Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HJOw4xRO5r5OaeGCHYzp6QRqhUs.roa
File: HJOw4xRO5r5OaeGCHYzp6QRqhUs.roa (raw, json)
Hash identifier: i4z8O4XuCQ1VyQlwupzyyldRnh7ZlSuOgVkWW/69W7U=
Subject key identifier: 1C:93:B0:E3:14:4E:E6:BE:4E:69:E1:82:1D:8C:E9:E9:04:6A:85:4B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B34BA22FF39BB8CCCD1BB5BB9B0C37A36
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HJOw4xRO5r5OaeGCHYzp6QRqhUs.roa
Signing time: Sun 15 Oct 2023 19:04:55 +0000
ROA not before: Sun 15 Oct 2023 19:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:34b9:8dc8/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:34:ba:22:ff:39:bb:8c:cc:d1:bb:5b:b9:b0:c3:7a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 19:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c93b0e3144ee6be4e69e1821d8ce9e9046a854b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e8:d9:2d:15:86:d1:fd:70:8f:8f:7a:4c:19:
97:f4:7b:de:4d:1d:85:b2:a1:69:28:90:55:bd:c5:
1b:01:48:9c:d2:57:f3:06:ac:e1:c6:8c:9d:2b:b2:
32:16:74:8c:14:a8:50:7e:10:55:e4:96:4a:99:2a:
5b:8a:e7:d6:f3:f6:f1:cb:8f:57:85:0d:b6:9d:78:
8c:e1:5a:52:d2:eb:35:93:8d:fd:b6:82:b2:ed:c2:
ac:ad:0c:02:10:6c:a5:8e:52:16:ad:9c:ca:93:f4:
d6:9d:57:e9:06:dd:89:8f:23:1c:43:6b:9e:d0:10:
d7:05:0f:0d:ff:df:66:94:d9:e9:ee:68:35:dc:20:
7d:d1:0b:66:71:60:c3:5e:b3:37:8c:6c:97:15:38:
80:b0:f0:91:57:9f:bd:69:f2:e0:fa:03:67:30:78:
15:73:9c:f4:0f:68:05:60:e0:d7:5e:89:e5:1b:4b:
e0:45:c4:d0:30:19:22:f7:11:83:df:07:14:7d:ff:
d2:df:13:d6:ec:8e:93:97:c6:60:fb:3c:d6:ff:90:
c1:c1:c0:ae:33:94:7e:97:42:97:93:c4:3e:4f:e3:
98:aa:12:0c:a3:4c:d8:7c:05:7b:a8:72:b0:90:72:
dd:9c:4c:39:94:28:a2:9c:49:24:f6:61:3b:24:38:
e5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:93:B0:E3:14:4E:E6:BE:4E:69:E1:82:1D:8C:E9:E9:04:6A:85:4B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HJOw4xRO5r5OaeGCHYzp6QRqhUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:a8:3a:b0:e0:ab:3f:e9:f9:8a:1f:fb:a0:b3:6a:57:12:8f:
3c:c9:2b:1f:d0:51:19:43:de:31:c5:25:cd:9c:a8:1c:88:3c:
f2:23:06:29:14:51:77:30:0a:49:7f:bc:3c:69:0f:49:da:cf:
c7:25:b7:3a:7f:68:fb:1c:c4:30:44:11:81:04:5f:52:57:80:
68:c5:4a:cc:28:42:ef:d1:ac:c8:a9:dc:36:4f:8d:67:1c:44:
37:c9:26:fc:10:9f:5e:79:28:43:1f:3f:0e:e5:69:c7:5a:3d:
3f:7e:6d:8f:8c:72:e2:73:08:a4:14:49:b1:76:f3:20:26:81:
60:5e:5e:68:73:37:c5:96:91:be:af:1d:84:af:a1:64:72:ed:
e6:c2:72:a0:a0:f4:41:79:8d:a6:10:e9:7d:47:fd:71:39:cb:
b7:e0:66:2f:78:92:f8:09:ba:bb:df:e7:fd:5a:fe:91:80:7a:
84:4a:5b:42:9b:8e:3a:82:7c:ec:db:21:61:cc:5e:dd:14:05:
c4:d9:21:3b:fb:d4:af:8b:37:04:ef:be:16:43:6e:82:b3:33:
72:c5:a6:d3:ce:0e:2e:a9:0c:8e:37:9a:4b:97:c1:ef:2d:d5:
62:a8:3a:fb:39:27:18:a1:11:97:15:cb:ef:a4:d2:88:c9:41:
90:bb:42:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:47:25 2025 by rpki-client