Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4xKyLuPCP-5xebKC_jIqlF3CBSM.roa
File: 4xKyLuPCP-5xebKC_jIqlF3CBSM.roa (raw, json)
Hash identifier: H2qLwTg1mZn8zkaRJXtc7KkrduYEy2xaFcCKqQHB8vs=
Subject key identifier: E3:12:B2:2E:E3:C2:3F:EE:71:79:B2:82:FE:32:2A:94:5D:C2:05:23
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7D07B57EF6A67F08196783E2C97FBDA7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4xKyLuPCP-5xebKC_jIqlF3CBSM.roa
Signing time: Mon 18 Dec 2023 13:05:06 +0000
ROA not before: Mon 18 Dec 2023 13:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:7d06:dc59/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7d:07:b5:7e:f6:a6:7f:08:19:67:83:e2:c9:7f:bd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 18 13:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e312b22ee3c23fee7179b282fe322a945dc20523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:6b:a7:99:2b:e5:ca:32:17:10:56:3f:87:
67:f0:c7:da:de:83:8a:ff:35:9b:24:b5:1b:41:e9:
10:a8:03:8e:e8:c1:02:f4:de:a8:09:38:4a:93:e4:
2e:17:c6:cc:74:dd:4a:68:b4:5f:99:ab:5f:8c:f7:
cc:07:5c:06:15:0d:4a:5b:e1:a3:7c:7c:45:32:cb:
29:cc:d4:9f:b4:49:77:d8:ba:2d:b0:c8:f3:ba:6c:
c2:ee:59:05:6d:c4:e3:30:95:66:9f:b1:21:85:13:
14:8c:b5:de:f0:de:47:e7:f7:d9:fd:ed:b6:21:13:
eb:83:ee:f7:70:c7:d5:20:af:ee:93:f5:50:ee:ea:
7a:a7:28:2d:39:d0:6f:2c:4e:59:f1:1c:33:e0:11:
52:c2:44:94:75:00:41:c0:46:b1:36:70:5c:1a:64:
9d:62:e0:72:1b:4f:b1:6c:97:6c:c3:be:6b:86:79:
52:ab:9f:79:88:2b:3f:21:f0:f2:f3:31:a3:1d:93:
2f:e9:fc:5b:10:da:3c:14:ac:b1:88:bd:e4:23:c5:
03:77:ee:b8:5a:d2:61:70:e9:30:9e:22:3f:f6:10:
98:54:eb:17:05:6e:08:08:0c:d6:a8:ee:c3:76:d4:
3c:bd:d9:e1:e1:57:b6:51:3d:c3:35:eb:a7:1a:a7:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:12:B2:2E:E3:C2:3F:EE:71:79:B2:82:FE:32:2A:94:5D:C2:05:23
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4xKyLuPCP-5xebKC_jIqlF3CBSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:a5:53:ce:e4:5d:04:05:03:70:83:c1:98:c6:e7:b3:59:ce:
cf:37:00:7c:af:fb:64:af:96:c0:0a:5b:c5:cd:49:1a:51:89:
4d:d1:16:62:3f:35:59:6f:1f:c3:46:54:2b:e3:6f:63:9b:c2:
65:9c:ea:cd:ba:28:e7:b9:53:9b:86:c6:a2:5e:4f:f2:1e:66:
7b:ee:c9:1d:8b:97:35:98:3f:92:78:f1:e2:35:48:c3:04:3d:
ff:b7:00:66:ab:34:38:ec:d5:4d:96:4b:00:11:09:13:81:94:
32:45:bf:0c:6b:f3:e8:4c:89:29:7f:a6:d5:84:0e:f4:ee:9a:
6c:95:d6:56:4d:4e:67:b8:04:cb:e5:2d:ef:0e:18:00:04:65:
99:d2:36:47:e7:e9:33:1f:3e:92:3d:a9:03:f1:03:67:b0:92:
9b:1d:c0:6d:ce:bc:f9:c1:55:59:d7:20:2b:61:d3:38:2f:78:
23:b6:10:c6:0e:8e:bb:35:62:5d:5b:ec:18:ab:40:05:29:9c:
e4:0e:c6:f8:b4:96:af:10:1a:7a:a7:28:bd:96:4b:e5:f2:ff:
a8:37:91:bd:74:29:36:2c:a9:2f:bd:d5:0c:38:b8:c0:78:dc:
d2:8e:1f:ec:d6:96:f3:68:e7:be:b9:de:71:a5:db:ef:4f:08:
f2:6c:16:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:39:37 2025 by rpki-client