Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2Mre75ea-hkYKEZNLra_3D4VIH0.roa
File: 2Mre75ea-hkYKEZNLra_3D4VIH0.roa (raw, json)
Hash identifier: fUc8TEHNY3GdxPiZWdzw8I24pntCaR8/3j1Nc+DC9KU=
Subject key identifier: D8:CA:DE:EF:97:9A:FA:19:18:28:46:4D:2E:B6:BF:DC:3E:15:20:7D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE5557E3EE71D1CDC1962E144D96EE002
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2Mre75ea-hkYKEZNLra_3D4VIH0.roa
Signing time: Sat 30 Sep 2023 09:04:59 +0000
ROA not before: Sat 30 Sep 2023 09:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:e554:f6fb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e5:55:7e:3e:e7:1d:1c:dc:19:62:e1:44:d9:6e:e0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 09:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8cadeef979afa191828464d2eb6bfdc3e15207d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:47:00:ad:4d:70:d4:10:d4:59:df:da:59:
19:91:28:75:c4:50:0e:bb:93:ea:b6:7b:45:14:8b:
fa:b0:67:92:bc:f8:a7:f5:13:2e:a3:99:d3:cb:59:
c9:86:2c:a4:f9:cb:06:d3:d1:ee:42:30:76:60:57:
98:7b:04:e1:b3:ee:34:15:b8:67:36:c9:8a:9a:6a:
20:f0:86:39:6f:10:cb:d4:32:e2:35:ab:f2:3e:50:
f3:3b:fe:bc:ed:89:a6:0f:38:13:6e:28:64:4a:1e:
eb:21:ff:c7:7c:4e:ec:80:1f:4b:9e:3f:16:3f:43:
2c:66:73:5b:79:7d:b9:1c:98:1f:b0:17:9e:96:9c:
09:fb:4f:0b:1f:b0:63:2f:18:6e:6c:d0:ba:aa:9e:
b6:c7:c5:2a:8e:da:7c:39:5d:fe:cf:71:b9:55:69:
57:86:8d:68:1e:c0:21:70:5c:21:5e:bd:6d:c4:e6:
b7:a9:9a:4a:1f:ac:d4:3d:f6:8c:7e:b2:9c:45:3e:
f5:28:f2:a0:0a:e4:73:9e:55:3e:35:49:0e:5a:a9:
dd:d1:f4:bf:4c:65:85:60:5a:f2:88:49:9d:00:31:
13:8f:17:17:4c:7e:3f:40:9e:97:82:e1:ac:3e:3d:
f3:72:72:29:d4:d4:50:0c:e0:96:80:ad:d5:88:2b:
b3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CA:DE:EF:97:9A:FA:19:18:28:46:4D:2E:B6:BF:DC:3E:15:20:7D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2Mre75ea-hkYKEZNLra_3D4VIH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:c2:bf:75:6b:9c:ae:f7:af:ea:b0:4a:7e:8e:02:62:59:ee:
71:f7:63:27:e4:fa:26:5b:2c:3e:66:5e:cc:96:c8:c4:74:25:
86:1e:c4:b9:4a:be:61:4e:82:7c:f9:cf:82:c8:da:1a:ea:c6:
77:7c:16:72:31:b8:8c:b6:fd:7e:b1:7c:b3:4f:c4:af:08:35:
d2:2a:85:6f:11:2c:c9:e1:da:ec:ed:29:4c:99:23:8b:da:72:
92:80:25:2d:c6:d7:bf:52:ae:d8:ac:e4:99:65:92:dd:f8:77:
be:48:9e:29:12:bf:0a:3c:ef:d7:e0:f8:7e:09:5c:f5:0c:91:
52:d6:ad:ea:96:42:10:0a:c6:dc:b6:29:1c:cf:b2:29:b2:d8:
1b:95:77:b6:d1:d3:90:aa:18:63:20:40:dd:c2:af:13:b7:86:
b1:d1:9f:83:8c:e6:65:66:72:aa:f3:74:b9:4c:c7:09:ea:f4:
1d:a0:22:38:90:51:00:17:2a:dd:bf:40:37:cd:a8:6c:01:34:
29:2c:2b:7e:b3:95:00:0b:8f:3b:1d:ed:5c:e5:45:23:ff:2e:
48:30:f4:45:65:a1:5a:76:08:63:a2:29:31:c4:0d:aa:b6:ec:
33:48:3d:cb:2c:69:4a:d7:2d:69:08:4b:9b:e6:dd:2e:14:e2:
fe:1c:a7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 21:49:44 2025 by rpki-client