Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XI3NPABfKaDqRxk3v513yxomXz8.roa
File: XI3NPABfKaDqRxk3v513yxomXz8.roa (raw, json)
Hash identifier: ZNaEZSppdbhCWXVVXgNJj/TWFm3UWeqr3Dv2Vrymarc=
Subject key identifier: 5C:8D:CD:3C:00:5F:29:A0:EA:47:19:37:BF:9D:77:CB:1A:26:5F:3F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B95809D9D4E739F9CBFC4787329714C4B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XI3NPABfKaDqRxk3v513yxomXz8.roa
Signing time: Fri 03 Nov 2023 14:05:16 +0000
ROA not before: Fri 03 Nov 2023 14:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:957f:ddbc/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:80:9d:9d:4e:73:9f:9c:bf:c4:78:73:29:71:4c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 14:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c8dcd3c005f29a0ea471937bf9d77cb1a265f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:46:35:92:59:06:65:b9:b4:78:2d:16:6b:
34:2f:6b:a1:6e:71:25:6a:84:96:9e:0b:5a:e5:29:
c5:63:61:07:c7:dd:14:7d:33:31:95:cb:1e:3b:4f:
fa:84:51:25:88:4e:ae:56:7d:fa:4a:0b:d5:49:65:
3e:59:8d:73:80:89:64:d2:81:3e:e6:1b:9f:40:6c:
d4:8f:2b:3c:60:ac:83:2d:c6:f0:b0:97:78:b7:73:
13:fa:99:92:e1:a3:11:5e:22:a9:ba:c1:2e:e6:07:
b0:82:24:d7:39:33:d6:b8:04:ce:93:5e:f2:9c:32:
cf:45:52:57:53:33:1d:e9:16:45:f8:a6:50:ab:30:
db:d8:cb:8c:9f:48:19:e4:bb:30:03:7e:97:56:98:
7a:ee:7f:36:d9:94:1b:07:a8:4c:a7:8d:e3:9b:b3:
f6:5c:e8:d6:2d:33:0a:41:c0:2c:50:5e:d1:93:9d:
8f:c2:b6:42:7e:cf:ac:ea:be:af:21:bb:dc:49:4f:
e5:f7:af:4e:b1:6f:a5:84:92:c0:06:ca:35:a6:53:
d2:b5:82:3f:0b:d8:4e:28:0b:31:08:a1:ae:84:c0:
2a:82:e5:ea:39:51:57:ed:a6:23:cf:76:27:e5:d7:
cb:ed:01:63:46:a5:8c:45:16:3c:75:b2:4c:3c:0e:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8D:CD:3C:00:5F:29:A0:EA:47:19:37:BF:9D:77:CB:1A:26:5F:3F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/XI3NPABfKaDqRxk3v513yxomXz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b9:04:27:72:13:d4:1e:03:ef:db:99:ca:4a:b2:e3:3a:f1:2b:
e0:8a:6f:d7:5d:4e:73:41:f0:91:40:b5:0c:8b:33:fa:8d:6a:
94:02:bd:b2:98:22:c0:23:4b:5d:c6:8f:a6:a1:8e:4a:1d:e7:
38:de:6d:6c:c5:b5:62:49:07:f7:ff:58:c8:22:05:34:8c:ce:
99:c3:9c:4b:1a:fc:90:03:49:65:59:a8:8b:dd:fc:5a:fa:6b:
c5:58:3a:f8:3f:7b:52:62:a1:04:96:dc:dc:1e:59:3c:5c:6c:
c3:53:55:bd:63:7d:ba:36:43:5b:49:e4:d9:cb:74:bc:c4:90:
51:db:e9:ea:e7:68:dc:26:45:ef:cc:95:0b:7d:bf:fc:3f:60:
0c:97:f5:cc:6b:d8:1e:a1:cd:79:08:2a:45:45:42:16:12:ce:
7e:83:5f:89:87:7c:15:76:2c:69:cf:97:89:48:f7:3a:35:59:
6b:37:b9:47:71:fe:7c:79:d5:b8:ef:9f:79:16:cf:4e:e6:83:
48:a9:1c:e5:c6:1c:90:6b:cd:5d:10:39:e0:a5:19:69:87:d9:
f4:bc:46:fd:81:58:e5:0b:a3:d5:6f:ae:0c:3b:43:8c:f2:10:
47:33:f5:a3:6a:03:fc:97:d7:20:ae:39:d3:15:82:ce:1c:63:
a6:ec:45:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:43:35 2025 by rpki-client