Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xF6iQioRG3htFLqjDyKpJ6HSrD4.roa
File: xF6iQioRG3htFLqjDyKpJ6HSrD4.roa (raw, json)
Hash identifier: wFqSdgDwT6CC4AOju3y1rfQ+HvaXkkQnrs7cUoyYNk4=
Subject key identifier: C4:5E:A2:42:2A:11:1B:78:6D:14:BA:A3:0F:22:A9:27:A1:D2:AC:3E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1347F27724288F4AA229B51E4C60C5E6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xF6iQioRG3htFLqjDyKpJ6HSrD4.roa
Signing time: Mon 09 Oct 2023 07:12:44 +0000
ROA not before: Mon 09 Oct 2023 07:12:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:13:47:f2:77:24:28:8f:4a:a2:29:b5:1e:4c:60:c5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 9 07:12:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c45ea2422a111b786d14baa30f22a927a1d2ac3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:fc:7b:5d:c8:87:4d:5a:7c:be:8f:c1:12:
c5:47:55:1e:b5:a2:a2:09:e2:57:b0:b7:89:6e:fc:
f7:00:7c:ae:b8:37:38:54:8c:10:c7:6d:f9:d8:e8:
53:70:ef:58:57:72:87:69:78:d6:83:df:51:e3:59:
7d:38:b3:28:a6:f8:2b:e5:d0:30:02:73:7b:c0:db:
d5:6e:4f:5b:df:0b:f2:bd:a4:3a:0e:8c:cb:9c:1b:
c5:e1:a4:21:b4:01:44:6e:c1:64:c8:bc:27:ff:6c:
6c:a3:e2:ed:93:6a:29:ac:01:22:f9:67:d7:61:0c:
4f:4e:5d:eb:0e:88:b3:42:ee:be:5a:ee:10:c1:6a:
fb:aa:44:57:0f:73:20:96:36:04:e9:24:ac:e1:d7:
3f:ca:72:2d:23:c9:81:1f:3d:69:79:66:5f:55:c8:
68:e6:97:7d:a5:ff:8e:2a:8b:cd:00:01:b3:3b:ed:
a3:fe:2c:71:22:05:a5:08:b2:b3:dd:f5:47:87:6b:
08:8e:56:ec:d2:9d:79:d0:7e:c6:11:e8:c1:35:dd:
d0:74:8e:c9:41:04:ab:42:a5:5c:38:b0:70:ef:68:
f3:ff:c9:ca:f7:ff:3c:c8:48:10:2e:94:1b:c1:88:
08:03:e2:f4:5b:ac:6e:44:b2:5c:bc:6f:9c:89:d4:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5E:A2:42:2A:11:1B:78:6D:14:BA:A3:0F:22:A9:27:A1:D2:AC:3E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xF6iQioRG3htFLqjDyKpJ6HSrD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:f9:cc:44:22:61:2e:96:77:7b:2f:ac:a6:12:fd:33:e2:65:
27:ea:06:20:24:26:b2:da:c4:79:c9:34:0c:00:8b:c7:bb:1a:
de:f9:69:53:45:b9:ae:d8:a3:fb:9d:6a:53:d0:26:94:d2:57:
1b:76:a5:37:88:9c:6e:89:cb:57:71:7b:58:2b:d6:1b:f1:89:
c7:ec:ea:d5:17:76:26:97:f2:b6:13:b4:23:6e:1e:12:b5:7f:
8d:45:70:b6:26:d5:b3:67:cd:02:98:65:b4:d5:81:0f:fb:17:
42:cd:fe:93:02:9d:10:a0:37:1e:a8:bc:17:0b:6a:a3:f7:e3:
35:d4:1c:02:30:c4:d1:61:36:d5:c2:45:01:a9:67:77:a6:02:
54:8c:ad:bd:6f:03:8b:3c:d5:12:48:4b:19:da:45:e2:5f:dc:
71:6f:d2:04:55:48:5d:4c:76:56:04:df:fb:35:a6:5a:34:5d:
f7:78:e0:54:25:58:ee:91:fc:59:f6:a0:da:9f:45:f5:76:19:
fd:b6:bf:c3:27:73:f4:50:c4:30:3c:b9:04:9d:7e:70:0a:2c:
6e:dc:5b:68:94:a0:e8:87:6b:5e:f9:70:11:22:c5:ba:c5:5b:
e0:ed:97:ec:a6:e3:cb:00:16:df:f1:ba:52:8b:3d:7b:68:e4:
36:37:64:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:41:01 2025 by rpki-client