Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0kwPZrl17jvlVfZLTZFCoWCxyPY.roa
File: 0kwPZrl17jvlVfZLTZFCoWCxyPY.roa (raw, json)
Hash identifier: 3YNJB31rPkNIJCxz68GYwXOMibQo7JZKBEUyE4pvVjU=
Subject key identifier: D2:4C:0F:66:B9:75:EE:3B:E5:55:F6:4B:4D:91:42:A1:60:B1:C8:F6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6D2977B14BEDC4127B249458049932E9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0kwPZrl17jvlVfZLTZFCoWCxyPY.roa
Signing time: Thu 26 Oct 2023 18:05:16 +0000
ROA not before: Thu 26 Oct 2023 18:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:6d28:c69b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6d:29:77:b1:4b:ed:c4:12:7b:24:94:58:04:99:32:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 18:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d24c0f66b975ee3be555f64b4d9142a160b1c8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:39:fe:05:3a:ac:7a:88:b1:be:69:93:8d:
e2:51:dc:92:0e:93:24:ec:5c:53:10:7c:66:c1:a3:
2a:f6:58:c8:ac:81:f3:0f:83:67:2b:4f:92:19:ea:
5e:b6:29:0b:79:9f:76:17:52:bc:35:5a:6e:62:d8:
63:9f:03:5d:7b:7a:aa:19:03:66:0e:aa:d7:6f:94:
b9:cd:46:23:cb:8b:61:61:1f:e7:dd:d1:69:6a:5e:
90:dd:31:dd:e5:59:58:f2:f5:f9:7e:f0:88:66:16:
28:39:45:f6:32:d0:b9:8e:99:9c:de:1c:67:40:d4:
46:ba:e3:90:58:ec:66:7b:60:82:0a:71:a8:69:7c:
49:97:a5:bc:3c:2c:cb:7f:2e:19:2b:09:8c:66:64:
d5:a7:bf:e8:e9:c6:ab:f6:9e:88:63:9d:ce:43:df:
c0:00:54:06:59:3b:9f:60:60:e0:ce:17:cf:13:4f:
1d:ef:11:9d:6e:91:85:de:f5:80:1f:7c:5a:69:73:
87:fc:84:c6:4d:d5:6e:db:36:0f:06:77:87:e5:62:
e0:6b:30:76:f7:3e:42:28:3d:dd:03:e5:79:24:cc:
20:59:6f:63:a6:23:62:a5:f1:76:03:fd:da:a4:48:
95:da:53:d2:ad:4d:78:0d:06:0a:05:e1:1e:fb:e8:
48:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4C:0F:66:B9:75:EE:3B:E5:55:F6:4B:4D:91:42:A1:60:B1:C8:F6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0kwPZrl17jvlVfZLTZFCoWCxyPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:95:c5:91:67:e4:ce:ec:a0:70:4d:6d:8f:04:74:b2:0f:3b:
60:d2:01:3c:ce:ae:a0:e5:3c:b7:9f:a2:fa:64:f3:ff:58:4d:
75:68:c5:61:f7:9d:cb:48:1d:5a:0e:c3:0e:d0:4d:94:c3:5e:
23:cf:7b:a3:17:5c:b9:e2:da:ec:82:89:f3:89:05:41:91:f8:
8e:3c:ab:2c:10:12:28:93:56:31:1b:6c:1f:2b:f5:ba:01:1d:
49:55:87:90:9e:01:7b:ce:ae:09:a6:23:c9:85:26:6e:79:42:
22:e6:5d:70:9b:d2:6e:2c:71:e5:7b:26:ef:45:82:0b:32:81:
90:bb:5c:ab:06:ca:c1:b5:c2:51:b9:7b:2b:ae:a8:7b:dd:96:
7b:ed:f7:46:84:a4:1f:23:7b:4f:0a:50:71:40:b2:54:61:e4:
66:9c:f7:26:ce:29:8d:3b:59:66:dc:b7:c5:68:3b:17:fb:43:
54:c9:7e:bd:59:22:55:1a:54:a9:ef:8a:c6:73:97:f6:6c:89:
16:e1:74:05:c4:1e:98:8b:f6:28:d9:6d:da:e4:57:eb:21:19:
da:d2:36:c8:91:9b:d4:00:52:5f:10:69:8f:d6:67:dd:e5:53:
8d:df:e8:a1:0e:c1:55:5b:4c:3d:80:45:e4:6d:a8:32:c5:be:
55:4d:c8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:56:39 2025 by rpki-client