Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AsEvFmUOvpTbHjT8TRLvzcL5Q5o.roa
File: AsEvFmUOvpTbHjT8TRLvzcL5Q5o.roa (raw, json)
Hash identifier: uGcqV1rVn46ExUBcsm2Ygxs8eAycshiTu8TlimsfG6w=
Subject key identifier: 02:C1:2F:16:65:0E:BE:94:DB:1E:34:FC:4D:12:EF:CD:C2:F9:43:9A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C54457FF8756D7DB0B0353A66EF7685A5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AsEvFmUOvpTbHjT8TRLvzcL5Q5o.roa
Signing time: Sun 10 Dec 2023 15:08:10 +0000
ROA not before: Sun 10 Dec 2023 15:08:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:5441:e44f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:54:45:7f:f8:75:6d:7d:b0:b0:35:3a:66:ef:76:85:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 15:08:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02c12f16650ebe94db1e34fc4d12efcdc2f9439a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e7:3b:8e:7f:f6:56:9b:f5:73:f2:49:ab:21:
3a:7b:a9:72:5d:82:1b:d1:69:17:22:4f:d7:7a:bb:
3f:c4:35:58:aa:e0:38:2d:72:3e:c1:c2:93:8e:56:
ac:55:07:5a:84:ab:cc:09:f7:66:9e:c6:ee:39:58:
0a:06:3b:0e:42:51:cc:92:c0:c9:48:5f:87:73:17:
ae:80:5f:65:db:48:0c:58:3c:ac:34:8b:34:e9:0f:
8b:9b:00:52:04:72:b3:56:a3:a3:83:7d:42:ec:2a:
92:a1:73:e6:ce:f1:75:41:12:44:db:de:b8:09:b2:
fe:01:1a:9b:b1:90:d5:e4:23:b1:c7:38:d8:72:8f:
2b:e8:6f:5a:81:28:e6:58:7a:17:f3:66:57:7f:cd:
4e:18:3b:6b:ac:b3:4e:fd:d3:c5:b1:0c:b9:41:26:
79:68:f1:d6:3e:8d:91:d6:ee:f9:af:fc:1e:a4:42:
a6:3d:df:cd:9f:8c:19:03:7e:40:58:44:28:09:f9:
8b:9a:e5:52:73:32:37:3c:54:1e:bd:d8:74:0e:2d:
c1:ef:1e:87:98:54:92:e6:26:36:4d:23:3a:66:c0:
2d:7a:f2:24:be:90:3a:09:db:21:9f:63:5a:69:da:
36:be:9e:22:66:bf:aa:c9:48:49:3a:b0:54:70:02:
6c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C1:2F:16:65:0E:BE:94:DB:1E:34:FC:4D:12:EF:CD:C2:F9:43:9A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AsEvFmUOvpTbHjT8TRLvzcL5Q5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c2:17:0f:6e:a5:22:13:89:0e:c5:8e:81:98:da:93:1c:22:a0:
49:93:f6:54:89:e2:4d:a5:5b:58:c0:d8:9b:12:6d:e8:c3:25:
b3:00:da:d3:e2:f6:ab:43:85:13:5c:06:fa:21:09:ce:fa:1f:
33:e1:2b:09:e9:42:a3:a1:72:17:95:69:47:60:99:87:ab:4f:
51:f7:a3:0c:70:db:4e:bb:85:34:06:29:6b:c4:e4:ca:ad:11:
fc:b4:af:30:a1:ec:f4:1f:a5:7e:f6:19:51:60:40:18:05:87:
91:66:6b:9b:f4:ea:d8:7b:a1:a3:b8:2e:8d:63:f1:6b:15:2c:
64:51:57:09:52:d2:72:aa:2d:5c:79:ee:28:e6:ea:a4:6a:ba:
9f:b3:c2:70:41:55:ed:18:f4:5b:c5:64:27:7c:c7:f2:b6:07:
94:79:e5:75:8f:80:93:42:d7:ee:08:3d:10:96:11:81:1b:48:
51:de:22:0c:cf:44:9a:a0:2f:82:94:79:18:fb:a5:b4:91:03:
40:e7:90:27:48:f6:e9:5d:b4:e5:45:da:db:4a:08:8a:dd:7e:
25:72:a8:f2:70:0f:b1:88:6d:eb:03:c1:b4:9c:da:b7:5f:2c:
d4:d7:f0:24:96:23:8f:96:3f:c8:e7:4d:0e:cb:df:38:50:cc:
23:26:9c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:32:20 2025 by rpki-client