Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SO2o2F58PqUvKLJEvTFYkJ89dpM.roa
File: SO2o2F58PqUvKLJEvTFYkJ89dpM.roa (raw, json)
Hash identifier: 0MJf8nGq4gEYdQAMcpWZx0omtiuszEF6J+vKSRHu+Fs=
Subject key identifier: 48:ED:A8:D8:5E:7C:3E:A5:2F:28:B2:44:BD:31:58:90:9F:3D:76:93
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2F93C7609FDC7806EA50EC988CBC95C1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SO2o2F58PqUvKLJEvTFYkJ89dpM.roa
Signing time: Sat 14 Oct 2023 19:04:55 +0000
ROA not before: Sat 14 Oct 2023 19:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:2f93:462a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2f:93:c7:60:9f:dc:78:06:ea:50:ec:98:8c:bc:95:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 19:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48eda8d85e7c3ea52f28b244bd3158909f3d7693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:f2:ef:34:99:d4:a3:31:bf:b9:a1:00:50:
5b:b7:a3:b2:bf:92:1a:b8:0b:49:bb:85:e4:75:60:
07:5b:c8:4c:6e:32:37:86:fa:cc:cc:91:6f:a7:d1:
32:23:a2:67:98:7b:cd:df:44:c8:72:08:44:0e:f5:
ac:2d:82:75:ca:cf:d1:55:06:70:6f:fe:2e:fa:7d:
9d:0e:bf:69:67:cd:40:c1:76:c7:ac:3f:0d:be:03:
13:93:1a:b8:ac:eb:90:cb:ea:17:cd:43:6b:24:5d:
6b:c2:36:0e:dd:44:18:bb:74:4c:6d:0c:81:ed:5b:
ea:7b:40:18:0e:5d:e1:64:61:b4:69:35:02:1e:1a:
9f:bd:42:6e:31:21:3c:3a:fa:b0:78:6a:fc:ab:de:
73:33:47:78:02:67:50:2c:ed:66:c3:2e:74:be:2a:
4f:9f:19:c9:68:31:47:d0:df:3a:29:c6:25:0c:6f:
61:f1:64:12:a8:e8:2b:fb:22:4f:4b:ba:d1:e2:36:
2b:c1:28:48:8d:5a:8f:38:8f:b9:e5:2e:83:a0:95:
aa:9b:36:70:f9:c7:e4:90:c7:4e:66:ce:ea:a6:3d:
2c:3f:a6:2c:c4:0b:71:f4:27:9f:e4:64:f4:4a:eb:
70:eb:6a:f2:e9:03:23:c9:00:7b:a7:e1:c6:2a:70:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:ED:A8:D8:5E:7C:3E:A5:2F:28:B2:44:BD:31:58:90:9F:3D:76:93
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SO2o2F58PqUvKLJEvTFYkJ89dpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:80:15:45:77:55:b1:dd:7c:03:d9:0e:4e:8d:52:65:97:33:
32:11:39:56:06:96:9f:9a:49:0e:69:31:cb:89:28:90:ec:c6:
7c:47:56:85:9f:2d:ae:3e:db:d2:38:e2:a1:64:81:9e:39:0b:
52:2d:13:08:7a:9e:6e:73:b2:75:39:92:6d:8d:40:1e:0c:80:
22:13:19:04:ee:2b:f6:a2:17:7a:dd:21:c8:e8:0e:82:1b:4c:
47:50:8f:82:2b:f2:93:da:df:88:00:6c:8d:a7:b9:d1:c9:ea:
40:f3:1b:db:59:de:46:1a:16:30:f5:0f:c3:64:a8:10:d7:39:
5a:48:d0:8a:29:df:f3:25:b8:f5:67:01:df:cb:5d:ec:76:72:
81:2e:32:71:b7:03:aa:c8:cc:d6:55:53:fe:5d:64:f4:11:93:
5d:bb:19:41:f9:c4:7c:d4:ce:5f:33:89:04:b9:55:63:28:33:
bc:1c:d7:62:f9:aa:10:92:5d:4f:49:a2:ae:52:26:60:e5:96:
23:8a:a9:56:d7:db:e8:5d:16:93:2f:9e:88:7f:ef:d5:db:08:
fd:e3:14:34:32:e8:21:18:0b:30:ef:ff:b6:40:8a:38:d4:0a:
fb:f9:d2:10:90:1a:cc:44:d6:33:23:f4:6c:06:90:fc:e4:75:
c3:7a:64:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:25:15 2025 by rpki-client