Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xpHmUu7dU7-cWfOAxDeamu2sYxM.roa
File: xpHmUu7dU7-cWfOAxDeamu2sYxM.roa (raw, json)
Hash identifier: OsRrPNQ5pHd+hG2hnj5E7sw0rrf/WLzpZzG1nGuCpiY=
Subject key identifier: C6:91:E6:52:EE:DD:53:BF:9C:59:F3:80:C4:37:9A:9A:ED:AC:63:13
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B60BC02DAED09778EC188C03E465FD314
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xpHmUu7dU7-cWfOAxDeamu2sYxM.roa
Signing time: Tue 24 Oct 2023 08:10:16 +0000
ROA not before: Tue 24 Oct 2023 08:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:bc:02:da:ed:09:77:8e:c1:88:c0:3e:46:5f:d3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 08:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c691e652eedd53bf9c59f380c4379a9aedac6313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8c:67:e3:c5:56:01:48:6a:27:c9:d9:40:c4:
91:ed:cc:a9:da:10:08:f9:19:4d:c0:06:fa:06:16:
e3:b9:ff:ac:ed:2d:03:6c:26:19:f4:26:c3:26:39:
28:9e:3a:e9:74:ac:b2:8b:12:40:e1:e6:4d:ab:57:
4f:17:a4:69:f3:87:22:55:d5:77:1d:18:06:51:84:
39:bb:37:a5:a0:ad:d6:f0:65:c9:57:b4:c0:96:dd:
e6:0a:6d:34:78:06:2c:02:cc:b9:6b:e8:35:18:b5:
1e:71:b1:ea:5a:8b:b0:5b:de:27:3b:b6:49:36:1d:
18:f5:7b:3c:96:aa:df:13:97:6f:91:9c:ee:48:e5:
5f:33:c2:ec:49:3e:f4:26:0e:fd:74:a4:67:b6:1c:
96:57:6c:b6:18:03:03:ed:9f:63:5a:d2:92:32:94:
b5:77:9b:db:89:7a:f5:39:4f:0f:80:af:aa:60:9c:
e0:f4:79:c3:81:ef:2b:f6:f2:d2:1f:00:f3:5d:08:
59:94:e3:b2:15:09:3d:ad:8a:58:40:44:1e:c8:4f:
eb:8f:ef:cd:54:a0:60:7f:95:73:b0:6c:ae:c8:82:
f6:b9:04:5a:d5:5b:23:2c:e8:c3:40:0a:9e:10:a4:
66:67:a2:3c:36:93:c2:2b:40:54:cc:af:58:c9:8c:
cd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:91:E6:52:EE:DD:53:BF:9C:59:F3:80:C4:37:9A:9A:ED:AC:63:13
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xpHmUu7dU7-cWfOAxDeamu2sYxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:ae:74:fa:f6:fd:f5:f7:15:d0:7c:84:90:da:c9:b2:4f:9c:
52:71:9c:13:76:d0:32:8b:1b:76:fa:c0:b2:49:80:1b:88:61:
be:61:68:13:6e:fe:84:25:1a:5e:7e:96:4b:46:bb:3f:9a:ce:
d3:db:ca:e1:e9:fb:53:a4:d2:b1:55:66:91:4a:f4:45:2e:fa:
6f:d4:7d:62:ac:85:8b:2f:68:5a:8d:ea:ae:92:c9:3c:95:ed:
0c:38:1d:69:2c:5a:5c:52:b9:ac:d8:60:aa:1b:70:90:07:1c:
d0:0b:bf:4e:b3:ec:45:c7:f6:1f:63:39:fc:4a:99:56:72:7f:
8b:34:b4:4a:1a:b0:dd:05:7d:79:a2:89:88:48:15:d9:02:4c:
0a:16:79:b7:78:77:df:e9:b7:8e:25:ac:ed:39:40:12:16:17:
73:54:b0:8a:ac:98:5a:37:4c:df:c5:17:1c:cf:b0:e3:d9:87:
47:a0:ec:45:38:e9:dd:ec:fc:e1:44:d9:de:f9:bc:bd:bc:08:
9b:97:c4:f7:23:58:2d:dc:ae:2c:c3:7f:85:ca:55:44:71:79:
fa:7c:4d:91:99:6f:4b:a7:5d:dc:16:e4:ee:1a:02:73:b3:da:
40:45:19:cf:eb:36:b6:39:80:fe:0a:90:bd:64:5a:0a:30:19:
75:b5:ee:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:39:17 2025 by rpki-client