Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sXR2QL3gnfqhgnLMRvuv33HqAHU.roa
File: sXR2QL3gnfqhgnLMRvuv33HqAHU.roa (raw, json)
Hash identifier: aHxTLW/ES3rvTumi9uW62qo25GH6TbyaHyfUTkxJP9U=
Subject key identifier: B1:74:76:40:BD:E0:9D:FA:A1:82:72:CC:46:FB:AF:DF:71:EA:00:75
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7EFE5484AF13CC934F3C0E8C1F3D1DA1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sXR2QL3gnfqhgnLMRvuv33HqAHU.roa
Signing time: Mon 18 Dec 2023 22:14:06 +0000
ROA not before: Mon 18 Dec 2023 22:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7e:fe:54:84:af:13:cc:93:4f:3c:0e:8c:1f:3d:1d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 18 22:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1747640bde09dfaa18272cc46fbafdf71ea0075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:54:c0:cc:e3:94:b2:37:2a:0f:29:bf:c4:cb:
ea:d2:78:33:3b:fe:83:4e:4f:48:aa:61:d7:cb:d6:
45:4b:e3:a7:a2:e9:0c:57:8a:2d:e8:06:5b:18:09:
de:34:1b:6b:67:e5:39:fd:38:82:c7:67:0c:d2:a6:
63:d1:d9:f3:a4:9b:b0:8f:f3:8c:f4:c4:30:70:5a:
a2:9c:aa:51:cb:91:19:c0:bf:aa:f1:4c:77:fe:13:
22:13:59:71:34:83:4c:b7:f4:7c:d6:a7:66:92:ae:
3a:12:f3:16:bf:0f:80:0d:20:f2:11:83:43:29:38:
ea:18:17:57:b2:a0:2f:c5:44:8d:b9:bf:d6:8c:52:
a1:86:80:08:0b:6b:32:ae:f0:ab:5c:51:72:4d:59:
b3:06:a5:2b:39:ed:03:1b:c0:e3:8f:2f:26:e2:68:
ce:73:91:4e:51:d9:65:0e:3e:31:8b:4b:67:13:b7:
d1:b9:b5:3b:75:d5:82:9e:83:c0:16:92:7a:fe:4f:
1e:d5:9e:3c:e8:1c:f0:51:7f:50:ac:e8:cf:92:63:
5b:c6:a3:66:b3:89:7c:0d:12:93:4d:67:79:5d:a7:
34:4a:94:9f:c8:6d:2b:30:74:7c:d5:aa:bf:ee:19:
c7:80:d8:6a:ff:a0:c8:6b:17:f9:4c:bf:a9:f8:64:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:74:76:40:BD:E0:9D:FA:A1:82:72:CC:46:FB:AF:DF:71:EA:00:75
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sXR2QL3gnfqhgnLMRvuv33HqAHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:e9:64:06:a8:94:10:97:1f:0d:ec:4f:6d:c0:bd:08:cc:22:
38:96:df:4e:42:d0:8f:3e:2b:a8:53:dd:9e:f1:b1:92:55:64:
94:94:43:04:4c:b6:19:72:92:b8:04:ad:5e:99:e5:18:57:2c:
18:fb:15:79:e6:91:48:9a:d9:b5:e2:46:bd:43:91:b8:42:83:
d5:86:77:6c:db:e7:fa:05:bc:6b:9e:eb:88:fa:85:9a:d1:bc:
80:93:2a:92:21:24:29:62:a5:64:6d:c7:c3:9c:3a:9f:f0:15:
ad:10:fe:92:b0:fc:84:d6:a2:02:62:0b:2c:64:58:7a:a4:4a:
69:f0:33:f9:ce:da:b7:bc:7a:fa:0b:d0:11:a1:d5:7c:67:cd:
12:f5:14:ef:37:4f:85:3f:5d:07:6d:e7:46:95:12:d2:48:7e:
90:dd:a4:b5:27:e6:1a:84:4f:66:fa:73:6b:35:a9:6b:75:f8:
28:4a:68:62:90:12:9f:e7:f8:84:df:c2:76:36:52:0c:29:e9:
8c:a5:b7:f2:ef:d5:ad:e1:a4:71:a0:62:05:b9:31:69:b5:6f:
50:b2:45:07:41:fd:94:82:b3:15:d1:d5:20:da:e2:3d:7b:65:
93:94:df:70:86:f5:ae:28:cc:55:b6:34:cf:df:86:dc:f1:2b:
d3:37:02:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:57:56 2025 by rpki-client