Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HKdVjFTxAbRvgny9uBJ60JWx80o.roa
File: HKdVjFTxAbRvgny9uBJ60JWx80o.roa (raw, json)
Hash identifier: 8HDandNV9dZ23ypx7KL90hDEOXeLA5n+g9bHbrUNzJU=
Subject key identifier: 1C:A7:55:8C:54:F1:01:B4:6F:82:7C:BD:B8:12:7A:D0:95:B1:F3:4A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0703897F670F9452E3CE9F3DC8F3325F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HKdVjFTxAbRvgny9uBJ60JWx80o.roa
Signing time: Sat 25 Nov 2023 15:05:21 +0000
ROA not before: Sat 25 Nov 2023 15:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:702:fe25/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:07:03:89:7f:67:0f:94:52:e3:ce:9f:3d:c8:f3:32:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 15:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ca7558c54f101b46f827cbdb8127ad095b1f34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:54:19:63:d0:45:d3:fc:6d:bb:99:8c:c7:a1:
7a:59:16:53:1c:7e:64:b8:70:53:5f:30:b7:a0:3c:
6b:d1:24:94:4e:1c:02:ce:3f:65:60:4c:75:08:f9:
2e:0d:2c:9b:e7:5a:e8:69:1a:1a:d0:e4:87:6b:96:
8b:f5:1f:02:ec:5f:ea:70:40:c4:2f:cd:3d:19:7c:
d0:84:28:25:e3:03:ca:d1:a0:ef:02:b0:b5:94:95:
3c:79:af:d7:c3:90:9a:5e:80:3d:0b:67:89:8c:21:
02:48:1c:34:47:59:e6:bf:de:22:24:9e:ab:02:fb:
87:ba:ef:bc:c7:01:50:86:8a:e0:fa:2b:40:66:14:
25:96:2f:13:a2:07:97:7f:f9:6c:48:a1:74:fe:46:
6d:e8:b4:b5:78:eb:99:7b:ba:8d:ee:bf:e4:d2:60:
d7:8d:40:0f:f3:ef:8e:47:b5:22:be:52:fc:1a:8d:
0c:de:28:2f:b1:e9:c8:ea:6c:44:3e:2a:24:7a:ff:
81:6e:84:6e:f5:9a:55:e3:a6:b3:94:01:de:a4:86:
3f:e4:72:0f:6e:05:4c:24:f6:f3:22:f9:37:fd:2c:
73:f4:a4:93:4e:4a:1f:96:40:75:f8:86:36:cd:ba:
ba:06:78:9d:23:ce:d4:cb:73:e9:b6:79:48:03:84:
28:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A7:55:8C:54:F1:01:B4:6F:82:7C:BD:B8:12:7A:D0:95:B1:F3:4A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/HKdVjFTxAbRvgny9uBJ60JWx80o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:dd:8c:a3:5b:1a:5f:1f:dd:75:eb:aa:64:87:a0:78:90:ba:
b7:46:16:b1:7c:16:38:07:46:90:bc:5b:8e:01:89:e4:df:b5:
d8:7e:db:d6:14:fb:b2:10:e3:e7:2c:90:80:9f:48:4e:a3:ab:
1c:f5:46:81:5c:a7:f9:eb:d0:a4:9a:45:6a:00:87:1f:de:a8:
d8:f1:a3:ae:27:3b:97:9e:40:d3:45:f3:16:7e:92:6e:d6:94:
5e:e6:17:1d:fc:34:2a:63:4b:50:c0:d6:b9:ad:fe:41:d3:e3:
ff:8a:a3:c4:e9:a6:dc:55:3f:21:16:7c:a9:0e:b7:4c:b3:5b:
ae:32:b6:ff:5a:ab:45:f3:66:94:e3:e3:02:45:7d:1e:f4:00:
a3:a9:de:18:2e:9d:0d:ff:7b:c3:ac:c9:10:54:83:3c:02:e0:
41:21:6b:84:f1:46:a3:8b:fb:b3:98:95:0d:b5:7a:b2:42:14:
89:d9:54:b2:a3:7c:72:99:4e:bc:47:61:12:95:e5:16:9e:c2:
7b:87:56:62:1e:1e:c9:28:b1:4e:e5:5f:70:05:12:de:9d:77:
97:4c:88:52:fb:bb:9a:fc:ca:c4:8a:59:64:72:82:0c:5a:62:
43:39:9f:92:da:c0:8c:9e:8d:f4:97:a5:c8:05:e7:78:55:da:
f9:f4:93:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:11:38 2025 by rpki-client