Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/khS39E3vYsdGEqfjZLo3FftX8q4.roa
File: khS39E3vYsdGEqfjZLo3FftX8q4.roa (raw, json)
Hash identifier: IJw1DAtjkfYffaN1XcMEXgiAKEh0IYPKzH7dbS0sVt8=
Subject key identifier: 92:14:B7:F4:4D:EF:62:C7:46:12:A7:E3:64:BA:37:15:FB:57:F2:AE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B98F5EEA542A0B0F5CAB6350A29F38D96
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/khS39E3vYsdGEqfjZLo3FftX8q4.roa
Signing time: Sat 04 Nov 2023 06:12:16 +0000
ROA not before: Sat 04 Nov 2023 06:12:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:98:f5:ee:a5:42:a0:b0:f5:ca:b6:35:0a:29:f3:8d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 06:12:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9214b7f44def62c74612a7e364ba3715fb57f2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:97:30:56:3a:fb:18:67:cc:a7:1d:d2:8c:
d4:2c:41:47:c0:ef:60:44:e3:58:8e:8c:2c:ef:fe:
46:84:83:56:ea:4e:8b:76:5d:f5:41:9b:c3:22:0b:
99:7a:15:a7:06:fb:be:a5:aa:42:74:6b:6c:0f:8b:
14:31:3a:94:e9:2d:87:16:f8:5d:b9:fa:96:7c:f1:
28:46:4a:f2:f7:8a:da:d3:4f:8f:39:47:1e:02:d9:
90:e9:dd:3e:5d:e6:84:b4:d6:a9:d2:1e:13:c4:07:
1c:7d:b6:8b:f9:33:c7:86:7e:7f:67:91:b4:ea:fb:
63:dc:15:f7:cb:f9:49:28:3c:ea:aa:b7:e3:07:31:
86:72:cf:35:43:8c:10:91:00:14:9c:77:b4:8e:61:
ff:a5:b0:5d:3c:2d:3b:c4:1f:b0:ce:d9:c8:41:ad:
b4:5d:d1:90:ef:94:e0:db:9e:5f:0b:7b:bb:ce:6c:
06:76:07:7d:5c:c4:86:ee:1a:ad:97:3a:db:ab:e7:
81:b9:e4:27:6d:63:09:26:1c:c6:e4:ba:c4:1e:e8:
2b:1b:7c:62:c6:d5:5e:23:ea:dd:05:cf:55:4a:17:
17:dd:b0:69:43:db:5e:31:21:da:17:6d:60:67:fb:
03:7a:50:56:54:08:b3:63:4a:d8:5b:60:1b:a2:ad:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:14:B7:F4:4D:EF:62:C7:46:12:A7:E3:64:BA:37:15:FB:57:F2:AE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/khS39E3vYsdGEqfjZLo3FftX8q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:b1:ac:37:1e:3e:a7:fc:24:2c:e3:3b:be:24:18:b1:5c:c2:
81:12:e7:0b:73:47:09:64:f4:b2:48:01:20:28:f7:36:e6:0a:
4e:08:ea:aa:e1:d0:75:06:73:9a:c0:fd:40:88:b0:ee:a8:ba:
73:88:8f:89:16:17:21:e8:63:fc:0e:fc:f1:d4:36:18:a1:16:
50:60:3b:04:25:66:ea:af:8a:1b:26:ea:0a:9b:79:ef:e8:bf:
bb:e3:44:55:92:e2:68:8d:2e:79:9a:07:04:47:2b:57:a8:57:
e2:f6:ed:87:0e:36:54:bf:1f:3d:23:b3:fb:f4:16:50:76:89:
26:40:61:7f:4e:33:ee:71:85:38:9f:e9:25:2a:af:fc:fc:22:
5f:a6:f9:a9:78:6a:03:96:b6:71:cd:dc:5c:dc:f5:f4:fb:4c:
95:6e:dc:9d:df:4a:75:c0:c6:5f:e8:a0:30:cc:b5:f1:14:93:
05:16:69:31:57:04:6e:e1:bd:76:68:19:ab:69:d7:9e:f8:d6:
98:62:3a:56:b9:1a:59:b3:2c:31:70:63:1e:6e:aa:fd:6d:ce:
ae:6a:00:bb:28:f0:30:ec:7d:13:b5:76:bf:f7:cb:ee:04:8d:
58:47:ba:ba:28:48:7c:fa:2b:bb:5c:5c:20:46:86:44:1b:a4:
fa:cc:c2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:25:50 2025 by rpki-client