Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K9sFXJ3F7tz5ruFZdeJrQG8TsRs.roa
File: K9sFXJ3F7tz5ruFZdeJrQG8TsRs.roa (raw, json)
Hash identifier: 4OwCtdPjLSnf6d6uhYC6fqeP2EdRL36qSyFtPSmNdZs=
Subject key identifier: 2B:DB:05:5C:9D:C5:EE:DC:F9:AE:E1:59:75:E2:6B:40:6F:13:B1:1B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C01008968072558E5E6DEA634A93057FE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K9sFXJ3F7tz5ruFZdeJrQG8TsRs.roa
Signing time: Fri 24 Nov 2023 11:04:21 +0000
ROA not before: Fri 24 Nov 2023 11:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:100:4a75/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:00:89:68:07:25:58:e5:e6:de:a6:34:a9:30:57:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 11:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bdb055c9dc5eedcf9aee15975e26b406f13b11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:31:ec:03:9a:5b:fd:4b:62:a3:88:92:a2:
78:27:57:40:25:18:84:5f:02:c5:55:68:ba:b9:f2:
b4:60:f9:94:23:fe:d4:54:9e:d1:0a:9c:1a:45:b3:
42:80:2d:22:86:5c:b2:cf:77:86:6e:f8:ef:41:a6:
66:f5:58:74:ac:79:fb:ed:0a:d8:f9:8e:79:15:1e:
7a:cd:bb:04:d5:c2:05:43:d0:ba:d6:fc:87:1e:9a:
31:39:fc:3f:83:86:6e:ce:30:47:32:64:b5:a0:27:
ce:7a:34:77:b6:5f:0b:1e:2e:32:51:fa:a1:36:97:
66:25:32:bd:92:9a:d2:6d:d9:3b:f5:a4:7b:4f:0c:
8d:b8:fd:5d:d8:06:00:d5:9c:5f:2c:7b:0c:8f:13:
a2:a4:bd:86:bf:58:4f:cb:32:e3:77:fd:4a:c5:5c:
91:41:3c:40:08:a2:45:83:41:b4:5f:20:55:21:53:
6c:1a:60:d9:04:51:27:74:01:cd:8b:2f:2b:64:ee:
f2:5f:e9:48:96:8f:25:a1:7f:3a:c7:e0:e7:53:c7:
77:4c:7a:f4:cd:78:b5:c5:b2:ae:6d:65:02:3a:88:
5a:d5:a2:ca:43:71:58:ff:0a:20:88:c1:b4:71:92:
e0:e8:25:a3:f5:62:1b:61:47:44:a6:13:14:56:10:
eb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DB:05:5C:9D:C5:EE:DC:F9:AE:E1:59:75:E2:6B:40:6F:13:B1:1B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K9sFXJ3F7tz5ruFZdeJrQG8TsRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:34:45:83:e2:17:fc:68:2f:28:85:a8:26:df:34:87:d2:45:
b3:33:14:ef:49:7d:e4:25:9d:f3:f6:ff:9d:c2:00:da:67:3a:
40:14:8b:df:b6:17:15:d7:ec:45:3b:fe:68:55:1a:89:b0:9d:
93:2d:f3:16:f9:f7:1d:6e:f2:7e:73:59:de:cb:37:3b:ed:9c:
4e:83:30:20:a0:7a:4f:63:ce:c5:92:75:e3:97:5f:5a:b9:d3:
e8:19:f8:93:12:52:24:b4:11:8a:6d:a5:01:45:47:4d:03:85:
82:4d:02:96:d7:85:12:c4:92:4f:eb:27:49:29:14:52:df:68:
40:5d:c4:50:80:02:74:ef:e4:3f:6e:6f:70:9f:8d:43:85:75:
dd:f2:46:d3:df:74:f9:2e:7b:49:9a:1d:82:40:d7:ed:2c:37:
57:84:93:9b:76:2e:55:d1:8c:cf:eb:f4:cd:22:a3:d6:a4:81:
94:17:4e:08:0a:62:89:ed:27:37:f1:b9:b0:b6:4b:6f:1d:3c:
ea:4b:97:da:30:55:0b:a8:f4:59:81:f8:78:f5:ac:3f:73:af:
92:8a:80:f8:fa:6e:01:82:cb:a7:ab:97:b9:ad:5c:b0:7f:dc:
5f:ca:3f:20:fe:cd:9c:1b:96:b1:02:cc:23:4e:2e:42:f2:75:
1f:94:99:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:50:09 2025 by rpki-client