Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9miyA1PCvhOAxj9_xv-ZqzvjDa4.roa
File: 9miyA1PCvhOAxj9_xv-ZqzvjDa4.roa (raw, json)
Hash identifier: /V6XTK2bk0sT+H80ViO6jASSQa4IE7JvQf620UyQRhI=
Subject key identifier: F6:68:B2:03:53:C2:BE:13:80:C6:3F:7F:C6:FF:99:AB:3B:E3:0D:AE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1DC47341BD54A29E8DFA095DA8C89F2F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9miyA1PCvhOAxj9_xv-ZqzvjDa4.roa
Signing time: Wed 11 Oct 2023 08:04:55 +0000
ROA not before: Wed 11 Oct 2023 08:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:1dc3:e4d3/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:c4:73:41:bd:54:a2:9e:8d:fa:09:5d:a8:c8:9f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 08:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f668b20353c2be1380c63f7fc6ff99ab3be30dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:94:32:6d:1a:2c:69:9e:2c:9d:90:4b:9b:
d5:99:c0:e9:b1:e4:0a:0c:79:de:29:4d:f9:9f:ad:
84:88:95:b5:ec:b1:1d:4f:75:e8:98:86:9e:49:00:
9f:ef:a4:2c:63:1b:00:75:04:16:77:48:28:16:19:
41:4b:bf:be:ff:84:5a:f7:04:88:cf:6e:6c:80:39:
0a:02:90:5a:6b:b1:a4:b6:29:9e:9b:25:5c:3b:07:
93:c7:a9:f3:79:3f:b3:d0:52:1c:e5:d7:6e:dc:0d:
71:f7:6c:70:23:c2:77:2d:58:19:2d:c9:5f:04:5a:
e6:01:e7:d6:d3:3c:0b:67:4f:66:b0:dc:46:90:ff:
0a:dc:a0:a6:83:e3:27:de:e6:1b:42:d5:fe:64:a6:
82:c3:52:10:b3:a3:3b:9a:f0:0f:77:41:06:51:a4:
81:b9:01:d3:21:76:37:5b:f9:5d:23:69:85:dd:3c:
13:f2:89:63:17:6f:2a:0b:ed:fc:ad:c5:f0:06:ad:
a8:7c:0e:47:1d:37:93:0a:a5:b8:0f:21:53:02:8d:
82:fc:db:56:ed:1d:b7:f7:11:bc:2d:87:e2:bb:42:
04:36:a4:f6:49:68:dd:9e:70:df:11:cd:0f:bb:30:
d0:54:d5:c3:c6:17:2f:fd:35:87:4a:09:b7:61:63:
95:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:68:B2:03:53:C2:BE:13:80:C6:3F:7F:C6:FF:99:AB:3B:E3:0D:AE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9miyA1PCvhOAxj9_xv-ZqzvjDa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:d4:a5:61:d6:d8:16:1b:15:ec:e5:e6:76:90:8b:72:17:a1:
17:15:0f:1d:90:f5:8e:97:f8:bf:68:54:c9:28:f9:2e:55:30:
cd:fb:bc:67:92:de:90:fc:08:62:f3:94:f0:4b:92:f9:aa:e2:
a8:12:7e:e9:d2:8d:64:8c:3a:cf:2e:41:7f:3d:57:7a:1f:f5:
8f:ca:f4:7d:21:89:b4:ca:ad:81:ad:02:cb:8d:c0:c6:e9:7b:
a4:70:1f:37:fd:43:15:61:78:c2:a9:05:c7:d1:77:33:8a:96:
b0:3f:b6:e9:8f:7e:74:e7:38:55:6e:85:06:20:4a:9d:5a:d0:
29:fe:23:1b:7c:f0:f8:28:8b:a0:1b:66:be:22:99:02:c4:91:
74:86:79:6a:03:a4:95:41:81:55:7f:24:31:56:48:4c:3c:13:
83:5f:f2:13:b2:10:6c:bc:f4:b0:30:13:9a:2e:b0:e2:20:6e:
02:8c:66:bd:16:29:64:f5:89:e7:23:fd:6c:a7:a3:39:97:1b:
ce:7e:3c:5b:c0:88:d0:b6:25:21:31:d4:a8:83:a2:a1:98:e6:
08:4d:fe:cd:b5:ee:f9:8c:31:37:e9:d5:73:24:56:76:e5:3c:
81:1a:c9:74:46:87:4a:af:f1:39:e0:4e:51:b6:21:35:6f:bc:
30:a9:63:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:23:12 2025 by rpki-client