Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/whxZnJCemnoYvcuSLE2Hi3Tcdn8.roa
File: whxZnJCemnoYvcuSLE2Hi3Tcdn8.roa (raw, json)
Hash identifier: eageHUNf9lXCUV/Y7hDcSwN1vTsZ71stVaNlY41D1hI=
Subject key identifier: C2:1C:59:9C:90:9E:9A:7A:18:BD:CB:92:2C:4D:87:8B:74:DC:76:7F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C60BCF868CE1EB65778182239C856BAA0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/whxZnJCemnoYvcuSLE2Hi3Tcdn8.roa
Signing time: Wed 13 Dec 2023 01:14:06 +0000
ROA not before: Wed 13 Dec 2023 01:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:60:bc:f8:68:ce:1e:b6:57:78:18:22:39:c8:56:ba:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 01:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c21c599c909e9a7a18bdcb922c4d878b74dc767f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:94:76:6a:23:41:20:c5:cf:08:52:ff:a5:
f7:6e:e6:d2:09:7d:f5:21:f1:a0:f1:77:ee:a8:a1:
72:3c:a9:21:e3:06:1b:ec:65:f9:65:c4:e1:12:5b:
6a:5f:6c:07:99:64:a8:80:aa:73:76:bb:4c:c3:38:
7b:33:ef:c8:d4:f4:25:2d:74:d8:92:64:a0:42:c0:
38:22:cb:42:71:dd:67:7c:d9:31:8c:59:8e:81:07:
41:20:dd:28:5c:a5:38:39:8d:65:66:7d:36:a0:15:
c8:13:cd:a9:73:e8:45:6f:da:b6:1f:54:df:74:4e:
ec:ea:6f:f6:93:b4:8d:89:92:6d:f8:3e:62:a0:4c:
78:a6:d2:db:02:f0:42:87:47:9d:4f:a4:d0:d1:77:
5e:88:c2:d2:de:1d:f5:18:05:88:7a:27:35:05:b7:
1b:9b:2c:a7:24:c3:4d:93:4a:a1:98:ec:0d:42:d6:
a7:1d:23:fb:a2:78:92:61:d2:b5:ad:e2:4e:46:8b:
c1:7c:24:da:67:16:53:c8:fa:7c:8c:0e:45:ee:f5:
cd:fb:46:75:14:38:60:cc:9a:e3:80:30:84:a1:3b:
77:e3:16:46:18:a3:2f:eb:08:91:58:bb:64:9f:ae:
cb:36:14:29:9f:2a:0b:7b:4c:72:1c:c1:d6:5d:14:
48:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1C:59:9C:90:9E:9A:7A:18:BD:CB:92:2C:4D:87:8B:74:DC:76:7F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/whxZnJCemnoYvcuSLE2Hi3Tcdn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:11:5c:1e:d4:f5:3f:b6:c8:89:6b:48:57:63:cd:aa:eb:91:
dc:3b:e2:24:00:61:14:fa:c8:c2:1b:69:35:a2:7c:a8:12:1b:
b2:b7:d9:a9:50:eb:3f:19:88:72:66:07:b1:4b:59:8a:a9:ec:
54:32:0d:4e:56:56:a7:8b:3b:f8:ad:2a:4c:30:1e:53:ed:45:
84:df:03:09:17:4d:29:07:ac:63:b4:64:9d:2a:e9:13:a9:31:
ae:54:7e:b5:8b:31:97:c0:06:ba:3b:4f:9a:29:ff:1b:ec:bb:
3e:c7:94:28:28:fe:7e:32:96:f8:20:f4:41:e9:c7:f7:cc:c8:
28:c6:f7:2e:2e:c4:6f:5e:e3:72:bb:df:dc:99:f8:10:d4:d0:
f9:fc:eb:6c:e4:d2:9c:a4:dd:89:bf:ae:df:9b:5e:9a:5d:11:
ce:b6:89:75:2c:73:5f:8c:25:a5:df:e3:b4:64:8c:1d:7e:1d:
29:fe:fa:00:42:2c:ba:5d:00:24:e0:e9:89:e6:0b:96:3c:c9:
c8:54:c0:8a:80:e8:71:bf:73:4e:19:e1:6b:60:d9:37:dd:51:
03:12:20:24:8a:0e:09:83:5f:98:1e:09:35:10:d8:f3:01:fa:
94:fd:c2:fb:16:53:bf:11:a1:8e:05:26:88:aa:ba:84:67:c3:
9d:e7:1c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:20:48 2025 by rpki-client