Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_7QuSfd7S9xVH49_QuOV0p3nI1M.roa
File: _7QuSfd7S9xVH49_QuOV0p3nI1M.roa (raw, json)
Hash identifier: S4elGH715dwdzoeYLEfv0kyfc2WGohN4R2xrmT0FsWM=
Subject key identifier: FF:B4:2E:49:F7:7B:4B:DC:55:1F:8F:7F:42:E3:95:D2:9D:E7:23:53
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AAF0BA359E07FD09F2F623F610B6BC092
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_7QuSfd7S9xVH49_QuOV0p3nI1M.roa
Signing time: Tue 19 Sep 2023 20:04:50 +0000
ROA not before: Tue 19 Sep 2023 20:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:af0b:6980/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:af:0b:a3:59:e0:7f:d0:9f:2f:62:3f:61:0b:6b:c0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 19 20:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffb42e49f77b4bdc551f8f7f42e395d29de72353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:9d:9d:0a:43:45:93:1d:0c:e1:a1:85:b5:
1e:d4:4c:73:f0:70:9a:64:fa:67:38:9f:d5:65:b9:
c0:aa:12:f1:3d:48:1b:74:3e:a9:bd:86:bf:c0:f9:
2d:d2:96:10:c8:c1:92:d6:03:1b:89:33:8e:f0:f1:
3a:68:2a:88:5b:20:52:b4:2a:f0:bb:96:4b:6b:3d:
53:fe:52:87:29:01:b7:0c:3d:bc:5b:e0:57:20:a2:
b4:a6:5d:20:57:19:06:c1:4c:3d:9a:d0:cd:ab:66:
3e:73:69:03:ef:9d:75:aa:7c:9e:98:78:14:8e:4a:
50:be:a2:3f:0e:80:d1:03:b2:8a:2a:5e:c9:11:02:
86:22:35:74:06:b1:fb:cf:59:a7:f1:3f:8f:e4:93:
b4:40:98:36:3d:ca:9c:49:b0:44:67:bc:70:e1:4b:
4e:2f:6b:62:63:89:08:c6:bb:00:96:76:60:c5:f2:
f6:fc:06:64:f6:bd:22:06:5e:13:f7:bf:29:97:22:
bf:0e:86:8a:99:e4:74:95:c5:50:05:2b:f1:83:24:
0d:a4:d7:0f:10:c2:9b:a4:f2:86:1c:0a:08:f1:3e:
6b:13:c6:ee:3b:d9:dc:c1:f6:a0:cf:d3:44:49:07:
f0:7a:e9:dd:06:53:d8:ea:b4:1d:68:ee:26:59:0e:
9d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B4:2E:49:F7:7B:4B:DC:55:1F:8F:7F:42:E3:95:D2:9D:E7:23:53
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_7QuSfd7S9xVH49_QuOV0p3nI1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:e7:be:d9:d0:be:d2:36:f2:3e:2a:09:5f:c3:1b:19:f4:61:
31:05:00:f8:ad:a8:58:29:fd:59:ed:50:09:c5:a0:cc:c9:1c:
1f:66:20:32:65:ac:39:fd:fc:06:be:5e:4c:37:68:9d:6b:19:
1b:72:ad:c9:ec:4e:93:29:09:b8:f1:c2:0e:d6:fe:27:ed:00:
c6:c5:14:87:7c:4f:a1:49:72:9d:c5:12:90:a5:92:da:8e:18:
e3:a4:30:28:db:71:f2:ae:00:fb:55:50:5f:35:4c:b9:8b:07:
56:49:e7:88:80:2b:58:80:e4:00:bc:4e:e2:11:20:f8:48:30:
a5:16:14:3b:11:fa:e4:6b:51:0a:6b:dc:cc:94:36:ea:ce:32:
47:e7:d3:ad:fd:6e:03:33:51:fc:b6:72:48:c2:52:b2:e5:ff:
34:00:0f:cd:f2:ea:ff:a1:b9:98:e3:25:5d:46:cb:e8:f9:32:
3c:df:0e:a8:3e:3d:17:60:db:e6:6a:a9:61:21:36:ff:ea:bc:
53:3a:07:87:6e:c0:80:fa:3b:61:0d:7d:57:b1:b7:ca:d3:ab:
af:8c:7a:28:ae:84:84:c8:1d:39:98:84:1f:80:52:bc:76:7a:
4a:f7:31:1b:04:ad:2d:d8:44:ed:9e:f9:d2:c7:8f:c6:23:e9:
f8:ac:6d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:30:02 2025 by rpki-client