Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xPPxpMOcvIEWUbs6Kr4-jm5-B7I.roa
File: xPPxpMOcvIEWUbs6Kr4-jm5-B7I.roa (raw, json)
Hash identifier: i3KXaM7sOM8wiFKfZ90951ZMTud2KiM4As4oTWTSBc8=
Subject key identifier: C4:F3:F1:A4:C3:9C:BC:81:16:51:BB:3A:2A:BE:3E:8E:6E:7E:07:B2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2AAD80BD18084B0D8D5945B54F166A54
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xPPxpMOcvIEWUbs6Kr4-jm5-B7I.roa
Signing time: Fri 13 Oct 2023 20:14:55 +0000
ROA not before: Fri 13 Oct 2023 20:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2a:ad:80:bd:18:08:4b:0d:8d:59:45:b5:4f:16:6a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 20:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4f3f1a4c39cbc811651bb3a2abe3e8e6e7e07b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:85:0a:ca:c3:40:c7:f5:2c:82:c8:bf:b3:
86:4c:18:d5:c6:d8:e7:ba:d0:20:a2:1e:a2:35:40:
59:7a:af:b0:66:f0:7a:86:4c:35:7d:f7:26:dd:f7:
b6:a0:eb:c4:e1:cd:39:8b:9a:78:3f:4a:21:15:8b:
52:49:d2:07:12:10:d1:fa:c4:96:f1:75:ba:08:67:
ad:6c:47:61:7f:e6:35:78:d9:fe:59:fd:80:d6:8b:
d7:2e:b9:2a:97:74:00:95:b0:3a:74:e9:da:9b:8a:
96:2a:07:62:cd:02:01:47:0a:a8:72:bb:f3:5e:23:
e6:e7:dc:80:ba:c5:26:da:c9:66:6d:9f:c8:32:fb:
be:2c:34:e6:ae:c8:cc:2f:23:8b:36:36:cb:06:a7:
ca:43:c4:3f:43:13:55:00:42:c2:2b:95:80:cc:43:
3a:a4:2b:a3:32:0b:12:9b:9c:e9:e8:17:32:64:80:
3f:03:4b:9f:a1:7d:8d:58:1c:d3:04:7a:2f:d7:94:
bc:dc:0b:c7:f3:74:3b:c4:82:d2:67:a1:ac:f2:e1:
98:98:a5:77:73:b8:55:c5:b5:ec:31:fb:ed:3b:08:
2b:e3:27:51:0d:e6:40:fa:33:b7:76:20:56:58:f4:
80:3f:e1:66:0c:e7:46:46:ba:2e:7a:b6:01:33:ab:
65:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F3:F1:A4:C3:9C:BC:81:16:51:BB:3A:2A:BE:3E:8E:6E:7E:07:B2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xPPxpMOcvIEWUbs6Kr4-jm5-B7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:75:cb:14:2e:e6:e5:75:48:4b:68:02:ee:9d:37:b3:30:0b:
2e:99:76:e0:14:f8:0c:1f:a1:f4:c0:e3:d6:a1:ba:b5:2e:36:
9d:7d:e5:9e:1b:a7:d4:09:21:a2:63:53:dd:30:9f:36:79:32:
6b:95:36:2b:b0:e7:86:d9:f8:d6:77:5a:32:70:0c:39:7c:f9:
d3:c2:30:e0:04:60:ab:7b:9a:e6:08:1a:08:ba:76:1e:55:e1:
6d:aa:f5:44:dd:38:67:ba:de:69:9c:e4:aa:62:70:c5:58:ea:
f5:82:95:ac:b3:85:18:7b:70:29:55:d9:16:47:fc:13:1e:f4:
9a:eb:36:11:19:2c:ea:9f:bd:66:0c:17:95:6f:29:f1:19:6c:
bd:f0:97:ff:b3:4c:eb:13:e4:05:03:11:77:35:5c:b5:90:d7:
35:f3:39:11:de:d6:27:7d:df:e8:9a:64:1f:b6:6f:7f:1a:d6:
dc:b1:c3:c9:6a:45:a1:08:f2:a9:38:d6:3f:b0:17:c0:d9:34:
5e:7f:e2:56:21:29:e7:09:f3:67:64:c6:78:5f:83:b9:93:71:
16:fc:67:27:60:64:4b:7a:be:8b:dd:eb:f4:45:c3:6e:ca:69:
5b:2d:f6:f9:7e:7c:a6:8b:4d:11:a2:2a:87:0d:72:0e:47:7a:
99:96:9c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:35 2025 by rpki-client