Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V9yCMHSmz-lwwN97WiS8-NblMHI.roa
File: V9yCMHSmz-lwwN97WiS8-NblMHI.roa (raw, json)
Hash identifier: Q5acl3DjVgQR1gLL3ERmPI1L1lKAfwIARAW3JPG7Bv4=
Subject key identifier: 57:DC:82:30:74:A6:CF:E9:70:C0:DF:7B:5A:24:BC:F8:D6:E5:30:72
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD5A8E458ED11C33200465E8D21002B72
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V9yCMHSmz-lwwN97WiS8-NblMHI.roa
Signing time: Thu 16 Nov 2023 01:04:57 +0000
ROA not before: Thu 16 Nov 2023 01:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18b:d5a8:8908/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d5:a8:e4:58:ed:11:c3:32:00:46:5e:8d:21:00:2b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 01:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57dc823074a6cfe970c0df7b5a24bcf8d6e53072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a3:ac:41:d1:e6:a2:79:ba:75:b4:f8:d7:2f:
f5:4d:cd:11:35:a8:dd:95:70:90:41:ae:ff:50:2a:
2b:8b:02:57:e3:ed:0d:37:0e:23:3d:48:56:31:11:
a4:71:be:f7:cc:04:31:07:66:f1:2a:09:0b:36:b7:
53:5d:91:27:7b:42:36:a9:c1:a3:44:40:1a:97:83:
31:3d:00:3a:e9:d3:32:af:d2:d1:dc:b1:99:86:e4:
46:9d:b2:d5:99:6e:0a:99:ee:06:34:da:07:4f:61:
21:d8:5e:9d:90:15:08:13:6f:5e:a9:3e:12:27:96:
78:cf:b3:f7:7e:b8:fd:de:75:ce:53:f5:52:c9:10:
61:67:04:2c:42:f5:23:67:53:fe:9c:0b:40:61:d3:
2e:3a:a4:ad:e0:59:3d:a2:28:86:97:3f:fa:41:b9:
3f:4b:47:64:28:bd:da:d5:86:c3:ad:8c:cc:a3:d4:
9d:f4:1c:fe:9b:c5:50:7d:d8:13:d3:df:ed:48:c9:
37:8f:51:1d:e2:7e:21:ce:d7:f2:92:aa:28:ed:cd:
7a:3b:32:96:3e:29:70:2c:e2:a4:42:0a:75:43:e9:
e4:12:c7:bb:a0:4a:93:bf:6f:e7:1e:e5:75:e9:b1:
6c:a8:33:e2:13:19:ec:2a:d2:a8:d2:b0:2d:f2:06:
cb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DC:82:30:74:A6:CF:E9:70:C0:DF:7B:5A:24:BC:F8:D6:E5:30:72
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/V9yCMHSmz-lwwN97WiS8-NblMHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:17:8a:eb:9e:85:59:1c:4d:ce:f7:13:46:f2:6f:46:67:ac:
40:85:16:83:5a:77:f2:45:8f:b0:a4:45:65:6f:f5:93:ab:20:
9d:b9:30:28:80:31:e1:5a:7e:d7:05:5a:c3:fc:9a:cc:ac:28:
a1:b5:7a:bd:98:45:37:bb:9a:e0:9c:09:ee:bd:17:1d:c9:6f:
b5:f4:e6:aa:99:59:12:b9:8e:20:8c:d2:18:e2:34:99:95:8b:
31:2d:f3:ae:a8:06:37:15:af:d0:f2:e6:8e:8d:c5:41:3e:96:
31:a7:a8:18:fd:95:87:d6:c8:48:54:e6:71:2d:53:46:23:f5:
a3:be:47:c4:cb:86:b5:f3:31:dc:9c:8b:56:26:90:3f:a1:88:
72:15:b5:22:42:86:d3:17:04:e1:cd:51:80:ef:65:90:51:1e:
eb:30:09:95:43:3a:e9:01:17:88:56:30:c5:45:fe:cb:d7:0d:
7a:39:a7:ac:1e:29:79:b3:d3:4e:63:d3:b7:60:eb:9d:29:00:
4a:40:e1:c9:98:df:e4:54:b3:ac:f7:94:ad:0c:17:18:d6:d8:
71:d7:cd:aa:b2:55:ba:e0:5b:8b:aa:98:2f:a2:aa:8a:2d:c6:
5d:94:0c:68:01:07:21:12:a1:6a:de:e3:70:df:73:ae:40:1a:
3a:8e:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:44:31 2025 by rpki-client