Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KkbqQ3ksGFn_SYRW-e55uEM0Gxs.roa
File: KkbqQ3ksGFn_SYRW-e55uEM0Gxs.roa (raw, json)
Hash identifier: 4aK5h1IdmIKESbLu++XHfOTa0v/Zi93oad+4cu/+I8M=
Subject key identifier: 2A:46:EA:43:79:2C:18:59:FF:49:84:56:F9:EE:79:B8:43:34:1B:1B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BEC32E978A5D40B7FE5D236D28005B7B8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KkbqQ3ksGFn_SYRW-e55uEM0Gxs.roa
Signing time: Mon 20 Nov 2023 10:07:21 +0000
ROA not before: Mon 20 Nov 2023 10:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18b:ec32:1afd/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ec:32:e9:78:a5:d4:0b:7f:e5:d2:36:d2:80:05:b7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 20 10:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a46ea43792c1859ff498456f9ee79b843341b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a5:d0:92:bf:e8:c1:44:be:8f:7f:90:d6:52:
e3:ca:b9:43:b7:83:fd:1a:f5:34:b2:db:4d:86:e9:
29:ee:90:3e:e6:e9:23:61:93:80:c6:02:38:c0:db:
50:48:42:59:f0:8e:e5:20:1f:ee:36:34:cd:7f:e3:
fc:ea:6d:38:89:e9:85:0f:bd:34:c4:ee:90:0d:8b:
91:f0:e0:75:cd:d4:d6:95:50:3b:0a:11:5a:63:46:
32:8e:f5:dd:fd:55:58:ab:5c:91:b1:23:ee:25:eb:
8b:1e:16:62:6c:f0:9d:94:09:66:a3:ce:98:f2:5a:
7d:92:e8:c9:c8:ad:cf:b0:df:fa:de:31:73:a5:85:
0f:13:5f:58:bf:41:61:2f:95:ba:c2:3a:cf:65:6e:
f2:04:74:2f:2d:b6:27:7c:1d:86:fa:5a:f9:0f:5e:
ac:a3:ab:72:96:6d:ca:74:d8:cf:b2:69:86:81:e1:
7e:e1:49:b2:01:de:b0:03:89:d5:90:54:c0:e5:d8:
75:48:e3:27:06:14:76:13:35:a5:10:91:14:c9:4f:
f1:32:9e:96:a7:60:4b:40:24:f5:b9:e0:c5:8c:cd:
36:64:fe:09:28:1c:ad:41:7d:ca:c6:5e:34:0d:ba:
4e:f1:24:34:e1:47:7e:75:7f:df:30:4a:80:38:5c:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:46:EA:43:79:2C:18:59:FF:49:84:56:F9:EE:79:B8:43:34:1B:1B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KkbqQ3ksGFn_SYRW-e55uEM0Gxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:fa:01:4e:b6:18:69:89:dc:92:45:c2:c8:3c:50:eb:16:27:
9d:1c:2e:ee:b2:8c:c7:6a:4c:30:0a:8b:a8:84:a3:dc:ae:db:
17:4f:07:f9:ca:1d:bd:26:30:7e:4d:47:05:c6:0e:a1:6c:b8:
7b:35:0f:62:38:5b:37:b8:7d:ac:5b:7b:2d:7f:20:46:86:ec:
f1:b6:00:35:40:7a:41:ea:3e:55:03:82:c4:76:c8:aa:a7:27:
c1:f8:63:2f:e8:81:ff:ec:47:07:b2:04:29:8a:f6:85:82:69:
bc:95:02:a2:eb:4e:e6:ef:ed:72:d1:15:37:3d:7a:53:06:9e:
ab:1c:72:d4:61:48:4c:55:b4:98:e1:c4:fa:d2:92:c1:c4:64:
75:0e:c9:6d:e4:26:f8:fd:3f:e5:53:36:32:32:83:2c:f1:60:
9f:5d:83:9c:e0:7d:54:4b:e6:a1:ca:6f:e9:f6:6b:2f:11:96:
1a:39:f3:26:93:ba:d1:89:28:47:4c:16:7e:0d:cd:15:80:63:
63:d4:4a:16:71:2c:d0:46:92:e2:cb:e5:42:e6:66:b0:8f:a3:
f0:9d:8d:6a:f9:6f:eb:b1:4d:e9:bf:87:52:0f:f1:85:ef:7d:
24:a0:e7:53:9b:ad:69:c2:e6:76:96:23:49:0f:ed:f8:a6:ba:
2d:a1:c6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 17:11:35 2025 by rpki-client