Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9Ece1_DMbvfrFcAnU6ZDcOyleTg.roa
File: 9Ece1_DMbvfrFcAnU6ZDcOyleTg.roa (raw, json)
Hash identifier: BlcpjFOVDwd2R3YVk4eZDSdc6elEIQPTmHYaU4oorjs=
Subject key identifier: F4:47:1E:D7:F0:CC:6E:F7:EB:15:C0:27:53:A6:43:70:EC:A5:79:38
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7D465145EAFC3697662336B2AD88253B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9Ece1_DMbvfrFcAnU6ZDcOyleTg.roa
Signing time: Sun 29 Oct 2023 21:10:42 +0000
ROA not before: Sun 29 Oct 2023 21:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:7d40:7c29/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7d:46:51:45:ea:fc:36:97:66:23:36:b2:ad:88:25:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 21:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4471ed7f0cc6ef7eb15c02753a64370eca57938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:08:56:f9:2c:b2:44:28:9b:e2:1c:4d:fa:
0f:a8:6c:9b:60:5c:ea:32:bc:99:79:58:d1:30:31:
8d:29:a1:a2:96:de:c3:19:af:6e:e8:32:0b:ac:27:
ed:02:2c:66:5c:d3:7d:e5:a9:4f:d1:05:7b:1b:66:
4a:fc:c0:90:73:59:0d:30:1d:d7:2e:94:c0:75:74:
1c:52:f4:f0:0c:66:1a:49:17:8a:e2:70:0a:14:33:
99:aa:c7:4d:a6:6a:30:1c:d9:2f:ed:ab:1a:dd:6e:
cd:7c:69:59:75:7f:7e:e6:b8:d8:61:cd:e7:d0:5b:
e4:78:0f:46:d5:f5:77:d8:59:5d:00:aa:e6:1d:25:
a9:06:19:48:51:7e:f8:c8:1b:43:e1:94:b9:98:34:
3b:e8:ea:7b:ed:27:d4:d8:c3:eb:e5:8d:f7:f7:08:
50:e0:6b:a5:9b:ae:83:d8:ce:d7:60:e6:05:62:0a:
d3:93:c1:51:48:bb:e8:60:a6:ce:8a:5f:15:4b:93:
90:0f:a9:ac:13:36:df:02:79:98:5f:46:1f:77:95:
a5:73:87:a7:d3:b3:95:38:5b:84:a9:03:e7:52:96:
91:02:3b:c6:e7:cd:2e:ef:b5:ad:89:c1:30:2e:18:
3d:a1:bb:0c:92:cb:bd:cc:1f:b3:1e:bf:2c:c5:34:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:47:1E:D7:F0:CC:6E:F7:EB:15:C0:27:53:A6:43:70:EC:A5:79:38
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9Ece1_DMbvfrFcAnU6ZDcOyleTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:d5:35:64:59:94:99:18:f4:28:10:2a:62:13:17:e0:fc:c7:
bc:2d:8b:a9:37:45:22:76:4f:38:13:33:a0:f4:69:42:ed:c1:
89:c7:a2:64:88:72:1b:9d:9b:12:d2:52:8e:17:30:60:d4:2d:
33:15:29:79:3e:25:63:34:fa:3d:4f:b8:ce:78:0b:d4:65:91:
81:5b:15:30:d4:1c:ae:4e:6c:f9:68:17:5e:eb:da:89:e9:5b:
e9:6b:56:4b:6b:02:f2:a0:db:88:f2:61:fd:bf:29:46:ec:c9:
ab:af:b9:c9:5e:12:f4:3b:ad:f6:33:18:42:7f:d4:94:43:1c:
7c:6a:b3:51:d0:9e:26:58:aa:a4:d4:c6:5c:21:70:79:c5:1e:
b3:81:62:b0:5c:96:ec:eb:2e:20:74:ba:10:ac:df:50:a2:48:
4c:30:b1:dc:2d:15:a9:a9:ad:ab:4f:1c:f4:f6:7a:19:12:82:
66:55:6b:42:fd:1d:92:ce:0c:b2:a5:4c:de:70:a4:8a:11:d1:
51:15:b1:6a:ab:de:3c:a2:cb:e8:b9:f9:29:e5:23:b6:53:53:
f5:c2:d4:7b:50:d0:26:ca:96:46:01:70:dc:6c:9c:a9:88:a4:
18:d8:03:0b:91:21:5a:cd:b9:c9:ac:45:1a:58:3d:73:b6:e7:
b8:6d:9c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 19:14:32 2025 by rpki-client