Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/InupPxZ2Cvkb7zsyoXAcqFTzajY.roa
File: InupPxZ2Cvkb7zsyoXAcqFTzajY.roa (raw, json)
Hash identifier: Ja5JgrAawVCLkFIgwJf9+rVt9AtXjkJZx8FL37JE14Q=
Subject key identifier: 22:7B:A9:3F:16:76:0A:F9:1B:EF:3B:32:A1:70:1C:A8:54:F3:6A:36
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAFADFE8B97C475D68EA5FFC2EC5C8AB1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/InupPxZ2Cvkb7zsyoXAcqFTzajY.roa
Signing time: Wed 08 Nov 2023 16:04:57 +0000
ROA not before: Wed 08 Nov 2023 16:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:afad:b5af/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:af:ad:fe:8b:97:c4:75:d6:8e:a5:ff:c2:ec:5c:8a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 16:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=227ba93f16760af91bef3b32a1701ca854f36a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f7:46:77:51:de:2e:6f:1e:45:ae:1e:fe:5e:
f0:82:06:66:f3:05:bb:e3:47:07:e0:72:ee:7a:bb:
15:e4:12:30:27:a9:8d:bd:64:0f:96:28:fe:14:28:
9b:88:6c:e0:c1:b5:97:e2:10:e1:32:39:01:6e:ea:
5d:47:5e:a2:52:8f:1b:16:4f:16:10:df:95:25:8c:
f3:68:f6:7d:93:dc:ce:1e:87:2c:62:a7:38:a1:61:
cb:ca:fc:d7:26:8b:c6:c5:5b:81:5a:10:1a:be:ff:
12:8a:13:ae:83:0d:00:ff:b5:f6:68:dd:73:46:af:
fa:2e:82:d3:29:ec:28:91:ac:78:d5:ab:bf:65:65:
31:05:b8:a8:47:e6:11:4c:21:4e:d9:f7:9f:b9:7b:
4e:0d:e4:ec:14:d2:42:90:f9:fe:14:5a:41:ca:cc:
1f:a6:b5:d5:2e:70:c3:69:25:9e:a0:4e:2c:27:5f:
e2:45:af:d0:69:db:00:db:a9:e8:2f:28:c7:2a:34:
a4:c2:d4:44:2f:9b:9f:f0:ab:ba:89:76:be:79:aa:
47:09:8b:89:e1:3a:3d:77:e6:53:3a:5c:e6:0a:5d:
23:b2:a7:3a:38:b3:49:87:12:e0:9c:e1:fc:0f:d3:
0c:92:f8:bd:ae:8f:f5:7f:52:07:67:01:45:b2:f5:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7B:A9:3F:16:76:0A:F9:1B:EF:3B:32:A1:70:1C:A8:54:F3:6A:36
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/InupPxZ2Cvkb7zsyoXAcqFTzajY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:38:fb:a3:90:86:0f:b5:35:98:24:a5:43:e5:78:ce:6a:9d:
e5:f7:2b:e2:71:91:79:da:45:dc:77:28:32:0a:1e:85:58:49:
4b:73:4b:7e:b3:2d:73:c4:84:93:af:2c:0e:11:53:a6:10:02:
6e:cb:34:4d:22:03:53:01:81:8a:0e:f0:01:48:49:3b:81:0c:
5d:75:99:cf:04:ea:c2:c6:fb:15:1c:16:34:24:33:c1:41:15:
ba:61:ce:e1:bd:7e:13:fd:ed:71:4d:ee:4e:f3:03:54:d7:71:
e6:c3:08:a6:65:6c:a3:c4:ec:0c:a1:79:0c:a6:ab:c4:6f:95:
8a:5b:9d:fe:f5:f9:fd:ee:6d:8f:a1:3e:75:a3:ab:7e:8b:f8:
40:5c:50:8b:bd:cb:bb:6a:7f:7e:d2:35:7e:42:c9:71:11:2b:
8f:42:d2:15:02:43:73:2c:4d:ff:ec:2f:9f:03:91:7f:a0:18:
f5:25:5f:e8:41:5f:eb:d6:a8:0a:1b:77:ab:66:a7:6e:27:63:
08:20:a6:c6:d5:80:7f:33:12:8c:0e:c4:46:dd:2f:c4:d0:b0:
17:c8:51:d3:16:c5:63:23:42:4b:43:0a:0a:a5:ac:4a:33:22:
b1:a2:ee:ad:39:3e:f2:5e:5d:a5:6f:bc:c9:55:62:19:25:3d:
f2:90:df:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:12:40 2025 by rpki-client