Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-KcobZUz3vyO9XxObMFgZi0q9Hw.roa
File: 1-KcobZUz3vyO9XxObMFgZi0q9Hw.roa (raw, json)
Hash identifier: Ielx02IfHrkRrdpscMGz8pa6CpcTqJDaIFhHoZ2MN/E=
Subject key identifier: F8:A7:28:6D:95:33:DE:FC:8E:F5:7C:4E:6C:C1:60:66:2D:2A:F4:7C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4BE62595B3A8F0C50973E6FECF07A65F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-KcobZUz3vyO9XxObMFgZi0q9Hw.roa
Signing time: Fri 20 Oct 2023 07:04:15 +0000
ROA not before: Fri 20 Oct 2023 07:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:4be6:2122/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4b:e6:25:95:b3:a8:f0:c5:09:73:e6:fe:cf:07:a6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 20 07:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8a7286d9533defc8ef57c4e6cc160662d2af47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2c:4f:9f:4e:e8:d4:03:70:f2:21:0d:05:bd:
26:c2:35:b1:04:aa:bd:7e:56:9b:27:0e:0b:43:4a:
ff:2f:5f:06:72:17:96:a6:52:5d:b2:a2:f4:5b:dc:
2a:65:b5:7c:e2:6e:a7:29:7a:fe:5b:bf:7a:7a:90:
3b:e6:2d:d2:16:38:c6:a9:d9:2e:d8:79:d6:c1:b7:
da:1f:40:42:13:92:1a:bf:1d:73:92:23:a2:32:0f:
86:fd:9e:cd:70:46:32:16:68:3a:a5:89:43:90:f9:
86:e0:59:6d:4f:eb:52:d1:e1:26:ae:da:37:f4:a3:
44:fb:5f:5c:4f:9c:b6:e6:e8:25:4e:2a:ca:ae:25:
e4:41:78:70:8d:21:ad:b3:d2:70:0d:c6:fb:c6:a9:
c9:7d:6e:cd:7f:d0:29:73:a2:57:06:8a:fa:2e:f8:
7d:89:ef:47:82:06:f8:81:99:96:38:24:92:fc:fa:
3f:2e:4c:9b:50:a1:6e:4b:ee:2f:5f:8f:f5:5a:89:
89:88:ec:63:05:05:97:f8:d4:8c:a8:89:65:b2:fe:
6d:f6:d8:62:cc:eb:9d:8a:2d:1a:de:02:4a:5f:73:
4c:b6:59:e1:47:f3:44:d3:5d:b3:92:cb:74:83:21:
e3:7e:61:5f:a9:b7:23:76:9e:c8:17:dd:eb:29:51:
a5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A7:28:6D:95:33:DE:FC:8E:F5:7C:4E:6C:C1:60:66:2D:2A:F4:7C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-KcobZUz3vyO9XxObMFgZi0q9Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:1f:98:b5:4f:53:bc:c2:ca:d5:69:31:88:62:09:bb:a6:ba:
b6:e2:e6:41:88:19:4f:9d:fa:c2:f2:65:45:8b:51:1c:6c:1e:
1a:91:7f:12:b5:cb:99:8f:8a:46:9c:df:b6:1a:52:62:82:85:
a8:a9:02:a5:39:95:ff:fd:57:3a:1f:e7:38:13:ff:4f:69:ff:
83:99:1d:5a:52:b6:74:df:b2:61:63:6c:15:b8:64:4b:39:de:
75:64:89:26:99:6a:a2:15:e7:17:ea:18:46:01:20:ab:6d:53:
85:eb:4f:75:78:fc:74:63:a9:41:95:e2:ce:b7:b7:9d:f0:56:
ba:d4:a9:0c:6c:82:bf:b3:ef:1e:ef:35:11:c2:a7:79:be:41:
4c:9e:24:c4:27:ea:3e:fa:23:ae:47:1e:28:92:c6:75:c7:d3:
c0:d5:9d:f5:40:79:dd:c8:d1:a9:48:fe:d3:91:88:91:38:7e:
87:06:5a:e2:b0:04:f3:e0:66:04:20:13:82:c5:f9:f4:7a:ec:
3f:8d:a1:61:5f:31:94:e7:61:e7:fd:82:cf:a1:04:36:fc:51:
70:72:d5:75:71:41:89:10:b8:db:1b:0b:1e:72:45:6c:91:85:
3a:4f:54:e4:51:77:97:15:2f:08:49:0d:ab:32:1b:dc:c8:51:
49:88:fe:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:04:22 2025 by rpki-client