
7a:1f:37:46:9e:04:76:c2:32:6d:70:d4:21:3e:f9:
d5:fd:5f:86:ad:b3:e6:44:09:23:c0:3c:77:03:31:
ea:69:5e:1a:a0:ca:b7:4e:98:ef:df:bd:5e:90:70:
0d:f6:1b:01:dd:eb:b0:da:e9:38:72:69:f2:03:63:
88:86:3d:6e:85:fc:be:ef:9f:5e:ea:7a:9d:44:eb:
2f:b6:dc:ba:31:c8:7b:55:be:33:3f:1f:72:83:a0:
f8:14:0a:70:46:7c:c2:42:40:ea:77:f6:c6:d4:93:
f9:eb:d8:32:39:3b:21:43:3b:6f:3e:7a:b8:34:bb:
13:a6:89:c2:4a:40:fb:80:0c:dd:aa:f8:c7:fa:e0:
24:15:0c:cb:73:9d:17:38:e5:e7:ff:2a:c0:51:67:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F8:96:DE:93:D6:5B:6C:89:CC:56:59:3F:3A:66:F3:F7:C4:FC:65
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kfiW3pPWW2yJzFZZPzpm8_fE_GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:05:10:a8:83:8a:ea:91:0e:85:af:42:a7:0e:ff:12:f0:06:
8c:af:b1:be:a3:e9:79:61:ab:59:b3:0b:a7:46:4d:45:c4:c3:
1d:7b:b9:e1:c4:16:ca:26:89:e7:ac:61:aa:a7:18:fc:88:db:
ce:93:d0:d4:3c:0f:d6:cb:5c:1e:9e:af:fd:b1:7a:e4:c2:f3:
77:ea:52:cc:eb:a5:63:94:b2:41:06:7e:77:88:0e:72:2f:9f:
58:32:dd:a3:4a:11:a9:99:84:01:6f:c0:73:aa:90:31:95:55:
f0:0f:22:ac:8a:ab:0a:42:a0:7f:ce:28:26:ff:0a:3d:bc:f9:
60:57:80:97:99:31:a7:50:31:8e:0f:08:1e:ef:10:81:37:19:
c8:11:5d:13:64:17:f5:1b:33:f2:33:64:78:a3:e3:16:33:67:
c5:f2:cd:55:36:4d:45:7d:c4:7c:8c:f0:15:b7:47:b4:e5:84:
15:5d:80:47:60:e2:40:4e:d5:93:67:c9:fd:ac:3c:d1:8d:8b:
a0:28:bd:4e:ee:10:f2:c4:5f:d2:d8:41:b6:58:55:23:57:cc:
27:f4:7b:39:f6:9f:56:d7:c1:e9:e1:c7:72:59:e5:26:b8:b3:
cd:67:c0:11:2e:a4:ab:3f:bb:53:6d:9e:95:50:a7:01:2a:5f:
ce:15:cb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:51:25 2025 by rpki-client