Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aXRYGib7vkaeYkXlc9M9oVBw6j0.roa
File: aXRYGib7vkaeYkXlc9M9oVBw6j0.roa (raw, json)
Hash identifier: HNyqjztXGLkFE0b1LF1zeGU+imSEQoM9WBvn/U0ovaM=
Subject key identifier: 69:74:58:1A:26:FB:BE:46:9E:62:45:E5:73:D3:3D:A1:50:70:EA:3D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB8E80DA3F412AF5E8347526C511289C9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aXRYGib7vkaeYkXlc9M9oVBw6j0.roa
Signing time: Fri 10 Nov 2023 11:04:57 +0000
ROA not before: Fri 10 Nov 2023 11:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:b8e7:6f6a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:e8:0d:a3:f4:12:af:5e:83:47:52:6c:51:12:89:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 11:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6974581a26fbbe469e6245e573d33da15070ea3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:66:42:e1:e6:39:3c:db:d7:00:c9:b0:97:
dc:11:88:d7:b4:c6:21:b3:68:bc:1e:29:08:6c:64:
71:34:1b:b4:58:75:4a:9e:a2:06:32:b7:f3:90:3a:
6c:74:a9:0e:9c:ff:11:02:61:21:48:bf:f6:3f:e7:
68:e3:7f:2d:5d:b4:a1:1d:4b:01:db:4a:1b:a1:dc:
a3:b8:ec:50:6b:d4:16:38:78:12:21:1d:f5:61:24:
56:cd:32:d1:16:61:85:22:2c:09:c9:19:df:78:b5:
69:e0:f8:15:63:f5:54:e4:01:d6:84:00:7c:bf:f3:
3d:81:9c:bb:e7:fd:15:e8:24:68:29:4b:a5:8a:7f:
25:1a:37:0c:3c:c4:dd:da:08:d4:f8:fb:9a:1a:26:
13:a3:26:ee:bb:28:39:fe:69:27:68:5f:99:e8:18:
7a:02:64:e7:62:6a:be:b9:68:c9:96:fc:5a:2f:eb:
43:ba:df:69:5f:b2:06:99:ba:e3:04:d4:94:f9:b0:
94:1a:3b:62:d5:a3:e3:9a:90:33:38:4f:59:94:08:
93:66:f5:84:a7:4d:c8:12:65:bd:fc:43:93:ff:c5:
5a:d9:56:8d:7b:3e:9b:41:56:6f:19:71:75:a0:5f:
3b:a4:a8:e7:8e:8f:be:e3:1d:e9:c3:55:80:72:5f:
51:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:74:58:1A:26:FB:BE:46:9E:62:45:E5:73:D3:3D:A1:50:70:EA:3D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aXRYGib7vkaeYkXlc9M9oVBw6j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:09:ce:33:8f:aa:58:87:9c:07:71:69:dc:fd:f4:04:b0:6d:
31:ae:ab:cc:72:f9:51:63:85:59:26:12:42:03:49:63:cc:fc:
1d:d5:3d:01:9e:a8:ca:55:39:f9:b3:28:fe:4c:6e:b6:73:10:
41:33:75:81:21:68:5b:e7:07:01:cf:14:b1:d3:97:4f:8e:12:
bd:2e:7c:f2:9d:3b:c3:3d:15:3f:5b:da:f9:ec:a7:1f:0b:98:
83:93:89:73:0b:f1:ab:e5:75:5c:b6:7c:6f:03:24:f4:b8:42:
bc:38:6b:53:18:ab:90:9e:f1:fa:70:c4:c4:e5:04:62:42:a5:
d8:a3:61:b1:80:f7:b7:4b:42:cc:bd:64:4a:ea:df:4c:ce:14:
d5:a4:02:3a:ce:b3:c1:d3:ce:c6:44:ac:b4:eb:ef:36:12:ae:
12:8e:66:49:68:12:b8:e1:b3:68:f4:a9:b6:19:92:9f:31:12:
d9:1e:3a:8d:f3:66:70:a3:ec:35:24:ce:b8:2f:4c:fd:4e:93:
d7:63:0a:cb:92:c5:03:05:d5:10:85:26:2d:fe:3b:34:f9:5a:
a1:28:d1:ce:2a:f6:36:26:5b:80:45:7f:16:23:03:73:36:93:
f2:ba:02:de:e6:0d:5c:bc:e7:0a:f7:26:7e:d2:3b:94:c6:20:
52:a1:72:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:05:14 2025 by rpki-client