Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RIpftG-XrnQXn1An8LpPqDRbXAM.roa
File: RIpftG-XrnQXn1An8LpPqDRbXAM.roa (raw, json)
Hash identifier: CPBNUa7oAdpzGEy6GQZVKltD4cxzcad17M9ZjKRluIs=
Subject key identifier: 44:8A:5F:B4:6F:97:AE:74:17:9F:50:27:F0:BA:4F:A8:34:5B:5C:03
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC148A1C933FBEAE67AFF72898083FEBC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RIpftG-XrnQXn1An8LpPqDRbXAM.roa
Signing time: Sat 23 Sep 2023 09:04:37 +0000
ROA not before: Sat 23 Sep 2023 09:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:c148:5a7b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c1:48:a1:c9:33:fb:ea:e6:7a:ff:72:89:80:83:fe:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 09:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=448a5fb46f97ae74179f5027f0ba4fa8345b5c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:2d:a4:68:46:68:97:42:b3:56:53:ae:50:
ff:f5:31:29:f3:d9:04:40:64:1f:71:15:f0:c8:75:
80:85:f0:25:3e:c7:ba:aa:f5:92:8b:33:07:5a:f0:
d0:3d:65:72:9b:3d:bc:0e:f2:e9:34:6f:71:fb:0b:
6c:08:99:87:a1:4c:3d:b4:9f:7c:7c:a9:43:9e:7a:
93:b8:1b:3a:0e:d9:b1:6c:57:12:86:61:0a:2e:75:
d7:7f:11:98:8c:6d:a2:7c:5c:71:ce:5d:a3:e8:ab:
ec:32:fa:3e:5a:5c:f2:7f:a9:db:0b:a3:55:de:28:
25:75:df:9b:ab:c0:00:67:d1:11:3b:83:cb:d7:a5:
55:14:e2:dd:f7:7e:03:ff:0f:be:09:4e:7d:84:d2:
a8:33:04:2f:40:c5:09:21:77:93:59:fc:82:27:8b:
ea:07:d0:a4:d8:18:14:e1:21:5c:fc:f5:d6:ed:c9:
d4:12:40:4a:38:68:7d:91:c9:1b:69:7c:a8:4b:90:
23:9a:6c:89:c8:d6:b7:ff:3d:8c:4f:fe:0b:ad:89:
e8:cb:4d:d5:b3:33:c4:d0:67:ce:e3:20:94:fc:cc:
51:58:0b:d0:09:43:11:28:4a:de:74:dc:e9:c9:f2:
92:57:e1:02:13:38:0a:a2:f7:4e:f2:e7:cf:74:94:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8A:5F:B4:6F:97:AE:74:17:9F:50:27:F0:BA:4F:A8:34:5B:5C:03
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RIpftG-XrnQXn1An8LpPqDRbXAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:52:3a:2e:0a:40:6c:39:88:3c:a6:8c:d8:a2:2d:dd:75:1d:
ff:c7:ef:ea:3f:59:97:91:92:00:87:97:59:21:e9:cc:41:6d:
5f:2b:ad:1f:d3:f9:fe:15:0a:18:d5:e3:a5:98:05:90:b6:26:
e4:b3:68:10:1a:b7:a8:b8:df:c0:aa:ef:46:32:5e:f4:eb:63:
8f:5d:35:1e:a6:ce:21:f2:0b:16:68:1d:99:07:d7:80:e5:88:
8e:ea:51:45:f3:8a:a0:f7:18:0f:84:2a:65:71:3c:d1:be:1d:
03:a1:e3:84:f4:10:d0:c7:67:eb:0a:79:65:dc:43:68:9b:00:
6f:d2:17:9f:3d:3f:5b:66:c9:75:0d:88:e2:7b:b5:ba:bc:2e:
92:cc:59:bc:aa:8d:cd:06:4b:23:dd:cc:f1:e9:43:da:c7:82:
48:bc:76:45:ae:9e:80:5c:23:87:49:03:d0:1c:3f:c8:17:c4:
bb:66:f8:67:ab:8e:c3:ad:c7:3b:c6:1a:0d:66:57:5f:88:54:
6b:3d:12:4c:a0:76:37:9b:9c:5f:e7:32:73:8f:7f:4f:b8:56:
82:64:bf:b9:7b:c7:dc:26:bb:30:37:fe:31:b2:da:3c:9c:a0:
b7:80:5e:57:5b:9e:72:60:0e:a3:3c:c4:5d:70:d5:e0:64:50:
af:11:c2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:24:05 2025 by rpki-client