Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a4o6sJjKrI3KVYihXfJQzxn7Ds0.roa
File: a4o6sJjKrI3KVYihXfJQzxn7Ds0.roa (raw, json)
Hash identifier: kU8mjyvqS7kTwyJnXWcLVdQMfu4gXwtDkmySGff7qFM=
Subject key identifier: 6B:8A:3A:B0:98:CA:AC:8D:CA:55:88:A1:5D:F2:50:CF:19:FB:0E:CD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1ED4094A6883F9F9B50C31223FFAFB31
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a4o6sJjKrI3KVYihXfJQzxn7Ds0.roa
Signing time: Thu 30 Nov 2023 06:04:21 +0000
ROA not before: Thu 30 Nov 2023 06:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:1ed3:e1d7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1e:d4:09:4a:68:83:f9:f9:b5:0c:31:22:3f:fa:fb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 06:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b8a3ab098caac8dca5588a15df250cf19fb0ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:88:cd:b0:43:7c:5f:dc:e4:5d:6d:d6:71:
af:0d:3f:da:98:e8:09:e5:df:14:29:56:f5:6f:ad:
49:f2:e0:0e:98:cf:f4:14:45:91:c1:1e:7a:74:10:
c3:ae:89:dc:bd:76:5f:04:9a:2b:93:bd:8a:eb:63:
03:fa:d0:c8:00:15:fa:28:34:c0:86:dd:5b:64:4a:
e6:25:6d:9b:cf:e2:d5:3e:96:2a:4f:f8:82:c2:06:
e4:bd:55:61:6b:e3:12:d3:28:94:d5:fe:d9:ef:3b:
4a:e3:01:88:8e:2c:b6:04:6f:3f:dc:2e:c9:d0:b6:
ca:b3:25:48:30:05:97:b1:56:83:3d:79:e7:4e:99:
91:dd:67:c0:67:0c:9c:17:46:ca:de:70:ff:43:f9:
26:3d:30:ea:17:86:83:a7:d8:93:9d:7d:64:69:b8:
5e:37:e5:71:07:78:d9:bc:0e:0c:d0:08:ae:dc:4d:
71:95:c6:07:de:d0:e1:e2:d8:fe:ed:57:c2:89:0a:
b0:a1:ff:9e:a6:c9:64:fd:94:80:87:2f:06:3c:c4:
14:ee:a6:30:e5:f8:a5:bc:e0:be:e8:e8:77:a7:6a:
ce:cc:35:51:2f:2b:35:9d:73:1a:4c:89:96:f3:43:
fb:43:77:23:af:85:27:b3:38:d5:bd:11:23:da:b7:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8A:3A:B0:98:CA:AC:8D:CA:55:88:A1:5D:F2:50:CF:19:FB:0E:CD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a4o6sJjKrI3KVYihXfJQzxn7Ds0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:d0:d2:30:24:97:a9:be:d5:6f:2f:7a:91:45:34:38:cf:6e:
1a:cd:cd:d0:17:a6:a4:e9:2e:3c:d8:8f:ce:19:b6:0d:bc:ca:
80:b0:6c:24:4b:89:41:f1:1d:aa:03:77:5a:29:33:f6:e9:03:
10:68:96:3d:52:74:f7:94:30:32:53:b9:28:fd:cb:0a:26:5f:
15:4a:91:b0:42:be:4f:9e:08:00:d0:ff:37:37:19:38:4e:6b:
82:8c:e5:c6:64:3a:fc:49:c9:4a:c5:17:32:21:be:27:33:db:
a8:c2:a1:87:03:03:1f:8e:18:1b:2d:cd:d4:dd:3a:60:7d:f3:
c9:74:45:da:c5:fa:8a:02:31:51:9d:7e:c3:46:1c:cd:d1:9a:
39:36:81:09:96:e4:86:84:0e:04:1a:ed:9b:29:7e:99:0d:72:
b1:2b:2e:91:57:5a:eb:2b:6f:c2:f1:93:cd:c9:ab:c7:94:bb:
b2:90:e7:3b:42:80:b3:f3:53:2a:f8:81:f8:d2:48:1d:23:92:
c3:93:56:e1:62:82:6b:de:37:43:e0:2c:39:95:53:e6:dd:1d:
3a:d5:cd:41:cd:a6:85:19:c3:de:71:9a:97:21:9a:64:d9:88:
b4:11:6b:b7:fb:d7:a9:81:0e:3b:dc:0e:44:97:6a:48:3c:54:
7d:5e:97:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 22:00:47 2025 by rpki-client