Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xx17w9MfqVp0fCASj6jKvvKc0VI.roa
File: xx17w9MfqVp0fCASj6jKvvKc0VI.roa (raw, json)
Hash identifier: 8b1i1WIwyOAWOTkc7Zi/Rcxh1Q7YubIvM0QO7AzR3so=
Subject key identifier: C7:1D:7B:C3:D3:1F:A9:5A:74:7C:20:12:8F:A8:CA:BE:F2:9C:D1:52
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C64FE7326D09207E8864618D98D3C8D77
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xx17w9MfqVp0fCASj6jKvvKc0VI.roa
Signing time: Wed 13 Dec 2023 21:04:06 +0000
ROA not before: Wed 13 Dec 2023 21:04:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:64fe:6c22/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:64:fe:73:26:d0:92:07:e8:86:46:18:d9:8d:3c:8d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 21:04:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c71d7bc3d31fa95a747c20128fa8cabef29cd152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:48:06:93:bf:20:3e:2f:86:5b:c9:be:d5:
a8:49:68:50:9d:6d:9a:8e:4a:a4:36:1c:86:88:fd:
67:44:41:77:8a:7e:aa:2c:ba:e2:8a:fc:cc:32:41:
37:7f:e2:9d:61:0a:8d:c1:99:4b:a0:5d:aa:fc:4b:
a2:49:a5:5c:f6:c2:2d:8d:95:d0:d8:84:ec:c0:96:
3b:38:54:03:5b:a2:8c:57:9b:15:f5:e3:1d:96:76:
b0:b5:8d:16:03:4e:96:a5:29:14:1b:1a:11:0e:d2:
9b:bd:7f:01:4c:17:3c:cc:b1:b0:01:50:66:f5:f4:
2c:55:f9:97:01:c8:d5:d9:5c:29:c5:f6:3c:73:db:
63:61:a2:73:8c:03:c8:61:11:ed:a9:4b:72:16:1f:
72:8a:5c:d8:a4:d6:d9:de:d0:ca:a3:f8:f5:22:f0:
32:e1:69:ce:d9:c9:c8:e4:77:b8:28:ef:6c:ef:7a:
b1:68:44:8c:3c:d2:4d:b1:25:db:44:83:fe:d8:d5:
71:a3:78:31:c2:a4:8d:d6:88:44:8a:dc:d1:29:db:
bf:04:d2:32:18:12:65:f6:fc:e7:3d:3c:60:5a:ba:
da:2f:33:91:52:7f:fd:f0:44:fd:4c:86:b8:31:79:
11:e6:c1:67:ad:96:27:ac:67:84:71:18:4c:e0:85:
f1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1D:7B:C3:D3:1F:A9:5A:74:7C:20:12:8F:A8:CA:BE:F2:9C:D1:52
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xx17w9MfqVp0fCASj6jKvvKc0VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:cf:65:47:4b:c1:49:12:f2:22:56:15:e4:3c:88:8b:d4:a5:
99:eb:b1:18:69:1b:cc:47:cc:fd:9c:b0:b6:34:93:1a:64:91:
f9:e3:d5:8a:5a:2b:d2:52:55:bc:11:07:94:c2:82:e5:0c:62:
79:b3:1c:8c:11:f2:91:2e:1d:38:a8:83:f1:30:03:22:8c:4e:
0d:a5:88:fd:45:61:fa:60:bd:7f:7f:24:ab:ce:73:95:c1:8a:
70:1a:2a:af:6a:91:2b:8d:c1:13:7c:72:38:ad:f9:39:e3:6d:
23:d4:f6:80:ae:16:36:ca:87:3d:ed:5e:41:0a:8f:7a:d1:39:
72:2d:46:fd:76:6b:62:b9:59:29:da:01:b0:2b:fb:e3:2d:e9:
5f:59:46:dc:41:c9:77:01:e7:a8:1d:06:60:a9:89:5e:48:5c:
f8:ca:5f:83:84:39:18:99:18:ec:75:c3:37:4a:2c:cf:82:2c:
df:17:a4:2c:58:ca:63:b4:db:28:38:bb:4b:0c:67:45:5e:ea:
4d:b3:a1:22:c6:4e:dd:ba:40:ce:41:05:0b:88:db:36:ec:5f:
ae:03:57:54:1c:10:2b:a9:45:8f:42:e0:27:64:29:56:9a:28:
82:31:27:26:44:d9:5c:40:3f:a3:2b:f3:f6:11:c0:4b:d1:78:
4f:5b:4c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:12:40 2025 by rpki-client