Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xkKTwaLGUW9Cq_Z4CnMtCi5k3_k.roa
File: xkKTwaLGUW9Cq_Z4CnMtCi5k3_k.roa (raw, json)
Hash identifier: xCIRpjXHLWSxR5hVerhUJNdeLpw48PY8LzXLFOimVUM=
Subject key identifier: C6:42:93:C1:A2:C6:51:6F:42:AB:F6:78:0A:73:2D:0A:2E:64:DF:F9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC22D83448BDC8683EE9E1D779C1B4AB9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xkKTwaLGUW9Cq_Z4CnMtCi5k3_k.roa
Signing time: Sat 23 Sep 2023 13:14:37 +0000
ROA not before: Sat 23 Sep 2023 13:14:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c2:2d:83:44:8b:dc:86:83:ee:9e:1d:77:9c:1b:4a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 13:14:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c64293c1a2c6516f42abf6780a732d0a2e64dff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:6d:86:fc:90:0d:f2:c5:43:59:a9:9e:40:
bb:f9:4d:04:be:45:b4:b9:3a:77:28:a6:2b:7b:23:
a1:41:35:2f:b4:ce:2e:db:e0:63:c3:9c:cd:5b:ee:
8e:81:cb:0c:18:21:6b:d4:b2:5c:85:72:bc:cc:81:
0e:87:85:38:b6:f8:5a:be:c1:b1:1d:b4:c8:35:3b:
fb:cd:08:dc:ca:6b:c9:33:02:1e:08:04:e2:53:d2:
e3:44:35:82:bf:60:ab:8b:4b:1f:c1:9a:e5:7e:94:
a9:be:77:4c:37:95:36:ae:4e:19:c3:e9:4f:8b:6e:
73:90:64:3e:ca:c3:fa:9e:58:f2:9f:12:49:ee:56:
44:05:d6:c5:ef:5a:2b:49:ac:12:24:4c:03:46:36:
62:5b:cc:f4:00:e1:34:57:75:38:7d:d8:0c:61:6e:
25:9f:bc:a7:ab:0b:2e:9f:9b:b0:7e:4e:34:69:c4:
3e:5d:f4:a4:f2:cd:14:0b:cb:7f:01:5a:b1:87:99:
3d:9d:f4:41:2d:34:e9:df:b1:1a:f4:bd:6d:e5:22:
ed:01:d5:11:69:a8:71:1e:f7:7d:1e:d0:30:e7:75:
fa:07:e5:cd:8a:81:1e:1a:73:f9:b2:0f:34:7f:3c:
a3:72:54:ea:88:f3:9a:ce:a1:42:80:2b:60:63:7f:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:42:93:C1:A2:C6:51:6F:42:AB:F6:78:0A:73:2D:0A:2E:64:DF:F9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xkKTwaLGUW9Cq_Z4CnMtCi5k3_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:e0:2c:9e:c6:67:0e:f2:81:e5:5c:15:37:db:0e:f9:b5:8f:
6d:d4:46:01:97:8b:67:8b:8b:61:d4:11:8f:29:c6:a4:99:74:
40:3c:1c:87:95:c4:5c:ba:10:fd:db:38:eb:90:19:ef:ff:eb:
99:cb:1b:9a:31:eb:0f:b5:b0:7b:4a:fb:07:30:a9:05:50:c5:
0d:8a:e1:e2:25:09:82:dc:1a:44:2a:65:cf:f0:cc:f0:0f:1b:
a9:1c:b2:ad:99:38:90:25:41:c2:e5:df:9e:ab:9a:af:43:cc:
0f:cb:a8:f1:39:7d:fe:23:77:09:c7:c7:fb:76:8e:b6:70:f3:
95:15:0b:c9:2e:f8:31:1a:fc:c0:80:48:13:42:16:e1:95:72:
06:cc:73:70:51:79:fc:5c:16:c9:ea:97:b5:cb:f4:b7:7b:56:
1f:c7:19:6a:ca:6d:93:68:0d:46:53:c3:d1:99:5c:62:42:7a:
1b:12:cc:6b:e9:2f:21:05:06:60:c9:fa:ab:15:3c:ea:94:bc:
47:06:e2:4b:97:89:7f:62:32:c8:1a:a3:27:72:23:1a:f3:9e:
28:da:c4:ff:ee:a2:8a:a3:3b:88:3b:ae:f2:b5:70:e5:4c:90:
b0:15:72:9d:06:97:a4:26:f5:e1:06:bf:9e:cc:9a:06:b0:88:
7a:16:e3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:46 2025 by rpki-client