Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/37892bSiH__36dfC0XWnWhh0srU.roa
File: 37892bSiH__36dfC0XWnWhh0srU.roa (raw, json)
Hash identifier: sdsKSv7lOx3DgPhoM1fF08ucWt+PSJI8Z22nU1v7sOY=
Subject key identifier: DF:BF:3D:D9:B4:A2:1F:FF:F7:E9:D7:C2:D1:75:A7:5A:18:74:B2:B5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B886F033804C188786A46D653A672267A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/37892bSiH__36dfC0XWnWhh0srU.roa
Signing time: Wed 01 Nov 2023 01:10:58 +0000
ROA not before: Wed 01 Nov 2023 01:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:8869:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:88:6f:03:38:04:c1:88:78:6a:46:d6:53:a6:72:26:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 01:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfbf3dd9b4a21ffff7e9d7c2d175a75a1874b2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ea:ed:6c:c9:fd:5c:db:4c:3d:a5:8b:df:42:
dc:e9:c5:d1:c0:96:db:80:11:24:d1:77:81:09:49:
2b:aa:a2:30:3f:46:a3:f6:bf:64:e0:c8:36:1e:aa:
df:ac:2b:bc:1f:ee:3c:1f:ce:c4:ec:fe:2e:4b:09:
46:0c:38:1a:e5:c1:f2:e9:0a:d5:5c:3b:70:ff:9a:
b3:3c:50:5d:44:2d:46:8c:2b:d2:01:cc:14:3d:28:
16:8f:fe:97:ed:72:71:46:09:03:2b:fd:de:86:9b:
10:b1:39:fb:36:29:7b:84:f2:ab:ce:9d:c3:62:6c:
a2:f7:f4:66:50:70:ee:dc:66:ef:c4:f0:5c:1a:79:
b7:03:a5:3e:bb:69:f0:b5:9c:ff:d8:65:57:da:5f:
5e:da:e8:b3:7f:07:01:d5:a3:00:4a:1c:18:ae:78:
0b:e6:34:e0:57:00:45:82:e6:f7:66:ec:48:68:07:
3b:4e:b6:5a:bb:38:0a:61:56:c2:ff:68:38:1c:b3:
0a:9a:53:79:0d:a3:b8:b2:60:ae:33:25:cd:de:ea:
03:b6:76:c4:35:7e:b7:cc:f3:00:5e:fe:c9:f2:f5:
76:71:f9:9c:d3:0d:47:40:07:44:9e:bd:de:de:68:
33:67:69:7c:81:f6:58:33:dd:fd:7b:d1:f3:98:f5:
33:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BF:3D:D9:B4:A2:1F:FF:F7:E9:D7:C2:D1:75:A7:5A:18:74:B2:B5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/37892bSiH__36dfC0XWnWhh0srU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:16:76:4a:86:05:fb:84:ea:85:99:4a:47:f6:ef:2d:4f:e6:
4d:8e:23:e1:1d:2b:00:8b:11:42:2c:c2:b9:b7:b3:1a:b5:f9:
ea:68:3e:ce:59:4a:00:ab:8a:b7:7e:4a:9f:88:f3:77:a8:a4:
7e:7d:0e:7e:73:73:57:81:be:57:cb:43:6b:30:78:2e:67:22:
46:9f:51:49:86:e8:f4:23:36:83:62:c3:1c:3e:c0:93:ff:47:
f3:e0:6d:1c:75:78:81:85:02:12:77:77:db:98:d9:76:42:98:
13:fe:f0:bb:b4:09:1b:06:0a:bf:b6:d4:00:68:71:04:ed:9f:
16:e5:fd:50:fe:3c:1e:ee:f4:68:56:09:28:c1:51:99:9e:bf:
5f:e0:6f:9b:34:a9:1a:b7:13:b7:5a:79:ce:28:ff:a6:a5:32:
c8:80:f8:a4:67:c3:63:16:17:54:47:f4:e7:a8:6d:57:fd:08:
29:70:78:1e:76:8f:5a:ff:01:de:97:5b:f1:e4:a4:65:b5:6b:
c2:6b:d3:0a:a8:b6:ac:aa:16:65:7a:cd:f8:87:67:38:49:78:
e9:17:16:10:e2:6a:51:7c:61:34:d2:8c:d0:1c:da:75:aa:3e:
28:4d:70:cd:db:0b:b4:6a:ed:96:0f:95:fb:c0:e9:74:4c:ce:
16:ec:4a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:29:05 2025 by rpki-client