
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/H00Bx_8kpvPDJwNWCy5stOk4XwE.roa
File: H00Bx_8kpvPDJwNWCy5stOk4XwE.roa (raw, json)
Hash identifier: D6gx+JBDu7ZtA3SQ2F4BS8JaYtdhPrBURYkc8k8xg1U=
Subject key identifier: 1F:4D:01:C7:FF:24:A6:F3:C3:27:03:56:0B:2E:6C:B4:E9:38:5F:01
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE25473317F4F0E41F6BC6316F6ED9D87
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/H00Bx_8kpvPDJwNWCy5stOk4XwE.roa
Signing time: Fri 29 Sep 2023 19:04:59 +0000
ROA not before: Fri 29 Sep 2023 19:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:e254:39e9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e2:54:73:31:7f:4f:0e:41:f6:bc:63:16:f6:ed:9d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 29 19:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f4d01c7ff24a6f3c32703560b2e6cb4e9385f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:fc:ed:38:38:12:c9:36:0d:46:96:ea:84:
e5:bc:f7:70:a7:27:09:06:92:c5:55:24:6f:26:60:
b1:92:59:02:7f:8b:08:98:60:51:99:87:69:66:60:
58:fd:a9:6a:fd:f4:3b:46:59:ba:3a:6c:12:bb:51:
2a:78:fd:b7:91:08:a5:f4:9a:49:2a:9f:74:1e:c1:
74:31:ae:28:6a:1e:02:1c:66:06:d2:45:cf:e9:c8:
a8:ae:03:62:dc:c4:05:44:0f:24:cb:22:7d:27:a1:
dd:23:68:82:ec:94:55:a1:ed:a8:90:9c:4d:57:26:
20:9f:42:5d:26:eb:ce:36:f6:28:2d:db:33:bc:0e:
6f:ea:77:70:7f:00:04:29:39:d2:75:a9:f2:1f:0d:
f1:69:1d:22:b7:ea:49:84:61:e6:1c:6a:e8:01:3b:
3b:d5:20:c3:36:6e:5d:4f:f0:23:51:3b:18:26:ec:
58:4c:f4:99:75:a5:d8:2e:b5:af:9e:e3:71:32:4a:
e5:0f:04:af:6d:8e:c4:a8:e3:ac:66:86:ad:9c:d6:
72:f5:76:b2:08:36:ca:2b:ed:2a:46:42:d5:5a:ee:
99:1b:85:d7:06:06:d4:32:17:22:58:95:46:d7:0e:
5c:41:2e:3d:81:99:af:dd:9e:85:4c:6a:39:a6:53:
27:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4D:01:C7:FF:24:A6:F3:C3:27:03:56:0B:2E:6C:B4:E9:38:5F:01
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/H00Bx_8kpvPDJwNWCy5stOk4XwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:07:68:c8:a2:fe:59:e1:0b:db:0b:bc:e8:6f:00:2f:fd:6d:
cf:2e:be:93:a4:9a:54:0a:4e:af:83:ac:9f:9e:ee:ae:f1:d3:
7d:d3:6c:1e:3f:a9:fe:3a:ab:28:ac:c1:88:f4:2a:9f:3d:61:
7c:25:9e:8a:c1:46:2e:25:c6:c3:d8:e0:e5:cc:69:f6:c0:68:
99:50:6b:25:16:6d:51:af:28:ab:5b:b2:65:87:b1:e9:4b:b2:
57:c4:d4:da:49:d0:5c:ad:24:13:42:e7:73:88:8f:a9:02:1b:
77:2e:49:ba:ae:fd:2a:23:7c:61:ed:5d:1d:8e:02:08:29:52:
b0:1f:46:9a:65:6c:c3:b0:39:6c:37:d3:03:fe:bc:6f:8a:72:
33:3d:70:68:25:f3:48:b4:75:0e:69:7a:09:e8:9b:d1:b1:93:
c3:f3:b6:f4:46:ca:6a:ed:f2:63:e3:9c:8e:08:b2:8a:97:80:
43:d9:ff:5d:32:9f:6b:dd:29:b0:11:55:e0:8e:3e:41:7d:de:
eb:e9:bf:a1:27:1c:f8:d0:b9:be:e6:2e:b6:0e:97:c7:e1:1f:
6d:c4:c6:cd:26:73:34:69:be:f1:cf:7b:e8:7b:07:63:a4:d1:
cd:ce:8f:3d:78:f9:c9:ab:02:0d:c8:4e:48:3a:ec:ee:52:e4:
df:7c:ef:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:27:08 2025 by rpki-client