Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_ORPWCct4G4CenOUOjBmMCzmoB0.roa
File: _ORPWCct4G4CenOUOjBmMCzmoB0.roa (raw, json)
Hash identifier: lgUe2tv8o2S9cGuFNkgel82TtAQRsMMddmhST1jW8C0=
Subject key identifier: FC:E4:4F:58:27:2D:E0:6E:02:7A:73:94:3A:30:66:30:2C:E6:A0:1D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADCC20EC68AFF3D1B633ADCFBB7308A52
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_ORPWCct4G4CenOUOjBmMCzmoB0.roa
Signing time: Thu 28 Sep 2023 17:06:59 +0000
ROA not before: Thu 28 Sep 2023 17:06:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:dcc1:456e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dc:c2:0e:c6:8a:ff:3d:1b:63:3a:dc:fb:b7:30:8a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 17:06:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fce44f58272de06e027a73943a3066302ce6a01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:aa:da:fb:1b:13:4a:26:76:24:e8:ca:04:4b:
c4:0a:55:6d:62:c1:f7:86:95:b4:e1:70:34:49:8f:
b8:ca:2f:46:54:cb:2e:b4:62:a4:bf:75:50:a2:ac:
74:35:fc:72:3e:47:a1:be:e9:0d:bb:b1:95:14:a3:
95:5a:d0:93:cc:00:eb:da:e2:08:b7:ab:ca:53:fd:
82:09:30:ca:c6:17:fc:35:13:22:29:9b:7f:f3:59:
08:31:c9:b8:4e:fa:19:59:90:ca:48:2a:98:31:24:
9e:a0:ba:17:b1:b6:6e:a9:22:7a:d6:07:f6:5d:14:
06:a3:d6:61:87:7c:d2:05:51:57:88:3f:45:26:d9:
d4:c5:72:4f:4b:8b:12:1e:e4:1a:11:9e:a2:3b:a3:
ef:37:3f:44:6f:b2:08:88:0b:24:06:0e:74:5c:56:
f6:f0:fc:51:3a:bd:74:9d:2f:ae:d3:30:d1:4e:8d:
bf:ba:27:98:f9:ea:57:34:56:2c:76:bc:ea:bd:80:
12:29:a6:c4:27:d4:6b:dd:e8:23:e4:54:b2:57:bb:
8c:aa:19:76:b1:7d:6c:12:6d:5c:38:70:e5:85:4d:
88:67:b0:c5:94:84:52:27:e4:83:34:d7:49:b1:dc:
46:19:2f:72:8c:5f:b4:d2:91:a3:ae:5a:d8:30:8c:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E4:4F:58:27:2D:E0:6E:02:7A:73:94:3A:30:66:30:2C:E6:A0:1D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_ORPWCct4G4CenOUOjBmMCzmoB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:f8:45:21:79:a6:44:48:80:95:87:be:ad:25:a2:c8:b1:75:
1c:e1:b1:cc:c2:f9:5f:db:c9:92:1b:b8:be:ea:1d:be:3f:6b:
d5:0e:d4:f4:b9:c5:f0:a3:04:3e:a9:9b:a8:27:61:7d:b9:47:
89:9e:1c:79:36:19:62:4a:38:56:25:2c:7f:ca:13:0f:f3:fa:
b3:ed:eb:ed:64:9a:7f:69:ca:78:58:de:82:3a:eb:bc:cd:10:
53:ba:8c:69:29:51:81:5d:f1:39:f2:13:8e:37:a1:27:7f:9e:
9e:16:3d:41:a0:11:40:99:fd:7a:2a:48:9a:81:9a:34:a7:15:
f4:00:4a:8d:92:21:f9:d1:c3:2e:8c:9c:2d:90:9a:ae:f4:19:
df:10:9e:b3:1c:39:7b:57:76:e1:8f:aa:9a:65:6c:fe:6d:ce:
cc:22:63:fa:9a:e1:bd:e4:54:c2:2f:bf:3a:4e:18:d7:89:b6:
b7:f7:71:96:14:d8:fa:c7:05:b8:34:3b:9f:5d:02:ca:82:9e:
68:2e:28:62:71:f9:d2:81:60:07:aa:a3:20:e1:d4:12:e5:bc:
e0:00:43:0c:5f:e0:03:44:93:98:7f:34:f1:05:a2:fc:5e:21:
00:01:e6:54:32:38:95:e5:a4:b8:43:f4:53:14:f9:38:5e:7a:
5b:8c:80:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:06:04 2025 by rpki-client