Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-VQ_fX9fMrgFx6HCqi8DtNS46iw.roa
File: 1-VQ_fX9fMrgFx6HCqi8DtNS46iw.roa (raw, json)
Hash identifier: XFOYJ+WVWV0U+bIPeoFIHCpVwuQ7JTqAey8EvCzTW+w=
Subject key identifier: F9:54:3F:7D:7F:5F:32:B8:05:C7:A1:C2:AA:2F:03:B4:D4:B8:EA:2C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5F3435C857A1B5DF3827F14124ABC822
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-VQ_fX9fMrgFx6HCqi8DtNS46iw.roa
Signing time: Tue 12 Dec 2023 18:05:06 +0000
ROA not before: Tue 12 Dec 2023 18:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:5f33:b001/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5f:34:35:c8:57:a1:b5:df:38:27:f1:41:24:ab:c8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 18:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9543f7d7f5f32b805c7a1c2aa2f03b4d4b8ea2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:80:98:0a:ce:85:1d:5d:b3:4c:c6:50:24:
5e:31:e4:ac:4e:0c:f5:54:95:32:8e:df:f2:e7:5c:
34:b5:2e:4f:18:5b:57:38:52:19:c5:f1:b3:bf:1c:
fc:7d:fe:0f:a4:3f:16:2c:44:80:0c:d9:0d:34:c9:
bc:3c:60:58:ed:ff:a1:7b:65:eb:67:ab:37:34:d7:
8d:28:02:27:0e:98:1f:5d:b0:66:62:bb:c9:8a:b5:
29:16:a2:9a:06:23:4b:3e:6b:91:c4:1c:2e:3c:ee:
bb:8f:ba:f7:92:c9:5e:d1:ac:30:77:b3:fa:a5:e0:
1b:9a:9e:17:ce:47:41:d7:c1:71:5d:f7:00:bc:d2:
5e:6f:62:ce:e5:fc:ba:14:f8:28:72:8e:9f:e5:3e:
99:3a:ee:d3:e4:53:1f:3a:8a:31:98:d9:9f:e8:e7:
c1:30:82:29:a8:8f:c4:9d:6f:90:78:00:57:08:bf:
76:cb:d2:6c:db:f7:0a:eb:30:92:2e:e8:dc:7f:9a:
63:eb:1d:c1:54:c9:6a:a9:f2:d5:8d:36:06:f2:88:
02:b6:f9:b4:a4:a0:9e:fd:92:5d:8a:e8:4e:04:36:
7c:46:83:44:8a:3f:ee:a7:58:31:85:3f:0e:80:0d:
cf:b4:5e:bc:eb:9b:11:e6:3c:40:cb:36:09:b3:7d:
b7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:54:3F:7D:7F:5F:32:B8:05:C7:A1:C2:AA:2F:03:B4:D4:B8:EA:2C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-VQ_fX9fMrgFx6HCqi8DtNS46iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:3d:a3:ed:91:75:03:1c:cd:b6:76:27:3f:c8:39:c7:07:97:
25:f5:0f:33:3e:af:29:29:98:b0:28:73:0c:f1:2c:eb:3f:6e:
91:72:3a:59:1f:61:21:e1:28:48:30:1e:d5:3a:6d:e8:52:bd:
bf:88:e0:22:70:62:37:8f:7d:61:32:7c:31:02:e1:6c:2c:5f:
f3:f9:2f:26:6e:40:09:7a:78:de:78:56:e7:d5:d1:d4:16:12:
01:f7:54:51:07:9d:3a:73:37:d4:80:dd:97:f8:74:16:01:2e:
de:f5:e1:92:21:6b:06:a9:79:65:83:02:d8:24:79:4c:2f:e9:
5d:17:e5:e7:05:65:04:f2:e3:31:ff:97:5b:4f:00:4b:ad:00:
df:2e:d7:c4:42:9e:26:00:36:0d:df:a8:3b:1b:f6:64:f8:ff:
c7:4c:2f:c4:79:87:bd:94:63:98:69:90:b7:d4:f1:84:d9:d3:
4d:67:10:13:f9:57:18:4a:98:8c:7f:b8:37:7e:ba:1c:bd:b8:
3e:9c:62:fc:da:d5:ad:ff:8a:d2:21:89:1b:fd:e0:51:c8:b4:
5e:86:e4:a4:08:f1:be:14:af:e7:fb:4c:bb:67:80:14:cc:e8:
7d:46:45:6e:fe:9a:a2:51:ce:0f:b0:8a:d5:f3:d6:71:7b:47:
b8:01:72:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:48:40 2025 by rpki-client