Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RTgzfe3_9yTis6Kbquda7s8mbaw.roa
File: RTgzfe3_9yTis6Kbquda7s8mbaw.roa (raw, json)
Hash identifier: QCZvZjmJu34SDTWmflg698KGOESdVKZGoue6ujK701c=
Subject key identifier: 45:38:33:7D:ED:FF:F7:24:E2:B3:A2:9B:AA:E7:5A:EE:CF:26:6D:AC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C522054C8E9AE43344CA54A2883C14D60
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RTgzfe3_9yTis6Kbquda7s8mbaw.roa
Signing time: Sun 10 Dec 2023 05:08:19 +0000
ROA not before: Sun 10 Dec 2023 05:08:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:521c:f3b8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:52:20:54:c8:e9:ae:43:34:4c:a5:4a:28:83:c1:4d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 05:08:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4538337dedfff724e2b3a29baae75aeecf266dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:fd:fd:5a:c0:2e:5d:46:f3:e9:04:23:ea:
35:67:f0:1b:43:14:24:d4:7e:56:6f:51:2c:ba:94:
ef:15:df:61:1b:ad:a1:f9:13:50:22:d0:26:d9:5e:
0b:b7:51:8a:c6:a8:ab:80:72:46:fb:5e:76:7f:8e:
fb:72:38:e4:b4:ad:85:61:f2:65:96:26:27:76:72:
99:da:5c:6f:d5:82:55:1e:4e:d5:45:f0:8a:3b:e4:
00:7d:94:0d:71:1e:e0:1a:4b:b4:89:0e:b6:ea:85:
7b:60:a0:cf:04:8c:08:d3:27:6f:32:90:5e:7f:1e:
33:fe:09:52:bf:86:20:31:2a:ab:8c:3c:28:0f:9b:
f3:f5:17:27:8a:fc:f1:b6:2e:be:d3:1b:ce:d8:f2:
f3:e7:d9:db:13:07:4e:2a:b3:33:92:7d:7d:6c:44:
41:41:6a:2a:6f:13:91:de:31:6c:26:53:c3:83:f3:
2a:16:31:95:c3:9b:44:47:e6:80:02:c9:f5:76:55:
19:6b:4c:55:e7:1f:63:af:56:9a:58:73:73:e8:2b:
9d:24:6f:57:2f:8d:eb:ea:e2:c7:13:62:17:62:73:
2e:3d:8c:f8:13:d2:35:12:d3:6c:44:91:08:d3:59:
42:a4:09:fe:5a:e2:2f:b2:47:81:54:c5:d4:7a:58:
8b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:38:33:7D:ED:FF:F7:24:E2:B3:A2:9B:AA:E7:5A:EE:CF:26:6D:AC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RTgzfe3_9yTis6Kbquda7s8mbaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:7f:95:dd:67:71:84:d6:9e:c8:10:bf:29:1d:48:f7:98:a9:
f9:40:b6:a9:76:b7:37:37:49:7e:af:c9:ae:09:45:15:a4:af:
eb:f7:86:cb:67:b7:53:2b:e7:10:26:96:74:b9:15:5a:81:04:
46:13:51:b0:a4:75:83:3d:13:91:62:fb:c6:40:e1:31:54:b5:
59:04:33:1f:fe:1f:64:f9:e5:53:28:30:61:c6:37:4c:cf:5a:
c0:29:93:d5:9a:70:2c:05:dc:dd:9e:38:b8:30:ed:34:06:12:
65:79:58:b7:35:de:6a:68:05:85:39:51:ea:5e:00:4d:2c:ea:
20:fc:59:67:8e:80:ad:51:fa:03:b7:cd:22:42:b3:19:d3:65:
c3:0d:26:d4:bb:51:19:34:9d:8d:4e:01:33:d9:bf:1f:a3:29:
4a:35:a4:ab:25:3f:ff:69:31:05:c8:29:0e:1b:16:57:d9:08:
db:d0:dc:62:b2:4a:f4:36:68:79:f6:52:0d:90:39:6c:f6:c3:
8d:7e:e8:ad:dd:c4:1f:06:a7:22:ac:d2:c9:77:3a:e2:c0:2c:
7a:c3:de:a7:98:fa:17:a2:4b:3c:9d:7a:63:96:0d:ca:7e:de:
26:50:74:8a:c1:ce:c2:b9:2d:e4:01:06:ae:b3:ef:37:88:94:
56:0e:a2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:03:44 2025 by rpki-client