Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2PTa7PxDvN9EMsqyvnVfY3X5Ib0.roa
File: 2PTa7PxDvN9EMsqyvnVfY3X5Ib0.roa (raw, json)
Hash identifier: fTusbE4/abMgBAgUL6Wqua2CnHZaWDzgpx8vZ/XYI1o=
Subject key identifier: D8:F4:DA:EC:FC:43:BC:DF:44:32:CA:B2:BE:75:5F:63:75:F9:21:BD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB91EFC2D08E55880C732AC38C2FCA90E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2PTa7PxDvN9EMsqyvnVfY3X5Ib0.roa
Signing time: Fri 10 Nov 2023 12:04:57 +0000
ROA not before: Fri 10 Nov 2023 12:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:b91e:777a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:1e:fc:2d:08:e5:58:80:c7:32:ac:38:c2:fc:a9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 12:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8f4daecfc43bcdf4432cab2be755f6375f921bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:56:31:48:fb:d9:8c:93:fe:fc:7d:00:7b:65:
75:ee:3c:33:54:04:18:2a:b8:97:a9:b9:66:8c:5b:
d6:52:12:44:44:73:ff:d0:88:16:f8:6d:be:ad:9e:
29:85:84:4d:f9:9c:e1:67:ba:69:6d:d3:42:6d:23:
88:a4:7c:da:c7:5e:f1:80:2e:55:54:42:71:35:db:
2a:65:61:42:74:c0:f7:e2:66:0d:91:e2:90:ce:07:
3a:ab:93:b2:1e:40:96:fe:f6:71:e9:c9:72:77:e4:
c5:ed:d6:42:c8:61:53:fc:fb:54:2b:02:be:0e:ce:
2e:39:4e:da:1c:8f:e3:7e:f3:d4:0b:c3:3f:74:87:
8a:05:a0:7a:59:15:0d:a8:e5:fa:ca:86:5a:29:58:
cd:71:8b:04:2f:61:1c:2c:d4:9f:99:c9:90:27:ce:
92:6b:be:45:81:fc:43:c7:0d:41:d8:1c:d3:72:ee:
c5:d5:1b:3d:01:da:8a:c9:d9:10:31:79:be:a8:ae:
d5:94:77:20:26:b3:49:7e:8b:5f:57:fe:e9:18:91:
20:b5:ed:ef:64:d4:13:5c:97:5d:d3:9d:a7:11:78:
ca:9f:74:04:f7:ca:72:7c:b9:69:2f:8a:dd:9b:aa:
f1:e3:d6:6c:d7:2a:12:ad:70:20:a4:67:a9:d7:62:
06:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F4:DA:EC:FC:43:BC:DF:44:32:CA:B2:BE:75:5F:63:75:F9:21:BD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2PTa7PxDvN9EMsqyvnVfY3X5Ib0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:09:44:63:a8:fd:a2:15:fd:21:26:b1:8c:23:52:c4:9a:86:
84:d3:41:3d:41:cc:7b:af:9e:e7:44:37:59:74:43:6c:5d:f1:
4f:c8:dd:f5:f5:72:e9:09:83:4c:e3:50:88:25:7d:8d:0e:78:
01:fd:f5:7b:e1:3d:d8:dd:43:d3:0a:e6:54:8f:d1:92:ea:dc:
5e:e8:bf:5d:16:24:3e:bb:80:fe:14:95:dd:52:5b:25:4a:4d:
94:db:13:10:4d:67:82:f2:36:77:a5:c1:b6:3d:b2:5b:ff:10:
38:7c:72:52:06:19:b9:f0:0f:48:4d:f0:90:59:fc:7c:03:ff:
93:26:44:7c:7d:f1:1e:6c:8e:7c:11:96:58:1c:55:71:2e:06:
38:7f:14:7e:d0:e2:81:68:5c:77:1a:97:4b:0e:da:63:65:e7:
b2:f2:28:12:11:28:f3:51:9f:1e:7c:65:39:ec:f1:56:08:da:
b4:6c:d4:f5:32:74:3d:89:47:9a:8e:40:f8:66:ca:90:c5:f1:
a4:78:6e:a4:c5:8b:90:22:61:48:b1:8c:cb:bc:2b:71:38:0a:
d7:d7:5b:b9:ba:e9:8c:73:07:dd:ca:bc:b2:0b:b9:e7:63:d8:
1a:b5:c1:4c:ce:53:e2:25:1f:68:6c:5e:a6:5b:64:2e:d5:db:
53:c9:af:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:53:44 2025 by rpki-client