Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/khT0ZN71Xs5Cd0-YtkNodrVF_6s.roa
File: khT0ZN71Xs5Cd0-YtkNodrVF_6s.roa (raw, json)
Hash identifier: kjswfBMsmygYcThz1oXCQ3fPmyyaayCMDpKhFSUcekI=
Subject key identifier: 92:14:F4:64:DE:F5:5E:CE:42:77:4F:98:B6:43:68:76:B5:45:FF:AB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B71482779913667ABE0A2D6B1090BF337
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/khT0ZN71Xs5Cd0-YtkNodrVF_6s.roa
Signing time: Fri 27 Oct 2023 13:17:15 +0000
ROA not before: Fri 27 Oct 2023 13:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:48:27:79:91:36:67:ab:e0:a2:d6:b1:09:0b:f3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 27 13:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9214f464def55ece42774f98b6436876b545ffab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:dc:65:ca:78:e4:9d:28:e6:bc:cf:50:f9:
c0:73:ee:67:f1:bb:53:cd:f9:bc:f7:00:8b:bc:66:
21:64:1b:f0:d2:51:1a:b2:f9:43:3a:41:7d:1d:2a:
55:27:5a:0b:9d:44:c6:e3:f9:a5:df:75:5a:d6:a0:
94:d5:6c:e1:ec:d9:df:81:9a:e6:0f:d8:74:1f:e6:
fe:d3:9d:d3:cc:7c:4a:bb:66:5f:95:1b:ce:03:da:
49:4a:46:e0:48:d1:57:19:a5:5b:1f:20:77:94:d2:
a3:02:c3:b0:9b:9a:01:bf:2d:ba:aa:25:74:4d:99:
01:9d:96:db:e2:60:4d:3e:4e:a9:bb:1f:89:a1:5c:
f2:ce:9b:e4:38:b1:c4:f1:ff:cd:7e:22:7c:8f:46:
0f:5b:05:10:91:44:e4:84:f7:d6:ca:76:24:c2:7b:
a2:7c:88:42:70:84:b2:24:f1:45:e2:d6:3f:2b:dc:
45:1a:93:e9:bc:c5:69:76:5d:ad:9f:36:cb:40:5c:
ec:6e:05:3e:f2:63:bd:0a:0a:73:e0:3b:cb:85:fe:
9b:dd:aa:0e:61:ff:41:a1:0d:30:53:51:d6:04:c7:
8e:e5:09:1a:fa:f1:38:b5:ce:18:e2:85:e1:93:be:
fc:8d:86:69:7e:49:be:a1:ee:5b:e2:4c:8b:06:88:
7f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:14:F4:64:DE:F5:5E:CE:42:77:4F:98:B6:43:68:76:B5:45:FF:AB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/khT0ZN71Xs5Cd0-YtkNodrVF_6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:40:d5:69:e3:64:8b:02:34:ab:e0:c9:29:36:a9:70:21:29:
36:f7:41:0b:3e:d3:11:d6:53:a3:4a:a9:6f:a0:8e:5c:e0:67:
4a:96:62:b6:16:bb:d5:51:01:b8:18:f8:d8:ca:c0:ff:07:34:
ee:43:4e:ad:98:49:e3:16:87:59:94:75:5a:7e:65:90:24:26:
99:5d:e5:86:17:6c:b0:c1:43:8b:3a:43:3e:2d:d8:9f:26:2a:
49:0f:b2:ca:d9:7d:98:07:65:b6:43:35:a8:54:3b:b9:7d:5f:
6f:0d:19:1c:e4:74:1a:71:4d:6a:35:33:88:ef:a3:d9:cb:b9:
6c:7a:1c:3d:42:40:c4:09:55:c4:18:c5:c7:79:50:31:6d:1e:
8d:29:4a:64:4b:8a:b3:eb:5e:74:0d:07:38:6a:5f:73:29:54:
37:78:c0:aa:60:e4:83:37:28:09:1b:27:64:b7:23:e9:99:15:
b7:73:7e:28:c6:e8:7d:33:1d:67:2e:d4:97:89:8f:1d:fb:37:
e5:0a:6a:b3:f5:6b:ed:d3:f1:28:1a:0d:24:a3:85:66:4e:05:
39:ee:fc:85:c0:4f:d9:f2:be:dd:fa:1b:30:42:e6:0d:4d:35:
4d:64:e9:79:51:3c:59:6e:3b:06:d6:19:bf:84:35:f7:27:03:
78:47:b7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:14:47 2025 by rpki-client