Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Hd3SyMAFU4bvPVHKT-U-bpnCYjY.roa
File: Hd3SyMAFU4bvPVHKT-U-bpnCYjY.roa (raw, json)
Hash identifier: H/Zleh04Id4Anas6sWTC2TdtnCMpwuL9B6lWvDtPTAo=
Subject key identifier: 1D:DD:D2:C8:C0:05:53:86:EF:3D:51:CA:4F:E5:3E:6E:99:C2:62:36
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C17F72404A994422EF2FBE5F1C28FED0B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Hd3SyMAFU4bvPVHKT-U-bpnCYjY.roa
Signing time: Tue 28 Nov 2023 22:05:21 +0000
ROA not before: Tue 28 Nov 2023 22:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:17f6:4f26/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:17:f7:24:04:a9:94:42:2e:f2:fb:e5:f1:c2:8f:ed:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 22:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dddd2c8c0055386ef3d51ca4fe53e6e99c26236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:39:d5:ac:64:79:91:d5:5e:bb:80:27:19:9d:
80:91:5a:e9:6e:3c:20:50:11:f4:fb:26:c5:cb:7b:
33:54:2c:77:c8:1b:75:9c:f3:3d:d8:57:48:bb:d7:
f4:93:ac:fc:78:cb:94:9a:89:5b:fd:27:22:a6:37:
67:2c:b3:bf:f3:59:aa:85:d8:bc:4d:ce:1b:0b:50:
b3:5b:4f:0f:aa:82:39:49:a3:70:d4:f0:da:d0:6f:
98:62:b4:f7:10:ab:57:aa:7a:cb:5e:74:f8:ef:d3:
48:58:d6:af:56:70:a9:48:e8:fd:cd:f0:c1:ed:29:
95:57:bc:9a:20:e1:7a:5c:6e:ef:cb:9a:4f:73:4b:
fd:0f:95:4d:05:a7:40:e5:19:ed:90:7a:80:36:25:
e3:68:53:16:ae:4e:cf:28:3f:70:19:d6:02:34:42:
0a:b4:68:d1:45:84:52:4d:58:a1:85:e2:e9:03:dd:
ab:60:56:5c:c6:c1:27:b9:2d:8d:76:15:f9:47:b8:
78:9a:89:ed:9a:1c:20:c5:bc:80:a0:dc:6c:87:c3:
fe:26:8f:72:c8:68:bb:ab:c2:70:1c:37:06:88:39:
7f:4a:c4:88:a1:f7:58:54:b5:04:6a:4f:54:dd:9f:
85:cd:b6:1e:4b:54:47:6d:69:18:b6:af:b1:66:90:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DD:D2:C8:C0:05:53:86:EF:3D:51:CA:4F:E5:3E:6E:99:C2:62:36
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Hd3SyMAFU4bvPVHKT-U-bpnCYjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:fa:83:85:e1:3b:be:ac:c1:11:b2:34:f4:df:89:48:42:28:
00:73:9a:02:be:dc:4e:ea:d0:0a:9f:00:77:44:bb:d2:cf:1a:
fd:e5:3d:82:c7:a6:05:de:3c:11:84:78:f6:d8:d1:86:47:54:
d1:b0:ae:ec:4a:e8:4d:39:ae:9c:b2:6f:47:ef:cd:92:5f:77:
25:20:23:f7:0e:f2:3e:3f:78:d6:4d:f3:0a:1e:22:20:16:a9:
7e:7f:cf:5a:37:74:2e:01:28:f3:c1:4a:88:99:8b:a9:88:78:
55:ad:6d:ea:fc:b0:93:f0:30:d3:44:03:8e:49:d7:cd:16:34:
15:12:07:2a:2c:9b:88:69:f9:4f:42:81:01:c5:aa:9c:49:61:
4d:91:7e:49:d1:fc:e7:cc:a7:37:13:57:8e:a4:ff:66:99:d6:
82:1e:3a:32:37:7e:0c:a5:d9:86:cb:2c:10:f3:01:36:7a:e7:
51:33:67:c5:52:a9:cc:d4:6b:8b:bf:32:25:cd:97:0a:2c:75:
5f:39:b0:e9:c1:da:e0:67:d8:2b:b1:f7:61:5b:53:4a:96:19:
b2:db:85:76:1a:f8:6e:0f:33:ca:a9:23:55:41:1f:44:52:6b:
a9:7c:b3:e5:9f:c5:90:8c:da:ca:a5:91:64:7f:cc:3b:f3:9c:
cd:74:bf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 12:08:42 2025 by rpki-client