Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IPRt0U-UKAhF25kfbfz3sB2dNno.roa
File: IPRt0U-UKAhF25kfbfz3sB2dNno.roa (raw, json)
Hash identifier: Vo+B0hS2GpuzRg8HGXTuiJ+EvtT+9X5Bmc/rnO/JTS0=
Subject key identifier: 20:F4:6D:D1:4F:94:28:08:45:DB:99:1F:6D:FC:F7:B0:1D:9D:36:7A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8F7E878C2A6ACFC9EAC0DB2F769EE439
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IPRt0U-UKAhF25kfbfz3sB2dNno.roa
Signing time: Thu 02 Nov 2023 10:05:15 +0000
ROA not before: Thu 02 Nov 2023 10:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:8f7d:b78a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:7e:87:8c:2a:6a:cf:c9:ea:c0:db:2f:76:9e:e4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 10:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20f46dd14f94280845db991f6dfcf7b01d9d367a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e3:99:ad:9d:72:73:f7:74:1c:a4:fa:a8:cf:
7d:4b:0e:f7:ad:ea:5a:6e:5c:be:ac:14:2b:30:75:
1e:ba:e9:08:76:37:4f:b2:2b:28:8a:ff:38:35:24:
0a:be:18:c2:08:2f:99:ca:20:d1:f8:9d:af:5e:34:
c4:85:a5:3d:78:cd:68:1a:a9:ac:fc:8b:38:8e:ef:
05:04:da:78:35:9c:01:ba:67:bb:29:68:09:3c:60:
5d:ac:70:c0:c0:89:f7:2d:b4:b3:b6:3b:f1:55:62:
fe:75:ba:99:f9:98:02:3c:fe:4d:b2:4c:17:b1:f1:
f4:48:8e:61:1d:6d:a3:94:bd:42:9b:82:80:8c:00:
c1:d6:57:9d:79:02:97:d9:f8:2b:e9:89:7e:44:72:
57:15:20:97:48:02:fe:de:e9:e6:7e:60:5c:10:a2:
6a:75:16:47:b6:55:2a:27:34:12:eb:86:0c:e6:10:
ee:ec:e2:6a:bf:50:55:67:ef:02:e9:b1:55:1d:ff:
54:49:54:81:09:6e:b2:7e:e3:0e:69:98:3e:fa:40:
57:36:72:a9:4b:9b:86:fd:81:47:ce:68:f5:3f:69:
72:78:70:01:10:ec:10:f7:2d:fb:fd:be:4f:45:cc:
1d:07:b2:e7:3f:0b:9c:29:85:d6:82:de:85:4d:97:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F4:6D:D1:4F:94:28:08:45:DB:99:1F:6D:FC:F7:B0:1D:9D:36:7A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IPRt0U-UKAhF25kfbfz3sB2dNno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:2d:03:12:be:88:6c:20:fd:b4:4d:71:7d:6f:a8:f6:4a:ac:
ca:84:be:42:4b:8e:5d:13:64:3d:fc:09:34:3b:56:d8:6e:f8:
e5:ff:22:4a:21:2c:29:14:9e:aa:6f:21:56:a6:26:82:75:10:
ea:f6:4d:38:fa:3b:d4:c5:66:38:9e:ed:ca:52:23:80:ae:a6:
64:ff:27:ec:9d:1a:f8:57:93:0f:ed:7f:85:25:0d:71:1b:20:
92:5a:1d:5b:70:a5:d3:b3:90:74:d8:07:bc:08:9e:97:21:36:
2f:34:e4:ad:e9:2c:2e:62:de:19:c1:a8:36:30:06:e5:07:fc:
f4:22:8b:3f:14:49:2f:d8:c0:ef:8e:25:8a:11:b7:8b:90:41:
6f:36:b0:35:68:60:9b:87:cf:9c:9c:3a:9f:00:73:2c:e9:e7:
97:bc:12:a7:e0:93:fb:15:7f:b7:b4:05:66:e6:f7:82:67:07:
4a:84:f4:3e:12:e1:df:35:0a:ea:7f:bd:5d:f7:34:5b:a5:72:
42:6d:19:bb:02:c5:b7:8e:4b:a4:81:26:8d:87:2d:24:d6:d3:
08:10:b8:dd:7b:5a:dd:8b:99:0f:a8:00:95:8f:f0:30:ec:ac:
77:59:ee:7c:d9:44:48:f4:3b:f1:d4:6f:38:21:0e:bc:30:de:
5d:27:b7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:17:11 2025 by rpki-client