Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4YgSucbW2HfuADxMLJMeBf3KwnU.roa
File: 4YgSucbW2HfuADxMLJMeBf3KwnU.roa (raw, json)
Hash identifier: n2RfY4rZmc7dL5umuuKwr2jV8rnVmufccUFoVN6U+wQ=
Subject key identifier: E1:88:12:B9:C6:D6:D8:77:EE:00:3C:4C:2C:93:1E:05:FD:CA:C2:75
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCC01E347A4238E972C3C942682A3176C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4YgSucbW2HfuADxMLJMeBf3KwnU.roa
Signing time: Tue 14 Nov 2023 04:05:57 +0000
ROA not before: Tue 14 Nov 2023 04:05:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:cc01:8782/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cc:01:e3:47:a4:23:8e:97:2c:3c:94:26:82:a3:17:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 04:05:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e18812b9c6d6d877ee003c4c2c931e05fdcac275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:e0:1d:ce:fa:6f:c0:27:71:90:a4:40:2d:
08:1a:27:b1:22:7f:01:55:d1:ff:42:4d:22:77:9a:
ab:19:59:e6:1e:0d:bd:55:70:c3:a4:b4:68:fa:23:
24:fc:3e:ee:aa:bd:5e:27:d6:69:f8:b2:f1:8a:ff:
9f:c9:15:7a:f1:6c:85:d2:bb:ec:64:62:29:af:f6:
c9:b9:f3:41:70:a5:62:61:a1:db:67:2e:10:85:44:
bf:bf:90:02:e3:10:c2:bb:52:15:a5:09:81:2c:7f:
12:c4:6c:c1:74:d7:b1:ef:d3:b2:85:e0:bb:58:c1:
b0:85:32:d3:a8:8e:b5:cc:5c:20:92:95:68:d9:b2:
86:cc:d2:c2:ee:eb:a7:59:c6:8f:76:3d:cc:c2:b0:
8f:99:cc:5f:17:e5:0b:4d:49:92:5c:9a:7f:90:ad:
02:c3:b4:b0:3d:5f:45:b9:e5:77:2a:b9:a6:56:9d:
d0:11:03:37:27:c6:a5:97:0c:11:a0:70:a1:6e:27:
52:a6:2d:f4:37:98:d1:0a:fd:f5:06:2f:63:2c:9c:
4f:0f:07:2d:66:5d:ed:26:11:6b:ae:b1:d8:cb:f0:
15:4f:c3:53:ea:2a:bd:53:58:ed:7e:e0:e2:da:ec:
15:64:59:c4:e8:41:93:dd:29:97:74:70:33:28:d9:
4b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:88:12:B9:C6:D6:D8:77:EE:00:3C:4C:2C:93:1E:05:FD:CA:C2:75
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4YgSucbW2HfuADxMLJMeBf3KwnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:54:3f:25:87:3f:5b:17:ec:5d:55:47:c1:d0:57:8c:bc:43:
83:54:d7:ef:e4:91:e8:23:9f:60:73:ee:63:2f:01:c9:18:e6:
b8:0c:f7:54:e8:de:d6:aa:06:9b:25:df:99:3f:0b:1a:c2:dc:
6d:ac:e5:71:1f:3f:ad:df:af:69:6d:95:6b:a5:df:9a:f3:ef:
13:4a:72:97:02:4d:7d:b9:cb:70:15:d7:4a:ac:22:8a:d8:97:
99:50:fd:83:ab:f2:55:56:0e:b2:96:80:5a:cd:b5:1e:aa:5a:
47:05:bc:69:b2:f0:20:d9:3f:8e:61:6b:37:02:12:9f:c9:e3:
5d:b7:e4:21:c2:b2:30:2d:8a:3c:32:44:35:8c:09:7e:2a:2d:
be:3c:81:f6:e0:7a:86:dc:97:f8:64:6f:27:d1:b5:6f:0d:dd:
de:74:8d:bb:6f:50:c4:f4:8a:e6:4b:c3:38:c7:07:6b:e9:30:
ba:73:e8:4e:51:68:47:90:20:10:93:62:51:cd:88:09:38:7f:
22:33:07:76:d6:60:c5:bb:5c:59:96:2e:1a:33:f9:16:16:87:
d5:c5:b8:60:f3:08:c9:0c:b3:6c:ef:0f:cb:07:8b:3c:36:8b:
60:1a:19:dd:83:d1:47:2c:0e:21:dc:51:5c:b0:2f:c4:00:1c:
9e:6a:24:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:40:28 2025 by rpki-client