Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2SBNpv-vM63kPXMP-b6zJhq58Aw.roa
File: 2SBNpv-vM63kPXMP-b6zJhq58Aw.roa (raw, json)
Hash identifier: 5WNq+ScVeyYlKDvm6fqWm+0mz3Jkxn9kqT/hAv1/QMQ=
Subject key identifier: D9:20:4D:A6:FF:AF:33:AD:E4:3D:73:0F:F9:BE:B3:26:1A:B9:F0:0C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5E244062E7A55EC3489637F72B58C21A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2SBNpv-vM63kPXMP-b6zJhq58Aw.roa
Signing time: Mon 23 Oct 2023 20:05:15 +0000
ROA not before: Mon 23 Oct 2023 20:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:5e23:7838/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5e:24:40:62:e7:a5:5e:c3:48:96:37:f7:2b:58:c2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 20:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9204da6ffaf33ade43d730ff9beb3261ab9f00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:d7:01:5a:2e:3c:f5:bd:51:06:aa:49:4f:
74:cb:53:3d:a7:ed:94:b2:d8:90:d0:2b:1e:11:87:
9f:19:cb:9f:06:a3:ca:2a:3b:c8:41:dc:7a:5e:93:
cc:1d:5c:d4:d3:57:49:61:09:7f:41:85:63:78:34:
57:53:27:8b:4a:4d:55:a9:fc:6b:6c:94:a7:fc:96:
8a:5f:b3:7f:38:bf:43:cc:80:b4:7e:35:e2:4b:c4:
97:a3:b0:3e:0d:a8:28:0d:01:84:5a:05:7c:f5:23:
28:16:f8:19:47:ae:32:1d:dc:d2:78:09:6b:8a:06:
5c:ee:57:c6:f3:06:2a:92:11:0f:23:b7:f5:86:19:
9c:7f:be:a1:94:a3:de:58:72:62:65:16:0d:4f:47:
e2:79:06:f9:47:ab:1c:80:6c:d2:fa:16:8e:ec:af:
95:a5:98:9d:cd:a9:27:bc:df:ed:ed:1f:65:ed:47:
be:bc:fe:bf:5d:54:77:7d:5f:f7:a4:65:e8:d7:a9:
b8:7b:03:77:8f:6f:fe:3c:91:24:ff:fb:7b:61:c1:
64:7d:a7:5c:a1:5e:4c:fb:2e:3f:4a:0a:e9:9c:18:
e0:d2:99:7e:fb:95:1a:1f:0d:51:ba:32:7d:9e:4d:
88:4c:85:f9:21:5a:ce:4b:7d:41:f2:68:69:ed:ac:
fe:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:20:4D:A6:FF:AF:33:AD:E4:3D:73:0F:F9:BE:B3:26:1A:B9:F0:0C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2SBNpv-vM63kPXMP-b6zJhq58Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:c8:c9:0f:eb:97:7d:d4:5e:7d:64:63:da:a1:c6:43:a1:28:
84:a6:84:0c:4a:f5:b2:2a:03:df:48:fe:4d:d1:af:ec:fc:2c:
ae:ee:18:d5:46:97:38:23:45:9e:6c:d5:28:5e:97:4c:a4:5a:
07:47:ad:ff:e6:d7:d3:d2:d1:67:8c:fa:91:a3:f3:f5:7b:a2:
27:cf:1e:d4:3c:be:87:a2:62:92:e4:87:75:e0:f5:55:e2:64:
a7:d5:0e:c9:87:08:38:62:62:70:a7:a1:f8:e6:7c:1b:7e:9f:
c7:1a:b0:19:9b:90:82:8d:b4:9f:ec:b9:04:e6:db:ac:06:20:
19:0f:7c:d0:a7:ab:3b:f8:2d:9e:d8:ba:b9:1a:97:f7:e0:8b:
f3:10:2c:5c:ca:72:f3:38:cc:14:71:9a:11:65:41:d8:25:9d:
97:18:aa:3c:39:67:4d:1d:4e:fc:88:d4:e5:ae:1f:87:82:74:
4f:fe:90:e8:78:2b:f5:c2:2c:20:5f:3f:2b:02:7b:a6:4d:3b:
3d:fb:bd:3b:a4:ff:44:46:ff:83:81:08:18:cf:6b:b4:16:56:
d0:61:ca:4e:c6:3f:85:3c:4a:a9:0e:6b:89:26:5f:7e:6e:40:
14:98:60:15:a5:15:28:3f:64:46:9c:be:34:e1:ab:3e:6f:22:
29:1a:76:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:53:03 2025 by rpki-client