Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_i9O_4Xfh1_aYfYXtU95En3GOrU.roa
File: _i9O_4Xfh1_aYfYXtU95En3GOrU.roa (raw, json)
Hash identifier: o8sx+ql+d7piCpWF6/dOOMR3TcLpmJSDCBDoA9Ggm9c=
Subject key identifier: FE:2F:4E:FF:85:DF:87:5F:DA:61:F6:17:B5:4F:79:12:7D:C6:3A:B5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5DB66446930BED381CCE9E276386381F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_i9O_4Xfh1_aYfYXtU95En3GOrU.roa
Signing time: Mon 23 Oct 2023 18:05:16 +0000
ROA not before: Mon 23 Oct 2023 18:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:5db5:97b9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:b6:64:46:93:0b:ed:38:1c:ce:9e:27:63:86:38:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 18:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe2f4eff85df875fda61f617b54f79127dc63ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:97:24:ee:24:00:cb:25:97:ac:88:2d:e8:a1:
63:69:41:41:c6:f8:7b:9d:d1:d3:47:b1:cd:b0:31:
67:ab:54:69:23:a3:27:9f:ae:2a:1d:d1:7d:e8:77:
a7:26:b5:b4:85:0f:c9:5f:0a:5a:11:95:af:7e:23:
7d:23:4d:7d:d3:a8:5c:02:60:f2:61:26:1f:87:be:
4a:c0:3d:da:85:7f:b5:60:48:3a:be:8d:21:08:56:
c6:8d:d2:5a:38:99:4b:dc:0c:1a:d2:fd:cf:cf:9d:
89:d4:54:13:a0:5a:e9:9f:74:0b:73:a5:25:2d:fd:
0d:4e:fb:92:43:8f:53:af:d5:dd:ff:2a:aa:d4:bf:
ad:07:ba:33:75:5b:70:00:14:e4:8e:71:1b:43:0d:
bc:2b:eb:cf:47:57:41:1d:22:f9:e9:0b:cd:6a:9b:
a8:2d:eb:35:86:fb:6d:b0:c4:81:d6:4f:96:a0:19:
6a:ec:ae:d7:40:e7:e5:50:0c:b1:a3:6e:6b:23:38:
eb:7b:60:75:4c:03:e6:d8:01:f4:12:aa:bc:9f:bd:
5f:20:c2:ab:3e:5b:59:73:ee:64:45:86:83:c1:bc:
36:b7:27:05:b0:1a:92:be:a6:2e:e4:27:14:85:0f:
bc:5b:36:30:cf:fe:49:1e:53:31:78:af:92:1d:e9:
c7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2F:4E:FF:85:DF:87:5F:DA:61:F6:17:B5:4F:79:12:7D:C6:3A:B5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_i9O_4Xfh1_aYfYXtU95En3GOrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:d0:38:9a:99:7f:ea:ad:5e:3d:1d:7d:3b:fd:d2:d7:57:5b:
94:65:dd:0a:e5:b5:8c:32:28:47:a9:2d:4f:79:2e:cf:9a:09:
03:6e:1a:25:ed:39:bc:fa:28:2c:39:24:d2:e3:46:34:da:90:
17:dc:c4:cf:9a:3d:cd:37:eb:bb:1e:0f:8f:f3:ca:27:38:3e:
16:da:22:7d:eb:c3:c5:3f:09:d4:85:6e:73:d5:0e:d7:7c:4a:
86:92:a3:11:59:9b:a2:43:99:4a:b8:74:c1:1f:f1:08:7f:ca:
7a:ea:ac:51:f5:9a:33:78:a6:e3:63:1f:d3:37:a3:74:4c:53:
17:25:c0:b0:11:bc:95:f8:9d:80:40:fe:cc:62:6f:c1:56:4a:
51:61:28:dc:4d:a6:8e:b3:30:27:a7:ee:74:43:65:74:49:91:
92:85:34:06:f4:55:72:8e:08:58:b0:a8:ae:21:98:61:fc:75:
36:60:2e:bc:86:13:d5:66:34:3d:14:a5:3a:3a:ac:24:0a:04:
f9:af:d2:0d:71:6c:22:cb:2b:57:74:5b:0e:00:6b:09:08:43:
f0:8a:37:22:49:68:95:ff:d0:02:d4:fe:6e:85:fd:88:72:7e:
3c:14:01:5f:4e:1d:c8:5f:c4:5a:6f:7b:08:5b:75:2b:93:69:
aa:73:02:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:55:39 2025 by rpki-client