Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4uXRek-IKv8HydBaMy4EXU5HqNw.roa
File: 4uXRek-IKv8HydBaMy4EXU5HqNw.roa (raw, json)
Hash identifier: tuzg0eY863agCXKZSVJq/5Goj3k2JHk08wP8W9QNER8=
Subject key identifier: E2:E5:D1:7A:4F:88:2A:FF:07:C9:D0:5A:33:2E:04:5D:4E:47:A8:DC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B26C7950218B500B993CB41A76111DDB3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4uXRek-IKv8HydBaMy4EXU5HqNw.roa
Signing time: Fri 13 Oct 2023 02:04:55 +0000
ROA not before: Fri 13 Oct 2023 02:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:26c6:e71b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:26:c7:95:02:18:b5:00:b9:93:cb:41:a7:61:11:dd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 02:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2e5d17a4f882aff07c9d05a332e045d4e47a8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:d7:00:e0:e0:4b:34:c4:97:b8:1b:dc:73:
6b:82:98:fb:fb:06:73:0d:de:c7:e0:d6:dc:70:a7:
19:55:92:64:74:21:d3:07:a2:90:a2:70:c9:15:81:
39:9c:c5:3f:b6:10:99:1a:56:87:16:2b:62:fc:f1:
8b:b9:2c:82:de:b8:33:20:5e:10:5d:cd:08:85:13:
a3:fb:f3:f9:5d:d5:46:c1:65:86:20:ab:17:cc:c4:
e3:26:84:9b:44:f9:a0:49:9b:0f:bc:ee:19:74:e8:
2c:54:25:28:a8:17:18:b6:05:9a:2c:6f:98:f9:96:
ab:32:50:77:e0:08:90:78:17:de:d4:ee:51:7e:fd:
c4:d7:37:73:6b:2d:b7:00:87:3e:83:29:bd:60:9f:
bc:ba:d1:90:85:f9:46:12:63:5b:fc:b4:9a:12:2a:
1b:d8:c3:bc:0f:ee:68:86:44:c4:c6:3b:0b:fc:89:
f4:a4:f4:a0:fd:3c:54:5d:5f:c1:89:e6:ab:dd:2f:
f8:99:9c:c6:78:8b:02:1f:9a:cf:45:c9:8b:98:7c:
81:c5:57:ee:c6:58:d0:f3:6a:6c:4e:ca:b5:38:82:
7e:6c:f8:74:28:ed:ea:e3:bf:f1:71:cb:20:4a:63:
0d:e2:5d:6d:5a:f9:8d:b9:ef:78:a6:e6:3a:d6:21:
c4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E5:D1:7A:4F:88:2A:FF:07:C9:D0:5A:33:2E:04:5D:4E:47:A8:DC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4uXRek-IKv8HydBaMy4EXU5HqNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b9:58:0c:7b:3a:6f:63:35:91:bb:5f:f6:18:09:15:d6:17:46:
02:8a:72:d6:56:32:ca:8d:c3:1b:ed:44:bb:a5:de:51:5f:f8:
72:13:40:15:15:a6:71:1f:f1:7e:3e:06:37:c3:e0:7c:76:37:
1a:a9:04:a2:12:00:a6:a4:97:18:a3:73:00:99:3c:87:6b:94:
84:35:cd:7d:00:8b:99:bc:b5:f0:f2:64:50:ee:8e:0c:bf:97:
45:3a:b0:07:97:09:67:d3:08:1e:81:d8:ec:ad:37:a4:2a:fe:
ab:12:42:26:25:ac:57:b5:e4:55:07:c8:a5:de:f2:b2:48:0d:
ea:b8:67:25:ed:b8:4d:2b:53:18:e6:c0:94:08:92:3f:46:0e:
0f:e0:ec:ec:ba:2b:80:26:ef:61:a8:9f:d8:e4:d6:96:94:af:
3d:ca:fa:26:19:43:b2:4c:05:c4:6c:31:21:ff:ae:de:4f:e2:
4f:10:cf:68:f2:54:e8:75:02:f7:df:7f:e6:2f:4a:a6:e1:20:
bb:f3:78:a4:f5:de:56:e8:48:fc:c1:c3:ae:e7:a1:8d:96:e0:
48:8f:97:83:b2:53:40:a9:1c:ae:16:8a:24:a7:c2:44:62:20:
23:ec:e3:71:a7:3e:bb:b1:d1:1f:0a:da:53:10:98:7d:00:d7:
4d:e5:c2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:44:18 2025 by rpki-client