Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DXiSb4RGJt2XRqtW6qCKoFOt2nM.roa
File: DXiSb4RGJt2XRqtW6qCKoFOt2nM.roa (raw, json)
Hash identifier: kYRI/p3w+9PYFIXsoKoGmo/GlhAtl6H1Ug5n4UGdQeY=
Subject key identifier: 0D:78:92:6F:84:46:26:DD:97:46:AB:56:EA:A0:8A:A0:53:AD:DA:73
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEF362E76C2F0C44303EB4DCDD3A8E57D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DXiSb4RGJt2XRqtW6qCKoFOt2nM.roa
Signing time: Mon 02 Oct 2023 07:06:59 +0000
ROA not before: Mon 02 Oct 2023 07:06:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:ef35:724f/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:36:2e:76:c2:f0:c4:43:03:eb:4d:cd:d3:a8:e5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 07:06:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d78926f844626dd9746ab56eaa08aa053adda73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f6:78:7b:df:33:a7:ba:be:86:ac:07:1c:ba:
04:31:da:06:17:ae:d0:91:aa:7f:08:dc:bd:86:4e:
a0:9b:ac:88:0f:53:32:af:c9:70:22:af:bb:90:25:
9b:c4:0a:d4:0e:f9:3e:dc:9a:dd:b6:ed:89:0e:ad:
ad:a1:0c:01:d9:78:c4:3e:5b:55:d2:66:75:e4:1f:
15:f8:c5:b2:ab:2d:40:4e:9b:c6:e3:95:5b:25:1e:
d3:dd:5b:2a:f9:a4:7b:8f:39:50:1f:2e:9a:81:57:
83:b7:72:75:a5:70:76:7d:8c:bc:7f:ed:0b:df:3d:
b0:fb:53:69:77:f5:f5:b0:c9:d4:40:7e:d4:3d:41:
fa:2a:57:b1:d8:ba:27:97:3e:db:ca:44:88:25:47:
b4:63:3f:3f:e7:38:8f:a7:4e:63:33:f0:9c:f7:a1:
77:11:9f:7f:68:b4:15:c1:e4:9a:a6:41:fe:68:d4:
af:17:31:6d:8c:7a:d7:97:44:20:47:93:53:da:bf:
e4:15:ee:2a:f8:6b:f8:bc:fe:4b:42:a3:5b:8b:56:
9b:04:6a:91:d5:94:2a:19:90:5e:e7:0e:88:e2:a4:
df:92:7b:0d:2b:47:25:ba:11:84:67:05:24:c8:84:
f7:1c:4e:68:fe:12:5c:84:36:a5:ed:be:b0:cd:8e:
b6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:78:92:6F:84:46:26:DD:97:46:AB:56:EA:A0:8A:A0:53:AD:DA:73
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DXiSb4RGJt2XRqtW6qCKoFOt2nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:a9:d0:2b:f4:92:be:25:7d:f6:5e:08:91:37:f4:d4:ae:44:
91:e4:b3:88:35:91:ef:d5:65:8b:8c:3f:90:2c:e6:05:ef:9d:
a1:03:04:4d:3a:68:5b:af:31:b6:7d:88:e5:70:9a:f2:7c:12:
63:c2:87:d8:ca:5d:62:63:c1:54:ff:6c:98:29:6d:01:c1:08:
04:66:b8:6e:53:d4:bb:04:91:57:32:df:6d:7d:25:20:00:75:
cf:76:63:e2:c0:d0:c7:df:52:4a:f6:84:f3:28:e3:3d:30:c3:
12:c9:72:d5:04:d1:78:e1:f8:8d:00:03:b0:41:97:29:e6:da:
b3:c1:75:bf:98:e2:39:36:40:97:f2:fb:dd:be:18:9c:c6:d5:
2c:b4:cf:95:f9:e3:67:7f:bf:4b:eb:96:af:a8:4d:d8:4f:a3:
24:bd:25:2d:9d:2c:1f:06:0c:2e:37:a4:f6:0d:2a:5f:0a:2a:
b4:9c:3b:40:0d:45:1b:a5:7e:ab:ee:23:89:9e:f8:37:42:ee:
2b:53:b8:aa:66:a8:c8:e5:db:fe:90:da:bc:40:0e:00:4e:3b:
70:d1:c0:ce:22:15:d3:5c:c0:f6:8c:1e:58:0e:57:94:af:96:
b9:48:58:e8:e3:a0:0d:e5:ae:27:aa:4b:78:28:af:7f:5c:86:
7e:e1:76:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:19:46 2025 by rpki-client