Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/36cLReH-wrjWjZNxBiBdWyI7B0o.roa
File: 36cLReH-wrjWjZNxBiBdWyI7B0o.roa (raw, json)
Hash identifier: EgGNHPs+Vk/4ILF+N88f8jA1H0nB4JrtokWOvj+Gek8=
Subject key identifier: DF:A7:0B:45:E1:FE:C2:B8:D6:8D:93:71:06:20:5D:5B:22:3B:07:4A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA4540821C3AD2BEDBF1232C06D0C0811
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/36cLReH-wrjWjZNxBiBdWyI7B0o.roa
Signing time: Mon 06 Nov 2023 11:10:52 +0000
ROA not before: Mon 06 Nov 2023 11:10:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:a44e:147a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:54:08:21:c3:ad:2b:ed:bf:12:32:c0:6d:0c:08:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 6 11:10:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfa70b45e1fec2b8d68d937106205d5b223b074a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:47:7d:47:04:68:28:cd:6f:6d:f9:be:b7:87:
af:09:7f:15:cf:23:49:53:ed:e8:3a:e0:14:57:53:
fb:2d:71:7d:ae:96:b4:e1:d6:28:e9:e5:13:f6:36:
33:24:c0:4f:e6:79:65:c4:7f:14:bb:4f:2a:a0:0e:
d3:04:c1:92:c9:ad:d4:65:81:5a:17:9a:f3:4d:55:
39:6a:7a:e9:60:a5:7e:75:6d:e7:03:a7:55:dc:8c:
cb:80:1a:a9:43:c6:25:78:bc:8f:b3:c5:b2:66:62:
dc:97:8d:ba:19:1a:3b:ea:fe:4a:e0:27:62:51:5b:
c9:b7:5f:94:50:c8:b8:08:1e:e8:aa:3b:6d:ab:89:
86:0c:5f:b6:fe:bd:2f:88:cd:c8:38:50:55:4d:90:
a4:dc:d7:ff:ae:f5:bd:7b:06:4c:b3:0e:9f:b4:fa:
4b:b6:dd:01:f4:e6:d4:da:1e:34:dc:3e:e9:54:06:
af:fa:7f:cb:d6:a8:8d:2e:24:5a:0c:79:bd:ce:c9:
11:8d:12:5b:1c:d1:2b:fe:aa:d4:98:4b:a3:7e:e7:
e5:35:9f:a9:14:de:c9:5c:48:6a:c2:fc:49:d4:ca:
12:40:c5:ab:42:39:31:6c:75:38:a9:e1:e0:26:cb:
4a:25:68:01:ad:24:63:23:ec:4a:9e:99:a5:e3:55:
fd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A7:0B:45:E1:FE:C2:B8:D6:8D:93:71:06:20:5D:5B:22:3B:07:4A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/36cLReH-wrjWjZNxBiBdWyI7B0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:78:e2:f4:af:a6:59:1b:ed:68:4b:de:d4:48:4f:c2:c0:29:
7d:86:7c:67:b1:cc:3c:c1:0c:97:01:d0:c2:6e:53:63:2e:38:
ea:5d:14:6f:06:07:19:61:29:7b:bc:05:73:46:ed:87:c6:0c:
cd:41:93:41:02:aa:af:51:bb:30:35:58:55:e6:fd:40:cb:3b:
6b:b2:f9:7c:f5:bb:83:39:78:f7:65:4e:dd:48:43:cf:a7:21:
ff:4b:e5:ea:f5:80:4b:8e:a0:82:cb:60:38:01:8b:7c:2d:64:
1c:0d:74:85:69:f1:56:d1:d8:e6:a6:b8:95:61:b3:47:d7:fa:
81:4e:81:b9:b4:74:65:b5:a3:a9:66:f5:21:8f:98:a0:b8:03:
78:00:9b:32:62:57:ff:6d:c3:51:1f:d4:e5:f7:21:3b:20:57:
db:f4:94:ad:3d:5d:a5:3a:eb:7e:08:81:c8:31:62:7c:48:a7:
f4:5e:bf:55:5d:e5:51:27:36:16:c3:6b:c1:2e:12:e6:18:05:
9a:ce:d1:64:bf:9b:04:33:88:98:f8:5c:94:13:56:f9:09:7f:
1a:45:a3:0a:fb:f2:ff:b2:f2:9b:85:12:e0:a0:02:54:79:ab:
3d:2f:ce:ed:fb:bd:72:0a:ae:11:b1:cf:7f:3e:9f:27:d7:aa:
8a:85:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:37:57 2025 by rpki-client