Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M5FgIJgcWOM0TfqG0BK-o59lhK8.roa
File: M5FgIJgcWOM0TfqG0BK-o59lhK8.roa (raw, json)
Hash identifier: QkTAIIfRb+SvUbUpI8Qsn5R/So9GLKq4/BkhZFF8UGo=
Subject key identifier: 33:91:60:20:98:1C:58:E3:34:4D:FA:86:D0:12:BE:A3:9F:65:84:AF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5DEA9F88834D54DA3CAF553143A1CA1C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M5FgIJgcWOM0TfqG0BK-o59lhK8.roa
Signing time: Tue 12 Dec 2023 12:05:06 +0000
ROA not before: Tue 12 Dec 2023 12:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:5dea:65ad/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:ea:9f:88:83:4d:54:da:3c:af:55:31:43:a1:ca:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 12:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33916020981c58e3344dfa86d012bea39f6584af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:b9:11:fc:09:89:ad:6e:cc:46:f0:19:0a:
b8:cf:26:2f:0e:e9:e0:8e:24:8c:46:3d:34:68:88:
c9:b9:fa:cf:53:f3:85:d3:c1:a8:ce:97:d8:5e:d2:
c0:6e:3c:29:98:71:84:26:39:a3:84:3d:d9:13:96:
9d:e2:77:ef:f5:8c:f8:a0:44:91:11:38:f0:62:d5:
79:45:1f:1e:c6:e7:f0:a7:f8:f7:0b:eb:85:2d:a7:
e7:5d:60:4c:42:7e:23:c6:47:14:d8:c7:eb:dc:60:
02:c3:ba:23:f9:3f:3c:e5:df:bb:01:f8:d0:41:6e:
c1:57:90:e6:15:79:4c:8b:36:69:0f:9a:17:22:ca:
b0:07:a4:af:c9:d7:54:de:3e:2b:b6:24:7b:61:1f:
38:3d:0e:64:71:76:97:9b:5b:7f:17:04:40:18:40:
d9:0e:ba:35:f8:d0:6c:3d:08:3a:e2:c3:8c:e7:73:
c6:f8:8a:29:f6:c5:1a:ff:23:72:51:da:4a:77:fb:
7b:5a:58:f9:70:39:ab:84:b3:1f:60:1c:f7:ed:d4:
af:35:df:bb:7a:bf:62:c9:da:38:b8:ff:7d:91:93:
eb:fd:e3:e9:03:bc:f1:c2:8f:56:46:b6:86:12:46:
85:71:76:29:f8:9f:10:4d:20:64:02:fd:e8:79:d2:
c7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:91:60:20:98:1C:58:E3:34:4D:FA:86:D0:12:BE:A3:9F:65:84:AF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M5FgIJgcWOM0TfqG0BK-o59lhK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:0d:e0:6e:3d:13:69:73:30:44:d7:6b:fc:52:68:7c:aa:20:
b5:dd:1b:75:71:94:ff:5b:05:e3:51:99:56:5d:16:b1:70:d9:
fb:f2:4d:23:b8:91:ca:8c:b9:f7:46:a3:2f:eb:ea:6e:6f:f0:
d5:c2:b7:79:fe:e2:b4:51:13:74:e5:55:b5:9e:60:10:2e:e9:
2c:ce:87:65:4c:eb:e6:5f:cd:4b:0c:e4:4e:b1:3d:b9:a3:e2:
fd:aa:e3:d0:3a:e6:c7:7d:11:fa:c6:d3:b3:92:ea:06:dc:ec:
d3:31:d4:72:e2:4e:72:0f:87:2a:b2:ea:85:f7:d8:18:67:cc:
71:6e:f4:03:85:3f:a5:04:fa:7c:a7:f0:92:ba:22:37:a8:ac:
1f:a8:97:52:3d:2c:d3:87:5a:c0:22:5a:2e:9d:1b:95:ae:fb:
e4:ea:33:ed:8c:7d:27:22:dd:a6:10:a3:5a:bd:93:f8:b9:6c:
10:8f:f5:e7:9d:cf:49:0d:06:59:34:03:61:dd:2b:f5:0c:ec:
5a:13:52:a7:65:0d:cd:a9:ad:b2:84:63:12:7c:d0:73:0f:d0:
20:18:22:ce:da:f7:19:79:5a:73:40:a1:6e:42:9c:4b:6f:63:
e4:64:29:91:10:46:98:93:42:9c:b2:9f:83:51:4b:fa:af:76:
94:44:50:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 21:28:44 2025 by rpki-client