Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2wGBO79-oBZy_g1quOzdvz-Ymaw.roa
File: 2wGBO79-oBZy_g1quOzdvz-Ymaw.roa (raw, json)
Hash identifier: fuHhE0q9UgmwV/rhh0czH5wDte5e6WIesBnbNFgQvGE=
Subject key identifier: DB:01:81:3B:BF:7E:A0:16:72:FE:0D:6A:B8:EC:DD:BF:3F:98:99:AC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE85365A11EC54300297F2CFBFCB41E6B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2wGBO79-oBZy_g1quOzdvz-Ymaw.roa
Signing time: Sun 19 Nov 2023 16:04:21 +0000
ROA not before: Sun 19 Nov 2023 16:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:e853:5fd1/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e8:53:65:a1:1e:c5:43:00:29:7f:2c:fb:fc:b4:1e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 16:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db01813bbf7ea01672fe0d6ab8ecddbf3f9899ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:e1:0b:a6:6d:db:57:68:f7:4f:e4:e2:55:
08:a6:5b:58:73:62:c1:39:ee:e4:7f:3c:6d:95:88:
72:08:52:b2:69:20:bc:da:71:a8:9c:40:f0:b5:4b:
75:30:cc:89:e7:e4:da:b3:26:db:eb:24:d8:50:24:
13:90:5e:5d:e2:2f:15:bf:83:47:df:b0:c0:9c:7e:
67:15:f5:81:d2:72:27:fd:94:29:bb:83:29:34:8b:
43:a1:77:27:cd:af:d0:9c:ce:70:e6:fa:87:10:c9:
5b:d9:d2:40:3a:80:33:8c:ef:22:42:6f:5f:e0:7a:
6b:a2:6c:96:06:36:6d:60:82:c1:37:4e:37:32:ba:
b2:a6:e0:07:f6:eb:76:94:cf:76:b6:31:20:7b:94:
f4:23:c8:4b:8e:2d:c8:c3:cd:1b:d4:d5:20:90:9d:
44:be:0a:b7:ab:7d:58:78:e0:9a:fc:0a:8d:fb:76:
7c:36:99:14:4d:d2:95:a6:dd:be:18:87:84:a5:73:
ac:fb:86:15:aa:1b:96:07:e9:03:4b:e2:e6:8a:80:
8c:13:85:7f:9b:61:08:6f:9e:06:6e:c2:26:84:35:
36:00:31:e4:87:08:f7:98:c8:77:76:10:2c:5f:75:
5f:87:87:2b:8d:eb:0c:96:5f:ac:ac:21:d4:29:59:
e8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:01:81:3B:BF:7E:A0:16:72:FE:0D:6A:B8:EC:DD:BF:3F:98:99:AC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2wGBO79-oBZy_g1quOzdvz-Ymaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:3b:e7:5c:1a:b9:f3:21:5c:6e:e3:87:22:56:96:3d:fe:17:
cc:14:92:02:18:85:a3:69:eb:93:ff:37:a8:3f:9e:c2:17:19:
71:c6:84:c7:a3:a2:a0:e4:b9:e5:6a:d2:d6:58:4c:74:40:f8:
dc:f8:cc:18:44:97:70:eb:55:54:7e:9e:e0:ca:e2:4f:37:a4:
2a:f6:87:95:10:f9:42:eb:3f:02:e0:b2:41:ef:18:3e:26:e9:
4b:8f:e7:b5:a2:d2:a4:90:7b:3c:50:87:40:57:8a:51:68:2b:
07:6e:8f:7e:74:5d:07:39:31:92:a2:aa:78:c7:16:10:0b:a5:
83:17:64:4f:1d:f5:09:d9:90:30:14:c5:1c:bb:8a:bd:b7:f3:
80:60:e8:45:fd:1c:b8:cb:bc:a1:b4:f6:6a:75:55:45:40:6c:
83:b7:04:78:bc:f3:cd:e4:36:ca:98:7e:4e:7c:a9:77:b3:38:
52:56:b0:95:d6:c6:41:46:5b:e9:c2:44:46:1e:af:72:9f:e0:
29:26:b3:95:ec:be:b9:37:bd:70:03:ed:83:64:fb:a5:9b:02:
22:58:48:c5:9c:60:9b:e4:d0:9d:64:4d:38:b6:92:2c:64:a7:
8e:eb:42:63:78:90:4d:e6:9e:67:9e:51:7f:47:44:ee:54:87:
63:65:9d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 06:10:28 2025 by rpki-client