Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xElu4RaPu1mVTUJaJb6zEx2_0To.roa
File: xElu4RaPu1mVTUJaJb6zEx2_0To.roa (raw, json)
Hash identifier: hVSbw+pdxJYBXDOaOEKDMfYt80bTUTg3wKXCjRULy5U=
Subject key identifier: C4:49:6E:E1:16:8F:BB:59:95:4D:42:5A:25:BE:B3:13:1D:BF:D1:3A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD6C10A48B01EC3966D7DD5D3D71EBEFC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xElu4RaPu1mVTUJaJb6zEx2_0To.roa
Signing time: Thu 16 Nov 2023 06:10:57 +0000
ROA not before: Thu 16 Nov 2023 06:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d6:c1:0a:48:b0:1e:c3:96:6d:7d:d5:d3:d7:1e:be:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 06:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4496ee1168fbb59954d425a25beb3131dbfd13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:7c:af:9c:13:19:f1:e2:49:5a:ed:e0:40:
b5:6d:d5:7f:97:17:89:ce:f9:2c:6b:26:bc:76:df:
0b:a6:84:ba:a3:d2:02:14:72:aa:36:ef:81:08:3d:
b9:bc:77:71:40:f2:a2:07:af:3c:5f:83:39:75:5e:
4e:5f:fa:2c:b2:49:c7:e2:a0:62:92:d3:1e:dc:2e:
96:1d:4f:f7:96:5f:27:35:cb:b0:e5:57:38:96:7c:
80:c5:00:0b:7c:5a:22:f8:c6:e4:d0:94:88:c7:f3:
df:33:c9:5b:44:53:22:8f:5c:94:ec:f5:45:7d:3b:
43:01:87:08:23:a1:7b:a7:84:01:ac:b4:2f:7c:e6:
ee:99:cb:15:82:e4:6a:47:20:25:b0:c4:87:78:a3:
12:9f:af:49:43:ce:f8:b6:a7:7a:5a:66:74:d8:01:
c7:84:fc:0c:75:04:fb:e3:a8:9e:fb:5f:2b:d5:90:
0e:1a:28:e9:c7:73:9c:d1:60:79:96:6b:e7:0d:70:
91:21:f7:03:d1:df:42:3c:71:75:58:77:d8:bc:3a:
6b:6b:d1:d7:f8:f3:28:95:dc:ee:1b:72:2c:f2:c1:
7d:ae:ed:2f:ea:ee:e5:79:c0:f8:61:ec:8e:7f:28:
d2:af:d4:40:fa:f8:a5:ef:5a:7e:8c:5c:3a:64:e3:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:49:6E:E1:16:8F:BB:59:95:4D:42:5A:25:BE:B3:13:1D:BF:D1:3A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xElu4RaPu1mVTUJaJb6zEx2_0To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:5a:f8:16:ce:77:72:a0:ad:57:04:06:97:9a:44:87:99:46:
3a:56:3c:6f:9f:76:04:66:91:7c:83:be:4a:91:bf:b9:17:a1:
68:95:5e:88:86:10:dc:20:7c:de:4e:a6:ec:9a:07:6d:76:46:
b4:21:6e:6b:54:cd:72:1d:5d:b5:3d:91:1b:41:0f:f8:81:c7:
c7:26:4d:74:62:b3:9d:f3:44:4c:3f:36:ea:aa:67:a3:bb:f8:
55:3e:ba:5d:fb:e5:1d:be:eb:4f:71:4d:6a:f6:40:62:eb:b8:
d7:11:87:32:ab:b1:5b:2b:4f:7d:1b:3b:68:cc:9d:c5:e5:7b:
11:9c:c8:cd:3e:b1:f0:32:e7:56:4d:9b:97:3d:a1:93:d8:7e:
34:d8:a6:3b:18:ae:3b:c5:78:f5:a2:50:b7:00:6b:e9:59:87:
79:b4:cd:82:77:7b:c9:6d:96:3a:0a:22:9a:92:89:e8:9f:12:
a6:d1:9d:92:5d:5a:50:28:15:36:9d:44:85:e7:2f:79:f1:1e:
29:36:59:9a:a7:01:12:7e:d7:8e:4f:b5:b7:c3:0d:94:dd:51:
6a:8d:ef:d4:53:09:77:15:c3:bf:0a:ca:e7:92:4a:43:ac:2f:
1a:a2:a8:06:23:ad:5f:1a:8b:f6:91:0c:a4:95:45:2d:57:57:
3c:ae:13:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:57:23 2025 by rpki-client