Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/91mdVfIxH2KlWNvXMEbmCoX79is.roa
File: 91mdVfIxH2KlWNvXMEbmCoX79is.roa (raw, json)
Hash identifier: wHOL/Zh0DsCDI+FIkBF2fYogIVYtKSiBO2TTMpmwb9I=
Subject key identifier: F7:59:9D:55:F2:31:1F:62:A5:58:DB:D7:30:46:E6:0A:85:FB:F6:2B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC4EE7836160DC05163A86645E4906863
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/91mdVfIxH2KlWNvXMEbmCoX79is.roa
Signing time: Sun 24 Sep 2023 02:04:37 +0000
ROA not before: Sun 24 Sep 2023 02:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:c4ee:2d13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c4:ee:78:36:16:0d:c0:51:63:a8:66:45:e4:90:68:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 02:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7599d55f2311f62a558dbd73046e60a85fbf62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:90:79:34:90:5f:df:f1:7c:82:c3:75:9a:ad:
1c:26:e9:ff:6e:bc:0d:f3:9e:2c:6b:8e:fe:7f:3d:
5b:5f:c7:d3:b3:4b:9d:c3:06:01:45:46:68:f3:ba:
1a:0e:8c:ad:6a:13:ab:89:c5:ae:3e:24:0a:84:af:
ba:5b:c9:02:eb:c8:ae:f6:a7:bd:89:af:91:70:33:
d6:d6:f5:54:88:5f:ba:c8:ab:27:35:fe:49:fc:5a:
8e:a8:b7:dd:03:bf:e6:4c:a7:ee:6f:c1:30:44:af:
6a:28:11:b9:51:56:a9:ea:82:06:c8:4e:11:d6:9f:
42:43:7f:0d:5d:de:e9:2f:3f:04:e0:d6:5e:b4:63:
a6:1b:7b:ae:f0:2c:3f:d6:25:9a:39:e3:86:8f:4f:
57:14:b0:11:90:82:55:9e:cc:b3:46:20:bf:8b:22:
01:68:7e:d9:f3:0e:73:5f:73:96:33:bf:9b:29:46:
9b:92:50:2a:b2:a7:ed:11:3b:7b:f4:5d:69:75:e5:
80:66:61:b9:9b:17:8c:3c:66:cb:22:7e:60:c1:09:
20:f8:2e:7b:c8:7c:7c:07:7e:77:a1:3d:f4:17:d8:
e3:d4:85:26:06:c9:45:a2:a0:09:3d:6b:cd:2b:78:
8d:ee:a6:c4:fb:61:b1:1a:60:ae:53:98:58:3d:65:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:59:9D:55:F2:31:1F:62:A5:58:DB:D7:30:46:E6:0A:85:FB:F6:2B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/91mdVfIxH2KlWNvXMEbmCoX79is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b8:18:59:53:6e:82:69:e9:2a:5b:c0:11:9a:19:4c:f7:5e:45:
8e:02:c7:52:74:40:eb:fa:ef:5a:95:68:a6:18:b3:e8:22:67:
a0:d7:5b:28:eb:8b:13:a9:a2:e2:11:62:cb:23:67:08:05:42:
91:2b:01:c6:c8:df:68:86:55:9d:b3:4e:cf:76:e1:68:3a:e2:
f1:5a:3a:1e:f7:8b:94:6b:03:62:0e:b6:d5:83:ff:3d:f8:76:
2d:7d:45:1c:30:83:be:68:44:43:ac:f9:0b:6d:8b:b3:de:77:
23:4a:f7:da:be:9a:35:29:25:49:9d:48:a4:6f:3d:b6:f2:29:
df:a1:6f:1e:27:1d:cc:89:9e:7b:ff:73:03:df:89:0f:29:9b:
03:ed:a9:28:8e:d9:4e:56:95:17:52:73:11:b9:f8:04:8c:ed:
75:b7:6e:60:3b:c9:6c:be:58:90:96:ca:8f:82:98:23:1a:be:
e2:41:4e:8f:c9:27:54:01:15:68:58:9c:7c:b3:b7:f5:54:f3:
fe:3a:bf:d7:7d:88:1e:1b:77:ef:b6:ff:a2:64:87:2a:3c:83:
b5:d4:51:06:c4:de:bd:f7:cc:a4:a8:f5:49:a5:96:13:75:b5:
b2:49:73:b4:a5:71:78:ed:0e:07:1e:38:86:22:c6:22:21:73:
0e:c6:9c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 11:53:07 2025 by rpki-client