Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0A1exgejk2OoqPmau7xgGFuFQWg.roa
File: 0A1exgejk2OoqPmau7xgGFuFQWg.roa (raw, json)
Hash identifier: 3oqgznMxL3FmkZCp8qehAeXUK9C9TIuigiYkWkyhOoI=
Subject key identifier: D0:0D:5E:C6:07:A3:93:63:A8:A8:F9:9A:BB:BC:60:18:5B:85:41:68
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5EFFFAD749E852BDA9BE982D25186BC5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0A1exgejk2OoqPmau7xgGFuFQWg.roa
Signing time: Tue 24 Oct 2023 00:05:16 +0000
ROA not before: Tue 24 Oct 2023 00:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:5eff:73bd/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5e:ff:fa:d7:49:e8:52:bd:a9:be:98:2d:25:18:6b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 00:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d00d5ec607a39363a8a8f99abbbc60185b854168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f5:5a:a4:96:a5:5c:37:a8:a6:6f:9c:38:4a:
02:ac:7a:da:39:87:67:bd:dd:cc:93:dd:41:d6:8e:
79:78:75:b2:5c:39:a5:6a:79:37:94:cc:5e:e4:6c:
d6:c4:e5:33:e8:d7:4b:92:df:05:0d:26:72:3d:f6:
42:95:36:b8:b7:33:0b:e7:c8:d2:2c:7f:62:32:b6:
44:3c:b8:4b:6b:3d:71:b9:b0:61:f4:43:72:6d:3a:
cf:42:9a:b4:e3:a2:02:ce:cd:50:dd:97:d5:9d:67:
f1:39:26:80:b7:58:af:22:db:68:43:ae:92:d5:b3:
be:c8:ce:a3:b9:00:fb:34:5e:94:4e:4c:92:ce:98:
fc:8f:29:6d:b7:71:03:1b:ee:b2:5e:a1:b0:2b:c0:
68:e2:9e:d3:0b:ef:c0:cc:f3:fe:cf:16:59:4e:e0:
e1:0d:54:ca:d9:0d:35:b5:c9:b0:57:68:65:96:87:
95:0a:ba:dc:bf:0a:a4:17:59:be:91:7a:c9:4d:88:
87:01:04:47:03:2d:d6:e5:ae:f1:77:47:29:d6:b8:
96:ff:eb:9d:80:ce:1e:6e:65:7a:90:46:f2:15:7a:
23:b5:31:91:80:82:39:f1:6a:c7:09:c9:85:72:8c:
e8:68:81:bf:ba:00:9e:ce:f6:31:14:05:48:2f:06:
db:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0D:5E:C6:07:A3:93:63:A8:A8:F9:9A:BB:BC:60:18:5B:85:41:68
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0A1exgejk2OoqPmau7xgGFuFQWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:4a:2e:df:37:2b:bc:77:5c:50:82:20:a4:d4:19:04:d3:01:
fa:b3:e4:0e:6e:ef:ea:ba:0a:23:5b:e6:d4:91:3a:24:75:bf:
cb:92:0c:5e:b4:97:16:2a:e6:3b:c1:63:ee:7c:9f:6e:4d:81:
28:42:84:e4:bd:7a:0f:5d:05:28:de:21:ca:2a:43:d5:10:72:
12:b3:fd:79:af:9b:61:ea:65:a2:61:9f:50:ab:00:3f:31:38:
04:81:7b:5b:90:6e:9c:78:fa:05:4a:81:e0:2f:6b:59:5d:a4:
5d:a7:7b:61:48:91:81:4d:ea:10:49:43:05:48:c0:9b:32:72:
d5:01:c1:a0:57:84:40:dd:0c:b3:98:6a:94:9a:dc:76:de:a4:
1b:06:9c:2a:66:f0:4d:6f:fe:63:07:b3:e7:4f:9b:63:6c:29:
09:19:aa:98:b7:e6:66:51:61:ad:4d:7a:04:6c:89:e0:03:e9:
fa:cf:04:9f:45:c7:81:1a:49:d1:3b:b6:f8:8e:09:92:62:f9:
1f:07:02:71:1d:68:e1:56:0d:8e:5b:79:1d:8e:e8:a3:0b:e9:
b1:6e:03:08:71:9e:d7:4b:d2:96:43:e0:57:d7:32:b9:46:7f:
51:c3:db:af:66:0b:32:97:87:17:10:8a:f0:24:88:56:9e:13:
e9:9c:91:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:15:11 2025 by rpki-client