Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9xq5taxEneylbIn8d70s06SYMBI.roa
File: 9xq5taxEneylbIn8d70s06SYMBI.roa (raw, json)
Hash identifier: WOnxYOlTpcNUfSXoeEWtzNg4+b/UhWKZVf7XHWqb/Jo=
Subject key identifier: F7:1A:B9:B5:AC:44:9D:EC:A5:6C:89:FC:77:BD:2C:D3:A4:98:30:12
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3D83C53979528CD53201DAF22CD035A0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9xq5taxEneylbIn8d70s06SYMBI.roa
Signing time: Wed 06 Dec 2023 05:04:55 +0000
ROA not before: Wed 06 Dec 2023 05:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:3d83:5978/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3d:83:c5:39:79:52:8c:d5:32:01:da:f2:2c:d0:35:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 05:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f71ab9b5ac449deca56c89fc77bd2cd3a4983012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4a:b2:15:9a:f8:27:6a:7c:5e:17:c3:6a:51:
b3:e6:32:29:1c:35:50:c3:a2:d8:4f:dc:b0:ea:42:
68:78:35:38:93:2a:0d:f1:6a:0d:d6:7e:f9:9b:5f:
2f:cd:70:63:52:1c:04:f2:c4:7c:15:5a:a5:19:48:
d3:d8:5f:cf:10:e2:08:07:38:92:23:6d:52:c4:24:
b5:e5:a2:e3:d9:c6:2f:f9:38:2f:08:81:02:10:e7:
8f:0c:b8:97:6c:0c:0d:c7:74:af:2b:ca:f7:fe:2b:
34:4a:a3:a2:24:44:f2:92:5e:91:0e:67:c3:af:14:
1a:26:1e:de:ed:ba:8b:31:87:4f:b9:bd:91:62:c8:
46:90:84:84:88:7a:49:6e:40:e3:ea:e8:96:d0:4e:
13:02:7e:68:f9:e2:6e:23:7d:63:03:24:18:3c:82:
46:7e:80:6d:9c:5e:f5:5f:61:bd:d9:1c:06:9f:28:
c5:b9:63:23:c0:32:b7:6a:a8:0c:68:89:39:4f:7d:
cd:fa:dd:e3:c0:3c:0e:25:4f:43:c4:af:91:54:f1:
42:a3:25:2e:21:34:a7:cd:e1:57:55:05:24:8e:0b:
d7:51:cd:14:16:02:15:b7:04:89:41:65:c5:c7:94:
19:a2:43:b1:9c:0a:44:75:64:60:03:6a:98:58:30:
15:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1A:B9:B5:AC:44:9D:EC:A5:6C:89:FC:77:BD:2C:D3:A4:98:30:12
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9xq5taxEneylbIn8d70s06SYMBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:27:e3:3a:32:e2:70:8b:42:95:f6:da:63:32:2f:8d:f1:b6:
91:0c:64:b7:5f:c5:a6:e8:8c:48:48:5b:9e:09:b0:a3:56:a1:
a5:c2:fb:c9:93:08:ea:f2:e3:32:f3:10:db:c1:26:71:9d:26:
18:f2:6f:9c:b7:90:ec:ad:92:3e:69:50:15:87:24:ea:3d:65:
d5:41:74:c2:52:f9:d6:02:68:c6:3a:f9:b5:5e:2d:6a:d8:25:
5f:2a:f3:39:2b:91:ff:54:34:95:b9:67:03:6e:d3:3e:6b:da:
5c:db:9b:94:a6:41:14:d8:52:b7:70:5f:4c:a8:2a:28:e4:b8:
d8:30:a3:db:f5:cd:6b:03:b2:3e:c2:a0:58:d3:63:9d:eb:de:
13:9f:45:04:a4:5e:10:99:f6:ad:54:94:51:57:b5:d5:09:1f:
94:2d:9f:d4:64:29:41:93:c2:20:f2:22:54:ba:d4:1c:34:c0:
ea:e9:56:81:96:19:b5:69:4b:ee:8c:5b:ea:15:ec:a3:8a:6f:
96:93:d4:bc:de:08:c0:f1:a0:4a:80:fb:43:d5:ee:73:3f:a0:
b0:c5:b9:91:df:d4:52:d9:ff:8d:f7:5b:69:f3:1d:aa:16:af:
26:3a:cf:2e:a5:b5:eb:06:61:25:37:53:6c:05:18:20:2a:da:
96:89:23:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:33:07 2025 by rpki-client