Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xi7bfEXbvnwAcgxGSN5rb7LUaKk.roa
File: xi7bfEXbvnwAcgxGSN5rb7LUaKk.roa (raw, json)
Hash identifier: dBWs9tHYZRiLWX302kW5lt4GYPfiXM7KIueXc7Nin2w=
Subject key identifier: C6:2E:DB:7C:45:DB:BE:7C:00:72:0C:46:48:DE:6B:6F:B2:D4:68:A9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFB748DA92D38F380F92E201B28A99C07
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xi7bfEXbvnwAcgxGSN5rb7LUaKk.roa
Signing time: Thu 23 Nov 2023 09:13:21 +0000
ROA not before: Thu 23 Nov 2023 09:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:74:8d:a9:2d:38:f3:80:f9:2e:20:1b:28:a9:9c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 09:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c62edb7c45dbbe7c00720c4648de6b6fb2d468a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ee:d8:dc:35:a9:1e:76:0f:d7:a4:e7:eb:27:
c8:ee:1f:33:71:14:d6:f8:0d:fd:05:58:e0:8e:4b:
5c:9b:14:45:1b:f7:a1:54:ec:3a:2a:5e:35:5a:1d:
6d:b1:64:07:28:4b:b7:00:68:3c:b1:1d:7a:6d:72:
ed:c5:20:e7:3d:21:b4:65:29:96:00:bc:a8:8c:35:
84:ff:76:d9:f7:0a:0b:11:3a:61:fb:35:e6:76:78:
b1:28:29:44:4c:4b:e1:f9:56:86:3c:37:33:5e:00:
2d:a9:ed:a5:eb:f1:5e:48:63:bc:ad:54:43:1a:30:
9f:2a:f9:8c:e3:18:fe:29:67:a9:7f:09:5e:70:f9:
71:d5:e8:6b:9a:1b:17:17:28:25:0d:1f:bf:17:e8:
aa:00:9c:1c:38:8f:a1:0e:da:1e:9f:89:b2:e5:30:
fa:3b:a3:66:10:43:93:2d:01:cf:17:70:e4:96:95:
59:74:f9:2c:a7:00:53:d7:df:9a:08:bb:29:bf:41:
7b:3f:da:76:64:f5:62:12:94:78:4d:5a:a5:45:8f:
00:2e:c0:d4:ec:0c:65:b5:5c:ee:cc:7e:dd:e3:eb:
21:5f:2e:3b:49:f1:1f:69:c0:5b:7f:26:b5:62:09:
fd:8f:ea:90:0e:43:49:48:6b:9d:44:a0:b9:8f:85:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2E:DB:7C:45:DB:BE:7C:00:72:0C:46:48:DE:6B:6F:B2:D4:68:A9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xi7bfEXbvnwAcgxGSN5rb7LUaKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:86:1f:1f:2f:3a:c8:b2:1a:f1:71:3e:77:2c:2a:ed:81:15:
b4:0a:27:2c:62:01:99:e1:54:4a:47:ea:0c:03:d1:e6:e4:7e:
12:83:fa:83:7b:24:d5:50:c8:43:e8:74:59:1f:1f:ca:f0:a0:
a9:e4:c9:eb:0a:f5:7c:92:c5:7d:28:33:a3:11:7f:e6:74:21:
5d:39:75:e5:78:58:0f:4d:87:25:76:6e:ae:8b:8f:bd:2c:79:
2d:c7:62:e7:ac:70:04:6f:ef:5d:c4:3c:48:2a:72:99:c1:75:
6b:e2:24:ba:e6:92:ea:20:79:b1:2a:9a:fc:50:dc:17:d8:ac:
6b:94:96:1f:59:a5:51:04:e7:c4:8a:1d:b5:92:6d:b8:c0:32:
cd:31:1e:89:a9:2d:49:7d:fa:d5:c7:37:38:03:c5:4d:64:07:
52:a1:3a:f0:9e:db:b9:95:00:f3:d3:22:a9:80:34:5c:5b:6c:
52:13:60:c9:41:79:de:7a:f5:6a:e8:f8:bc:54:7a:ee:e9:24:
29:4a:a4:15:08:ef:12:15:fe:50:59:37:ff:e4:3d:c5:ea:f5:
9e:19:a5:b6:7d:46:54:81:31:8f:79:4c:3f:e3:20:98:50:2a:
81:b2:a8:c1:fd:15:61:24:5c:bd:60:59:6a:77:65:0d:48:74:
a2:f9:3f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:32:01 2025 by rpki-client