Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/n21n6Pus3vGrld_uzEJFv9veh-I.roa
File: n21n6Pus3vGrld_uzEJFv9veh-I.roa (raw, json)
Hash identifier: yc2liobyoQyW6M1lRuIjp5jjtheoyE3iSL5uyn3CvhI=
Subject key identifier: 9F:6D:67:E8:FB:AC:DE:F1:AB:95:DF:EE:CC:42:45:BF:DB:DE:87:E2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD7626FC6269295E11C51E0CBFD0AEDD3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/n21n6Pus3vGrld_uzEJFv9veh-I.roa
Signing time: Wed 27 Sep 2023 16:04:27 +0000
ROA not before: Wed 27 Sep 2023 16:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:d762:5b73/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d7:62:6f:c6:26:92:95:e1:1c:51:e0:cb:fd:0a:ed:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 16:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f6d67e8fbacdef1ab95dfeecc4245bfdbde87e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:d2:d7:df:f8:14:6b:2f:6d:0d:ab:a2:50:
28:06:8b:d0:ea:0e:11:c0:c7:67:05:57:38:96:27:
bb:e7:d1:0f:57:ff:55:aa:89:bb:28:ea:43:2a:41:
6d:c1:6d:dd:f4:c0:aa:a5:1f:c9:6a:27:56:70:8a:
c5:4f:a2:6c:89:90:13:72:b4:0d:fe:10:e3:c5:c8:
d6:69:d5:60:54:c0:95:e1:a4:e4:68:f3:f7:a3:f6:
49:fa:ba:5f:f9:2e:27:3d:99:0f:ba:44:ee:59:78:
7a:74:f4:33:7d:2b:24:d8:76:66:ec:7c:9a:c0:1c:
49:56:b9:06:8b:f0:33:8c:2a:00:62:5c:92:c3:a9:
24:9b:ba:33:3a:98:7c:fb:85:dd:a5:b6:71:36:bf:
6c:fc:2f:7b:1f:2f:0a:ad:9e:bd:fd:f6:97:0d:97:
25:90:ca:d5:e3:95:b5:e7:f0:a4:56:17:eb:ac:65:
19:29:8b:d5:a1:9a:5a:7f:44:80:df:a2:87:ad:fd:
c7:de:3f:5d:65:11:7f:c9:75:74:0f:82:d2:8a:81:
c3:51:d0:10:58:05:ec:bd:9e:ed:51:50:1c:b6:72:
88:ab:a9:49:52:1e:cb:01:fa:3a:5d:96:94:05:86:
05:27:bd:8b:20:4e:e7:7d:40:a2:69:37:fc:50:bf:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6D:67:E8:FB:AC:DE:F1:AB:95:DF:EE:CC:42:45:BF:DB:DE:87:E2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/n21n6Pus3vGrld_uzEJFv9veh-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:09:44:56:c2:2e:85:37:57:86:15:3e:5c:0e:ca:71:0e:0f:
48:df:37:6c:4e:71:fc:59:27:2c:09:8a:e5:c6:e7:8c:13:b5:
17:48:54:66:2c:6d:28:4a:4e:a2:78:60:83:7e:37:bf:64:fa:
90:e8:1c:eb:df:0d:69:97:3d:49:bb:b9:3f:8b:33:08:45:7f:
44:06:49:e9:44:3e:ee:ee:c8:e3:7b:aa:b6:d5:cb:93:48:cc:
89:cf:48:48:65:b0:e9:42:ee:e6:d7:06:99:07:e4:e4:d2:3f:
e3:2b:32:b0:84:aa:c4:4e:9f:f1:f5:2d:9d:b0:cb:3e:5e:f8:
b8:a9:e4:da:f1:29:a9:ff:dc:c7:b1:95:a2:3c:4d:e9:ff:f6:
a6:10:f1:84:b1:2f:1b:12:e1:a5:b6:0d:f0:68:14:d3:d1:eb:
a0:c8:06:ae:bf:4a:ab:84:41:de:a0:20:9e:69:48:58:ca:92:
d8:6d:00:ea:e3:9b:88:1d:18:78:d7:85:d4:a8:ce:ab:12:79:
c0:a1:93:a0:ae:ee:60:c6:d3:0c:b1:45:6a:9f:5c:97:37:a4:
62:2a:ff:24:69:14:c8:bf:34:e8:0e:99:81:79:a4:7b:b3:12:
76:6a:bd:24:cf:30:2d:ce:ed:e8:3c:96:8a:25:95:28:89:68:
fd:b1:86:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:35:26 2025 by rpki-client