Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RGfqPD5xiTgvRZbP--H-zzytFak.roa
File: RGfqPD5xiTgvRZbP--H-zzytFak.roa (raw, json)
Hash identifier: vQHMMFmIW74gM9hm8m/PBL2O1w1UItJdG7yVreasWdU=
Subject key identifier: 44:67:EA:3C:3E:71:89:38:2F:45:96:CF:FB:E1:FE:CF:3C:AD:15:A9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF86EC60294CCA9F389E9E152FD86FC6F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RGfqPD5xiTgvRZbP--H-zzytFak.roa
Signing time: Wed 04 Oct 2023 02:05:23 +0000
ROA not before: Wed 04 Oct 2023 02:05:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:f86d:e09f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f8:6e:c6:02:94:cc:a9:f3:89:e9:e1:52:fd:86:fc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 02:05:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4467ea3c3e7189382f4596cffbe1fecf3cad15a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:bb:3f:99:17:f7:0d:99:b0:3c:cb:a7:e0:
a6:79:a5:4d:92:26:1d:8d:69:9e:7c:cc:c6:8b:d1:
17:3e:71:fa:55:c0:9f:e9:bc:c6:9d:95:67:25:ef:
25:b1:91:39:57:b5:c1:76:db:b5:6f:f7:4b:71:d3:
86:28:e3:59:e2:81:30:7a:91:7d:f9:aa:d4:b4:9b:
0e:af:df:a3:78:b6:df:46:97:aa:5c:ea:82:de:53:
66:8c:28:44:cc:3b:99:31:24:9e:73:a4:bf:96:4f:
48:6c:3d:64:b2:cc:9a:6b:6d:9e:7c:74:be:c2:2b:
ea:ba:0a:89:04:9b:0a:66:73:ac:b4:3d:cb:e2:93:
9f:15:e1:7e:6f:c6:5f:f2:8f:09:01:2a:1a:e2:5f:
81:81:1a:44:29:f3:75:2c:40:39:ec:fb:d3:8f:d5:
7c:32:4e:f4:0a:be:65:10:bd:44:3c:5d:44:56:3d:
5d:38:b4:e0:80:93:2b:77:6f:29:04:a4:d2:48:2f:
37:a4:4e:82:45:fe:4c:cb:92:10:57:99:0c:b2:87:
13:64:99:b1:0d:f1:b1:5c:48:93:11:d9:56:94:e2:
c8:61:89:4e:b0:78:79:e3:b2:e0:f5:db:b3:fb:c7:
e2:5f:47:55:64:d9:20:12:2c:7d:56:66:ca:fb:a2:
7e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:67:EA:3C:3E:71:89:38:2F:45:96:CF:FB:E1:FE:CF:3C:AD:15:A9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RGfqPD5xiTgvRZbP--H-zzytFak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:2a:e3:92:d5:52:89:f1:c4:5f:c3:cd:49:76:58:31:e1:e7:
47:2f:20:4a:d6:14:d1:4a:5d:7f:da:46:fc:52:bb:ae:4b:7c:
e6:58:29:60:99:69:07:09:fe:3b:95:ef:6a:9b:e8:9f:d7:50:
34:f0:ab:dd:5d:1f:29:e7:3d:af:09:4c:12:f5:34:81:70:6b:
93:b9:6c:bb:0a:f2:1c:93:5e:1d:b4:4c:94:dc:74:5b:27:18:
48:db:79:22:22:4e:5a:9d:32:48:45:c7:22:03:06:3e:b7:e9:
de:98:90:cb:48:f9:19:2a:54:64:ba:59:a3:25:fd:1f:e7:21:
76:f8:3d:cc:9e:76:c7:94:85:70:34:1f:b2:da:57:ae:e8:70:
58:4f:21:df:fd:96:d3:0e:d7:ea:a5:66:4d:52:2a:97:d9:63:
d2:8f:3f:59:83:cc:dd:fb:63:6f:52:c2:c5:27:df:57:3e:43:
dd:47:4f:83:2e:05:98:4f:a0:45:12:2c:56:33:f5:7b:22:84:
56:60:7f:72:ed:6f:75:d5:83:b0:fb:9f:67:67:65:fa:e5:4e:
19:3e:20:36:25:0f:97:aa:3f:3c:dc:11:b1:75:ad:bc:e0:e6:
23:08:dd:57:c8:31:9f:6e:63:4e:96:4e:0d:d4:cb:f9:6e:cb:
e0:fd:9d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:43:07 2025 by rpki-client