Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P1v80eLYGPauQnc9lxUYeh-SPCo.roa
File: P1v80eLYGPauQnc9lxUYeh-SPCo.roa (raw, json)
Hash identifier: TA5u6LW8QK+oowgWtWxFWXmx8TlD00IDRKPnPqfHrJo=
Subject key identifier: 3F:5B:FC:D1:E2:D8:18:F6:AE:42:77:3D:97:15:18:7A:1F:92:3C:2A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD0BC786C73B8B75CF771F16E93D0059E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P1v80eLYGPauQnc9lxUYeh-SPCo.roa
Signing time: Tue 26 Sep 2023 09:05:27 +0000
ROA not before: Tue 26 Sep 2023 09:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:d0bb:f057/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:bc:78:6c:73:b8:b7:5c:f7:71:f1:6e:93:d0:05:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 09:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f5bfcd1e2d818f6ae42773d9715187a1f923c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:b0:0c:6d:55:8c:da:f1:4d:75:7a:89:54:
2a:69:e5:9e:f2:bf:4b:d4:1d:7f:f5:2b:73:e3:d7:
25:fc:8c:55:e5:84:35:17:75:07:96:2d:58:4a:03:
34:3c:91:e2:04:c5:49:ba:90:5e:ef:18:fe:0f:52:
80:cd:03:95:7d:21:2b:37:e3:55:39:b0:cc:26:69:
fb:b9:fc:e4:f1:47:b3:11:f1:2b:55:76:0f:f8:45:
23:90:c5:99:7b:0c:e9:40:10:42:43:24:45:0e:74:
9a:a4:70:ff:bc:b4:ac:bd:95:a2:5c:0e:49:68:e6:
18:66:0f:29:cc:31:a6:98:9c:e0:f4:6f:f2:85:23:
3c:0f:ff:0d:db:5b:7e:a2:9c:d7:e3:33:5e:91:1e:
26:b5:57:51:13:bb:83:a8:3b:5d:83:a4:eb:94:09:
83:a9:27:07:7f:2d:5b:43:b4:21:1c:78:48:bf:f9:
7c:4f:43:b4:58:4e:ed:00:6a:cf:3f:bc:6d:8b:54:
b5:26:3c:3e:91:e8:60:5f:0d:8b:3f:ca:ec:b1:0e:
c5:40:9a:a1:0d:bf:bb:37:57:81:0b:4b:4e:51:15:
e5:63:70:71:6e:3b:f0:a8:21:b2:f0:97:1a:aa:43:
91:94:b0:59:67:75:7c:34:74:5b:55:fd:69:6c:51:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5B:FC:D1:E2:D8:18:F6:AE:42:77:3D:97:15:18:7A:1F:92:3C:2A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P1v80eLYGPauQnc9lxUYeh-SPCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:c1:32:a9:a7:2f:91:d0:a8:e4:07:d1:f2:a1:ef:d1:a5:a8:
e6:0e:f9:7f:c8:95:ae:84:5b:4a:78:a0:e8:ad:a8:b3:63:42:
91:6f:ee:2a:51:d5:58:15:59:49:23:9b:a9:0d:bd:c4:e1:01:
bb:4b:80:83:17:5b:68:76:27:00:50:e7:47:66:83:b7:69:55:
41:57:85:b3:9a:7e:41:34:f9:6c:07:2d:97:c5:1c:47:76:e5:
be:0d:e3:e8:8b:73:83:5e:37:ae:fb:74:78:a8:19:60:71:66:
16:cf:4c:4f:f7:b9:07:77:8d:f1:22:ce:b1:1f:6e:b3:45:8b:
53:1e:5d:18:93:d4:49:fe:41:6f:d6:c1:ed:2d:db:ed:99:2c:
ab:4b:2e:8e:84:e9:c5:ad:8b:92:f2:31:0b:6c:a3:40:53:25:
e9:bf:ee:ec:df:83:88:90:c7:79:d9:47:b3:dc:4e:a8:34:4d:
6b:a2:19:37:fd:0c:bb:0a:8a:44:ac:01:cb:89:17:ab:65:3b:
86:f5:86:30:2e:52:63:a6:1f:a7:cf:95:bc:da:d0:7a:95:db:
6f:5d:62:24:56:af:4e:4e:2e:ef:5d:09:03:32:56:df:9f:1a:
55:f9:b3:ce:23:d5:cc:ae:2d:df:08:f9:ef:cd:9b:dd:ac:bc:
cf:23:3f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:41:04 2025 by rpki-client