Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R8vi1xlLW9ltAczgKNr-Eym2dTs.roa
File: R8vi1xlLW9ltAczgKNr-Eym2dTs.roa (raw, json)
Hash identifier: qtg2TgpwhT/ihTFcuT3R0nGGUJqz41tZUuu9xeQjLc0=
Subject key identifier: 47:CB:E2:D7:19:4B:5B:D9:6D:01:CC:E0:28:DA:FE:13:29:B6:75:3B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C073A79541CF22D4D0229AA08C8A7FA20
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R8vi1xlLW9ltAczgKNr-Eym2dTs.roa
Signing time: Sat 25 Nov 2023 16:05:21 +0000
ROA not before: Sat 25 Nov 2023 16:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:739:8c41/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:07:3a:79:54:1c:f2:2d:4d:02:29:aa:08:c8:a7:fa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 16:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47cbe2d7194b5bd96d01cce028dafe1329b6753b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:ca:64:a5:75:cd:af:4d:7a:2b:9d:95:f6:
59:00:e4:23:1f:db:c7:1c:61:31:a0:cb:5f:12:27:
22:ee:b5:d7:83:e6:bf:c7:34:ec:03:da:72:65:f1:
05:ac:02:38:c2:23:24:6d:02:01:41:c0:09:61:7f:
1e:91:e8:4e:61:71:8b:a5:93:ae:d3:3f:e7:1f:a9:
de:3d:08:8f:35:66:ff:b8:1f:4c:c1:35:57:55:c8:
b9:02:6d:27:2f:10:5b:4b:6d:31:64:36:c1:f3:11:
a0:02:4b:e6:e7:b0:63:52:23:88:4e:f5:36:82:54:
48:c4:c0:c9:f0:03:54:bc:75:d6:8d:25:05:b7:ba:
53:b8:29:d5:0d:23:03:09:d1:67:9a:d5:04:ab:98:
1b:08:22:c3:0b:0a:40:8a:cc:46:39:3a:73:c6:55:
61:ec:9a:d3:92:37:f2:96:29:e7:9f:2c:39:ae:b8:
ec:f9:bd:22:68:bd:98:06:da:1a:5a:47:d9:54:50:
fc:31:e9:1a:08:45:09:f0:85:8b:01:39:29:4e:c0:
84:cf:55:d6:2f:b1:3a:f1:99:f6:fb:0d:e2:25:4b:
fe:04:63:f6:92:72:e0:a9:76:30:2a:5d:01:e0:5a:
57:84:e6:6c:95:33:e1:cb:06:d4:36:8b:27:97:f3:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CB:E2:D7:19:4B:5B:D9:6D:01:CC:E0:28:DA:FE:13:29:B6:75:3B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R8vi1xlLW9ltAczgKNr-Eym2dTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:f0:49:7d:de:43:34:1c:5d:85:80:e4:60:9b:8f:a6:d2:8f:
f9:d5:38:f7:f4:f0:44:fb:a8:70:ab:c6:d9:14:39:a1:d4:82:
18:8c:41:67:5e:2b:91:f6:48:f2:8c:8a:8f:65:df:48:0d:e8:
ea:d2:56:72:c3:56:f4:3b:36:31:a5:4f:0f:a5:10:ea:3a:d5:
17:9f:4d:ea:e0:26:75:d3:18:a3:55:cf:68:85:dd:3f:8d:c2:
13:5f:f2:6e:60:96:28:c0:2c:e8:74:31:ec:82:38:9f:9d:96:
33:f3:76:8e:be:d9:1b:2a:c6:33:ee:f8:dd:7f:d7:0d:c2:d5:
28:7d:60:9b:44:d6:45:c7:1f:c5:84:98:7b:1f:5d:2c:1d:89:
da:9f:5d:67:35:21:a5:54:15:e5:4c:fc:40:05:3e:38:ec:81:
a6:ac:54:5f:f2:ce:7d:71:c1:1d:b6:e8:10:d3:b6:b5:6c:8b:
4d:7b:e2:e3:16:34:37:c9:72:2f:5f:ce:e4:50:9b:30:52:c0:
ba:48:d9:f2:2b:fa:2b:63:1c:4e:c8:dd:8b:c2:71:b7:4d:49:
50:a3:f9:41:a1:20:d3:29:32:97:ea:cf:34:a0:80:af:8d:a6:
42:d2:96:f6:2e:35:f5:6c:97:6f:30:a6:02:dd:ad:06:e3:31:
a8:1c:c2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:29:20 2025 by rpki-client