Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xtgiCEDb3TiYh__T1Vl1d0b00Kg.roa
File: xtgiCEDb3TiYh__T1Vl1d0b00Kg.roa (raw, json)
Hash identifier: JNDdF34ahr2xyAmIT29EwnqCcGYP/wFA7Vk56XYrGmE=
Subject key identifier: C6:D8:22:08:40:DB:DD:38:98:87:FF:D3:D5:59:75:77:46:F4:D0:A8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C61999C609CA49B283D9D422BB14EE5A9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xtgiCEDb3TiYh__T1Vl1d0b00Kg.roa
Signing time: Wed 13 Dec 2023 05:15:06 +0000
ROA not before: Wed 13 Dec 2023 05:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:61:99:9c:60:9c:a4:9b:28:3d:9d:42:2b:b1:4e:e5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 05:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6d8220840dbdd389887ffd3d559757746f4d0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:9c:2f:8c:31:10:c6:fd:54:cf:53:2e:58:
ef:5e:c9:7c:18:bb:d3:8f:e1:39:62:51:e5:8f:ca:
78:9d:97:d8:24:44:d8:f9:ce:11:78:3b:fe:86:3b:
4d:00:13:d4:fc:00:47:aa:f4:ae:58:f1:04:87:79:
dc:0c:57:a7:f6:b5:34:78:42:f8:11:d2:6e:4d:c6:
88:f2:17:75:e4:8f:0f:22:e9:a7:95:f4:93:d4:af:
50:7b:41:3e:5e:c6:99:6b:93:e9:98:f2:aa:d2:0e:
df:78:2c:e0:a4:a2:ea:06:ed:c4:df:3b:46:da:86:
2a:92:4f:7f:0e:1f:8e:9f:18:c0:96:d0:c2:f9:9d:
75:4f:5a:eb:4b:40:b3:f3:30:43:97:25:f7:e3:27:
83:3d:56:8d:ed:f6:bd:27:00:c8:07:68:c4:30:af:
2c:a7:ca:90:7e:cb:b3:3f:a5:45:55:44:8d:3b:96:
b5:68:15:c9:89:d5:ef:c3:59:85:48:35:7c:5c:95:
55:1f:92:45:c3:df:b0:52:7f:d4:35:c0:29:3a:78:
2e:30:3b:d9:82:48:ea:e2:e6:d3:92:7f:22:9c:4d:
08:d9:af:17:13:4c:7a:a5:1c:a5:0d:7a:ad:f5:40:
07:3c:f5:14:33:fb:92:d1:76:5e:29:30:56:a8:26:
79:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D8:22:08:40:DB:DD:38:98:87:FF:D3:D5:59:75:77:46:F4:D0:A8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xtgiCEDb3TiYh__T1Vl1d0b00Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:50:f9:d3:28:18:64:d6:6c:b8:57:53:7d:e4:0e:2c:96:95:
23:bc:1b:73:37:37:79:2d:75:61:ae:89:1e:a9:2f:72:8e:a3:
db:4e:ca:97:12:a3:e2:01:57:4f:8d:09:3b:39:8e:72:45:70:
05:18:40:bd:88:e8:05:c8:c5:cd:64:cd:28:be:9e:bc:f0:5f:
1d:aa:f0:da:b0:0b:47:e3:20:37:45:a9:3b:53:4e:37:aa:31:
6d:fe:9e:a1:c6:f2:cc:69:c6:5e:7d:d8:d5:ee:91:f1:8e:b6:
db:a9:02:1f:5b:53:fe:79:05:25:33:2e:67:bd:de:84:e2:2e:
23:b5:65:c7:e0:71:47:77:69:6d:18:d3:cc:55:de:45:1e:db:
0e:13:1d:00:4f:b9:55:19:8a:69:de:3a:80:40:59:5a:ec:a7:
55:43:ef:b6:cc:bf:31:50:95:84:a2:dd:0f:51:0d:0d:fc:0c:
a8:b7:b9:28:90:09:01:99:c9:ca:40:7a:73:6c:24:09:24:bc:
6f:1f:83:48:db:43:6b:86:08:ba:5b:08:f2:f0:c1:22:80:38:
98:ce:f4:ec:40:11:74:03:ad:04:78:88:57:3b:6c:58:02:2b:
aa:3b:12:dd:5d:b3:b9:b7:9c:8f:d0:7e:51:a3:48:5b:1d:cd:
de:5b:70:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:55:30 2025 by rpki-client