Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rxJmgDxLXrJsSdYvuyHKHLQNBfE.roa
File: rxJmgDxLXrJsSdYvuyHKHLQNBfE.roa (raw, json)
Hash identifier: HBxkmYEF5cN6P4dtYlMB0RN2FSLHYUInUfa3izkQb4A=
Subject key identifier: AF:12:66:80:3C:4B:5E:B2:6C:49:D6:2F:BB:21:CA:1C:B4:0D:05:F1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADD382990916D0A2E677A18F959639311
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rxJmgDxLXrJsSdYvuyHKHLQNBfE.roa
Signing time: Thu 28 Sep 2023 19:15:59 +0000
ROA not before: Thu 28 Sep 2023 19:15:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dd:38:29:90:91:6d:0a:2e:67:7a:18:f9:59:63:93:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 19:15:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af1266803c4b5eb26c49d62fbb21ca1cb40d05f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:39:56:12:c8:a8:38:21:8d:d4:16:5b:5a:1b:
82:4c:39:f9:3b:84:e6:5e:e9:c8:1c:60:72:76:03:
e0:61:e9:3f:b2:46:98:50:4e:48:1d:20:36:32:8d:
92:e7:f8:f4:e2:84:56:34:5a:84:06:96:98:62:1e:
82:4c:dc:5d:99:57:6c:64:cf:2b:84:22:5f:91:cc:
e4:94:92:0e:ed:bf:3e:6d:df:4c:a4:eb:6f:bb:19:
6f:6d:d2:6f:67:90:94:c6:02:69:bf:be:a5:48:27:
36:3e:05:a0:db:c2:10:ef:e1:b7:bb:75:65:d7:c9:
1d:b1:2c:c9:4b:87:0b:41:41:cb:fd:74:fa:7b:c7:
be:8b:6d:cc:6e:7e:78:bb:79:fb:e9:a3:22:a2:ce:
6d:7c:23:67:b5:f2:8d:c0:18:5a:54:9d:1d:a2:cf:
3a:4d:f1:87:b6:71:54:1b:c0:a1:d7:f7:ee:31:05:
3d:6d:4d:cb:72:28:ee:9d:e4:3f:ab:98:b6:9c:c6:
d0:a4:b9:f3:69:2c:f3:d3:23:e5:ae:59:1d:05:52:
42:83:f8:c4:70:a6:65:64:1a:e3:88:c1:91:9d:ad:
11:12:3e:ff:eb:0b:14:70:3f:05:1b:02:45:61:db:
80:ac:f5:ae:4e:1b:4a:8b:af:dc:0a:7c:29:cc:1f:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:12:66:80:3C:4B:5E:B2:6C:49:D6:2F:BB:21:CA:1C:B4:0D:05:F1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rxJmgDxLXrJsSdYvuyHKHLQNBfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:aa:28:76:34:8b:44:e3:1c:7a:16:0a:af:d2:e4:a1:05:70:
9b:93:67:c2:b4:c7:a0:8a:25:a6:25:cd:ca:69:21:69:3d:17:
db:4b:ad:72:a4:03:9b:bf:fd:4e:12:9e:c2:1f:26:47:bc:4d:
97:02:93:15:53:ab:ba:f6:90:df:89:46:21:66:02:2d:cf:f2:
3e:1a:35:e7:3b:02:b5:6c:0f:67:16:54:d6:b6:9b:0a:2d:ca:
48:39:0a:f0:ee:b1:d6:d7:47:46:95:87:a5:bf:fb:8e:f3:b1:
13:b5:74:77:1e:38:d8:06:d1:5c:71:0f:c4:83:21:66:1d:6a:
3b:4c:1d:3a:b4:36:62:4c:65:83:20:36:17:5e:50:d2:75:b8:
7a:d9:33:cc:d7:47:dd:da:05:ca:ac:25:74:4d:05:0d:32:db:
f4:4b:2c:2d:4b:0f:97:72:f9:a4:c1:03:e4:4d:2b:b0:02:8b:
b1:5a:ef:7d:cb:0b:54:76:55:29:ea:94:e1:37:df:80:33:96:
41:32:af:48:8d:8e:86:b5:a0:82:c1:9e:27:da:b2:2f:31:58:
4b:b0:f9:84:c9:b6:62:60:22:fe:df:92:0a:8b:ed:44:cb:2c:
05:95:14:4e:8f:3d:18:2c:89:32:f6:21:82:ae:fc:46:fc:27:
d5:fc:ca:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:18:21 2025 by rpki-client