Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IPwn1Uboy671SdkjaykS1o72bhw.roa
File: IPwn1Uboy671SdkjaykS1o72bhw.roa (raw, json)
Hash identifier: SPmtSj0jzJx8y+Cyyc9mYRqabHk8kS11U8BQivSk/Dw=
Subject key identifier: 20:FC:27:D5:46:E8:CB:AE:F5:49:D9:23:6B:29:12:D6:8E:F6:6E:1C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0027B4A2CFD55AA75FEDC661B5244A73
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IPwn1Uboy671SdkjaykS1o72bhw.roa
Signing time: Thu 05 Oct 2023 14:04:43 +0000
ROA not before: Thu 05 Oct 2023 14:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:27:208f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:27:b4:a2:cf:d5:5a:a7:5f:ed:c6:61:b5:24:4a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 5 14:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20fc27d546e8cbaef549d9236b2912d68ef66e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:58:13:65:d3:af:39:79:ed:0c:b3:66:77:
c3:82:2d:03:ae:5e:91:7a:58:a9:56:a2:40:29:0c:
61:3f:0a:b4:82:9b:29:d8:ee:45:4f:bb:df:16:51:
a1:c6:3c:56:48:e6:d1:ad:67:60:2a:c2:10:1a:58:
80:d1:1c:6e:20:c1:cd:98:14:78:9f:02:00:02:cb:
af:89:3d:e8:b1:46:75:c6:5f:31:93:62:f5:b0:4a:
18:50:56:83:ef:a1:ff:be:e0:9d:ea:6f:4c:82:7a:
d2:bb:c3:5e:39:73:d7:8b:b4:4a:81:64:b8:b9:56:
41:8b:ba:8f:34:f1:d4:6d:b1:df:8a:78:c2:ae:6e:
84:22:f0:b0:2a:35:f0:d7:fa:71:7b:7b:e4:8a:8d:
8f:18:de:3f:c7:c5:4e:37:bd:a0:2c:96:b1:9d:df:
31:4a:68:d8:c1:de:41:c3:6c:6f:85:f1:51:ef:8e:
90:c9:5e:ea:bd:c4:41:30:28:36:39:14:ab:72:ba:
cf:57:c5:02:7c:6f:bf:f6:72:7f:d8:2d:83:7b:29:
54:22:74:1b:59:71:18:00:57:8a:29:dc:d1:f8:84:
59:f1:4e:63:10:39:d1:50:0f:d3:78:82:be:bd:f0:
25:ec:2c:4d:57:2c:bc:cd:1d:c9:bb:55:07:12:8a:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FC:27:D5:46:E8:CB:AE:F5:49:D9:23:6B:29:12:D6:8E:F6:6E:1C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IPwn1Uboy671SdkjaykS1o72bhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:7d:41:fe:c3:d6:e8:4a:b2:cd:c5:55:bc:7f:4a:07:a0:4d:
02:1f:67:46:45:fb:d4:29:3c:09:5d:7c:a2:50:fd:28:c6:a4:
a1:45:a3:94:71:2a:62:4c:9b:2e:78:ad:7e:99:64:c4:05:5f:
f2:a1:d5:51:98:c9:6a:83:cb:1a:6f:8b:bd:de:0b:97:9f:d4:
d7:5c:2a:f4:db:82:d5:f7:18:8c:b2:9c:76:84:bc:1e:5f:c0:
3b:15:50:1f:50:63:e1:92:3d:fa:9d:b4:b4:b6:1b:62:ac:59:
b5:27:cf:3c:15:0e:36:44:6e:43:94:45:ef:24:30:15:e4:38:
e2:e3:ac:83:02:99:84:e2:1a:94:a1:69:08:01:53:01:43:29:
37:30:de:69:60:36:55:e7:27:0a:65:0e:36:f9:f6:2f:f2:9e:
79:59:c3:72:b3:94:39:c7:c6:7c:6e:20:46:1f:28:73:7a:1a:
67:be:06:4f:26:4b:b7:91:61:f5:eb:0c:aa:93:df:f6:f7:af:
ff:92:bb:cd:31:38:eb:53:4a:85:90:70:bd:b5:8d:94:52:bf:
31:52:c7:ba:32:7d:91:33:e8:3e:04:ff:e9:55:79:9c:75:48:
c8:8c:a6:a3:95:6b:32:01:21:2a:cd:d7:49:dd:f4:df:f1:08:
43:81:cd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:17:35 2025 by rpki-client