Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vQ_9SfvBd-IltvLg6R2QjRYuDY0.roa
File: vQ_9SfvBd-IltvLg6R2QjRYuDY0.roa (raw, json)
Hash identifier: JDelo6DCdvK5//nDG7wDDKlfnR4FQWe7NbZGDcetWCg=
Subject key identifier: BD:0F:FD:49:FB:C1:77:E2:25:B6:F2:E0:E9:1D:90:8D:16:2E:0D:8D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B736C8DE9100BAA56C60AD78C7E9692E0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vQ_9SfvBd-IltvLg6R2QjRYuDY0.roa
Signing time: Fri 27 Oct 2023 23:16:15 +0000
ROA not before: Fri 27 Oct 2023 23:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:73:6c:8d:e9:10:0b:aa:56:c6:0a:d7:8c:7e:96:92:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 27 23:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd0ffd49fbc177e225b6f2e0e91d908d162e0d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:89:cf:73:f1:dd:d8:7a:65:26:5f:03:ea:46:
8f:34:6c:8c:c2:fa:27:83:ef:30:3e:8e:7c:92:b1:
62:62:0a:8d:b8:96:94:d5:60:5d:44:0f:e5:2a:54:
70:d6:bc:f3:ad:3f:45:e0:5f:e5:a9:f5:ad:c0:af:
0d:33:93:53:56:67:c4:c0:9f:98:f5:0d:bb:72:89:
d6:16:a2:41:04:81:4c:eb:15:4f:e0:eb:5f:99:7b:
ba:c3:cd:ea:12:b0:d6:ed:8c:0f:70:ff:09:56:ce:
85:cd:a3:f6:0f:75:ef:89:40:80:c6:b8:ba:94:f1:
d6:03:79:8f:b6:eb:4a:d7:00:13:ba:0b:4f:57:3b:
2e:5e:9d:8f:44:39:28:f7:fb:c9:cb:54:50:14:d4:
58:44:4b:5c:7f:13:f9:6e:42:17:40:c4:b6:3b:e2:
6f:62:35:df:f5:df:8f:c6:2d:00:a2:6f:6b:09:3c:
a6:55:4e:30:68:91:0b:ab:b5:16:c3:20:39:a2:6a:
12:07:41:07:61:30:62:64:41:e7:60:d6:e7:b9:e1:
75:1d:21:0f:74:dc:e7:be:d2:d5:ae:fb:1b:9a:e8:
95:88:5b:91:df:0d:6a:76:42:70:8c:51:ce:c5:84:
74:51:03:58:ae:18:b0:df:e1:95:fe:69:84:ac:9d:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0F:FD:49:FB:C1:77:E2:25:B6:F2:E0:E9:1D:90:8D:16:2E:0D:8D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vQ_9SfvBd-IltvLg6R2QjRYuDY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c1:3b:ea:c9:78:5d:70:d2:80:09:00:2f:94:69:e5:16:16:ef:
19:c8:d0:2b:dc:21:c6:f1:58:eb:12:c6:e7:9d:5b:ee:f9:63:
c7:85:4f:2a:93:79:bc:f4:5e:7d:ab:e7:cb:33:e2:44:e5:e4:
7f:b5:e3:7a:43:c7:02:66:22:9e:12:3b:80:f9:b8:5d:6e:7e:
5b:4a:ec:8d:5d:84:f9:0f:79:e2:fc:5f:04:99:92:09:46:87:
05:cd:ab:c8:36:25:2e:be:49:3b:c6:62:04:a0:2b:1f:33:e1:
5d:3e:38:ad:fc:cd:8b:1e:f0:e6:ae:6c:6e:d4:10:f4:6e:9f:
75:11:03:de:71:15:a7:27:dd:a9:36:db:03:da:d2:7e:f5:ee:
44:4a:bf:37:fa:22:c3:8e:09:a3:5b:1e:a8:78:ad:c5:8a:b3:
40:83:54:12:12:16:fe:23:db:e3:f8:60:a1:01:42:64:65:9e:
97:22:f7:58:91:2e:1e:4f:f2:da:fa:48:57:45:92:8e:ed:83:
c1:7c:3a:af:62:12:70:a5:dd:8b:52:90:a8:dc:14:31:c1:c1:
97:b4:6a:c5:f1:72:67:d9:ec:81:e3:ea:17:99:36:c0:19:6c:
b8:bc:68:18:26:17:4f:84:0f:32:c8:81:a4:af:3b:6a:14:aa:
8f:01:c0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:02:41 2025 by rpki-client