Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/00Dda90Sy4qJw_V5cIxO1r3XV1c.roa
File: 00Dda90Sy4qJw_V5cIxO1r3XV1c.roa (raw, json)
Hash identifier: Tcckr/8Dud5Oed9Sdrefk007Ng/vJB9BgjliNSfv2Vc=
Subject key identifier: D3:40:DD:6B:DD:12:CB:8A:89:C3:F5:79:70:8C:4E:D6:BD:D7:57:57
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B61619752BB97F6CC90DE452B330DFD29
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/00Dda90Sy4qJw_V5cIxO1r3XV1c.roa
Signing time: Tue 24 Oct 2023 11:11:07 +0000
ROA not before: Tue 24 Oct 2023 11:11:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:615b:8210/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:61:97:52:bb:97:f6:cc:90:de:45:2b:33:0d:fd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 11:11:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d340dd6bdd12cb8a89c3f579708c4ed6bdd75757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:33:e0:1a:33:ee:e3:43:68:9a:b8:b5:5a:
d2:e9:97:02:9d:18:5f:fa:6f:f8:d4:51:0f:9a:f9:
e3:42:90:e7:ef:8a:1f:fc:27:d6:a0:d5:64:45:62:
0b:1d:73:24:52:29:41:48:c1:94:d4:d9:94:3f:02:
5c:e2:1e:03:15:f5:54:26:9b:59:38:84:a6:90:e0:
e0:cb:54:f0:15:b6:e6:23:0f:b7:6e:bf:82:97:90:
18:b3:e3:8f:24:31:17:24:f8:cf:2f:a9:69:95:c9:
8d:66:30:52:f4:c7:83:6c:09:98:67:b8:aa:d0:4f:
af:3d:be:0b:ba:c7:ae:3e:c3:ad:c0:81:87:2a:09:
91:ed:c1:07:50:e9:9f:03:73:5a:f1:97:c6:25:f1:
c3:44:ae:77:7c:ff:ab:6d:89:c1:6f:d2:59:27:72:
1c:35:1d:33:88:38:9c:b6:9c:ba:44:89:91:a8:d5:
b1:57:66:f5:28:cb:e2:8a:c2:68:e4:44:31:c0:80:
ea:9b:d5:06:d2:bb:21:26:3d:1f:57:6e:bc:09:41:
72:84:be:82:ed:4f:2a:d2:ff:c2:70:1b:c0:2d:34:
84:ef:d6:0b:a2:d1:77:d7:82:4d:98:cf:58:86:34:
d8:b7:4b:b3:77:30:7f:24:16:3a:27:d7:0b:34:ea:
80:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:40:DD:6B:DD:12:CB:8A:89:C3:F5:79:70:8C:4E:D6:BD:D7:57:57
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/00Dda90Sy4qJw_V5cIxO1r3XV1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:37:98:41:8b:a2:e5:f6:3d:d9:8d:42:3a:20:0f:03:65:53:
cf:33:4c:77:bc:f9:06:ee:85:48:24:de:73:f2:3c:bb:c8:70:
66:39:3b:41:86:46:5a:45:ae:e0:b9:c2:84:2a:c3:6e:53:6f:
e5:60:f3:99:86:e6:18:1c:b3:1c:10:9b:ce:69:15:9c:79:82:
a8:f4:5b:82:5c:be:92:a5:7e:35:30:d3:46:66:b9:a0:9b:e1:
99:50:94:8f:d1:2d:13:6b:96:33:3c:7c:06:7b:1e:e1:3f:04:
aa:14:92:89:21:9c:48:cd:34:57:aa:4d:88:3d:94:96:a8:38:
45:59:8d:f1:d1:91:0d:35:f1:1d:5e:37:bb:b5:c8:34:bd:ea:
46:0f:bf:ff:5a:37:09:90:c8:15:43:57:51:e1:02:c1:4f:85:
5b:77:0d:99:fa:8c:69:0b:14:b1:55:85:62:6c:f7:f7:a5:57:
20:fd:5d:0a:9e:ef:3b:27:f9:f5:b5:cf:7e:3b:6b:69:10:80:
23:34:f5:e1:a1:2a:e1:37:2e:fc:d5:61:e0:a5:d7:9a:44:fc:
eb:5b:21:6b:40:35:7e:16:52:52:92:d0:e9:87:55:98:c3:20:
95:bd:23:17:e7:bc:16:bd:2d:10:f3:31:bd:d5:b8:a4:6a:5a:
2c:70:91:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:50:29 2025 by rpki-client