Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5IyRTXqITtT37OGBr5xHWAv_YCU.roa
File: 5IyRTXqITtT37OGBr5xHWAv_YCU.roa (raw, json)
Hash identifier: uCTIQzRsjP98aLKtLdav1vLM8k1aU1xB749t/zgDMEg=
Subject key identifier: E4:8C:91:4D:7A:88:4E:D4:F7:EC:E1:81:AF:9C:47:58:0B:FF:60:25
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC82671A3BB59F1D4B7D7F0FD28CFD7E5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5IyRTXqITtT37OGBr5xHWAv_YCU.roa
Signing time: Sun 24 Sep 2023 17:04:37 +0000
ROA not before: Sun 24 Sep 2023 17:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:c826:5cc3/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c8:26:71:a3:bb:59:f1:d4:b7:d7:f0:fd:28:cf:d7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 17:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e48c914d7a884ed4f7ece181af9c47580bff6025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1e:76:f0:ce:a8:ab:a0:a3:79:17:82:42:ac:
95:a7:91:74:07:0c:e1:9a:7a:6c:b1:67:a7:c7:8c:
d8:25:24:e2:9a:cd:f8:97:b4:0b:1f:0d:f7:4a:a7:
57:fc:37:94:85:99:2e:33:68:87:e0:4a:08:43:06:
bd:03:bd:3f:31:d3:8f:42:42:75:53:4f:9f:62:f7:
60:53:05:6d:02:c8:9e:a2:2b:19:8b:c1:14:e4:26:
79:50:54:c9:be:64:57:7b:f6:aa:5d:5b:b6:8e:f0:
95:65:82:93:10:81:b2:94:ab:bc:92:cb:35:e6:97:
18:1c:15:f9:aa:7a:30:0e:52:d5:c7:e7:ad:db:35:
cc:f1:94:96:a2:b3:1f:db:7c:21:b9:3d:8b:90:73:
f2:1a:23:fc:70:27:e1:80:1a:80:8b:c4:ec:c7:89:
9e:2b:d6:b0:62:80:a4:6d:76:c0:3d:68:3d:8f:49:
e9:73:b0:60:3f:bb:8b:12:a1:ff:d7:1d:6a:33:81:
4f:df:c8:ee:66:0b:fc:4c:28:ce:8b:69:64:87:ed:
c6:68:a1:74:43:2c:b1:02:45:47:da:a4:5e:36:6e:
15:e3:57:38:94:f9:20:43:57:ad:7f:65:d9:7a:f8:
1b:c9:9d:6c:c4:02:9b:12:65:56:85:c3:79:08:74:
cc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8C:91:4D:7A:88:4E:D4:F7:EC:E1:81:AF:9C:47:58:0B:FF:60:25
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5IyRTXqITtT37OGBr5xHWAv_YCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:d4:49:dc:8d:22:dc:d0:72:80:fd:25:a5:22:de:90:32:0c:
f2:44:6e:e3:94:8d:b7:9d:b1:64:ac:4a:38:e0:62:94:60:40:
0c:2c:78:6f:7c:33:d1:58:02:b2:74:98:87:cf:b9:7f:84:52:
2d:c8:42:10:71:8a:c5:f5:61:fb:a8:a9:f0:e5:00:f5:31:f4:
c4:c7:58:6c:ee:bd:df:09:7f:82:00:aa:6b:fc:69:c0:a0:ce:
f0:83:37:7d:8f:77:90:d4:e7:84:e2:9c:97:32:c6:a9:3f:6c:
27:b2:99:bc:5f:c3:34:df:8c:17:f8:f8:ba:87:24:98:7f:3a:
72:0a:0c:1e:f8:af:14:3b:99:35:06:42:c2:cb:b5:71:b6:22:
bd:72:e5:c3:5f:14:29:2f:27:50:15:04:3b:31:d4:64:1f:49:
5c:e2:25:f1:48:7d:18:16:bc:14:7b:65:d2:57:c9:b2:5a:69:
c0:33:97:4c:94:38:0c:a8:f6:e9:3c:b1:30:19:b9:f4:e9:1f:
2e:5a:ad:c0:d1:f2:cb:07:5c:a9:71:9a:b7:ea:f2:44:9f:d4:
98:a8:3a:9c:b7:36:ae:47:46:a3:f0:41:27:01:7e:96:21:e6:
39:93:81:fe:db:ad:23:20:23:8b:32:1f:bf:06:07:1a:0e:65:
28:54:c3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:11:44 2025 by rpki-client