Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4SiK1P7ovSQjWCStbaGcZpGQCI8.roa
File: 4SiK1P7ovSQjWCStbaGcZpGQCI8.roa (raw, json)
Hash identifier: ewV30jzMUePdFJXWd75i3uuz2TxpFG1tcnur39MF0sQ=
Subject key identifier: E1:28:8A:D4:FE:E8:BD:24:23:58:24:AD:6D:A1:9C:66:91:90:08:8F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4197777809D3DFD07EEC0D7FA03C9D4F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4SiK1P7ovSQjWCStbaGcZpGQCI8.roa
Signing time: Thu 07 Dec 2023 00:04:54 +0000
ROA not before: Thu 07 Dec 2023 00:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:4197:c1a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:41:97:77:78:09:d3:df:d0:7e:ec:0d:7f:a0:3c:9d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 00:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1288ad4fee8bd24235824ad6da19c669190088f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:ea:51:03:e0:bd:9e:23:79:ef:49:87:74:
fe:ac:6c:f5:c9:91:14:69:b8:36:71:e6:ce:e6:1d:
55:21:e4:0d:40:bf:1d:4e:37:9a:8b:97:78:ec:d0:
cc:ac:c8:1c:b3:37:db:b2:e1:dc:c0:c6:20:f0:60:
50:91:3d:69:7c:28:5f:02:11:97:92:9e:6e:a8:5c:
2f:1f:d4:a9:ec:d8:4f:9a:b8:e5:c3:12:27:af:aa:
1f:e3:7b:45:79:f2:56:5b:ea:86:95:69:c7:bb:70:
11:27:14:c0:d9:09:fa:14:d0:95:ba:32:ab:25:ad:
f2:a0:d7:3d:43:78:37:c5:05:3f:10:a3:c3:51:0b:
cb:a3:f3:62:f7:be:78:cf:67:47:c9:7c:3c:9f:48:
45:e3:55:37:0d:79:ac:98:52:fb:17:12:07:d1:8b:
34:e0:eb:bb:e8:0d:de:cb:b9:a6:2f:3a:2c:aa:c6:
0b:c6:05:c2:90:f1:13:f8:93:ec:2a:7b:33:49:41:
bc:ef:4c:fb:12:4c:85:ee:cb:cb:df:5f:44:fb:ad:
8a:98:bf:9a:ac:2e:d2:88:d5:62:b2:da:87:fd:48:
95:61:a8:66:4a:02:c5:03:cf:01:e4:1c:8a:72:32:
18:d1:16:e7:4f:57:cd:50:51:5b:1f:52:ab:ec:72:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:28:8A:D4:FE:E8:BD:24:23:58:24:AD:6D:A1:9C:66:91:90:08:8F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4SiK1P7ovSQjWCStbaGcZpGQCI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:e1:c3:66:2d:f4:76:58:0e:82:39:bd:9f:70:f2:7a:78:ce:
7e:0a:01:70:7e:d6:5f:e1:54:48:88:06:bd:16:c2:ea:79:26:
44:8c:78:01:83:47:5a:66:16:09:12:62:13:40:5e:73:ee:2c:
50:e8:e3:11:8f:69:40:76:82:51:61:ef:c0:38:ab:4a:b8:f5:
42:55:39:12:b9:0f:b1:0e:ad:b2:95:5b:7c:92:4a:06:43:c9:
c5:f4:d9:01:2d:26:32:8d:43:c6:66:a3:1f:8b:76:fc:b2:3f:
6b:d2:5a:a3:b9:77:27:81:33:1e:67:fd:3e:30:07:a3:ae:d2:
ee:9f:91:34:1a:c7:70:88:dd:a6:4a:02:b4:ec:ae:fd:c0:44:
91:8b:5e:0e:bf:b1:3f:89:75:f3:cd:18:e0:99:7e:c0:f3:94:
4c:18:bf:d8:d2:df:3d:03:08:20:66:ea:dd:f1:0e:82:c7:b3:
cd:c6:e8:28:3e:4a:ed:fd:cb:36:0d:2b:a9:dd:de:7f:2e:b4:
3d:51:a9:56:55:a8:7f:74:e7:d1:bc:d1:b8:fa:ce:18:eb:bf:
45:73:35:ab:03:05:59:39:ba:60:88:f9:62:df:95:12:ff:85:
de:17:55:00:3d:91:7f:c5:f7:0d:2b:0c:3d:b1:58:96:ae:62:
ed:d6:ab:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:42:59 2025 by rpki-client