Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ad5WjZD43HFQLby4QisYJ8MrVZ8.roa
File: ad5WjZD43HFQLby4QisYJ8MrVZ8.roa (raw, json)
Hash identifier: mO+Sn9zsOWRQ8WG+se4ceCA8MNtU4fgyejlrpJ1NALg=
Subject key identifier: 69:DE:56:8D:90:F8:DC:71:50:2D:BC:B8:42:2B:18:27:C3:2B:55:9F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3E2EB76FB9FA70A4E61C70CED37E9045
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ad5WjZD43HFQLby4QisYJ8MrVZ8.roa
Signing time: Tue 17 Oct 2023 15:08:50 +0000
ROA not before: Tue 17 Oct 2023 15:08:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:3e2a:a1dc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:2e:b7:6f:b9:fa:70:a4:e6:1c:70:ce:d3:7e:90:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 15:08:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69de568d90f8dc71502dbcb8422b1827c32b559f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e4:a6:60:a6:17:80:e8:83:ba:99:86:06:00:
62:dc:03:08:e6:04:b7:09:c8:35:40:71:d5:53:5b:
fd:fd:7d:ea:3a:c8:c0:b5:3c:af:c8:bb:e9:13:a4:
fd:b7:c7:de:99:42:0b:fb:7b:a1:03:f8:3f:3f:cf:
91:35:d4:d9:40:b6:ee:d1:47:87:ef:2c:9b:f7:8c:
e5:ea:e2:53:22:5a:e5:fe:27:67:fd:c2:52:6b:cf:
5e:d7:83:1e:24:0b:81:ea:97:24:b4:bc:cb:2d:bc:
e0:8e:dc:91:d1:62:6e:f2:c3:0a:ba:05:a3:69:59:
0a:1b:91:ef:72:8c:e9:7e:9f:46:58:82:a0:49:1a:
76:2b:32:09:5e:1f:6f:ec:d8:26:31:b3:a7:63:1b:
85:d4:7e:db:a9:da:25:72:7a:3b:4d:99:c1:1a:ea:
9d:1e:c2:e8:2c:1f:a2:29:7d:b9:a9:b2:2c:16:fc:
c5:2f:b2:7d:2c:3c:43:e9:6e:67:41:81:48:e7:c6:
58:d4:b1:04:b2:a1:30:a3:24:8f:2e:7e:5e:84:53:
6a:6f:b4:ea:26:67:02:66:5c:5a:94:91:32:98:6e:
5e:57:14:c5:58:a0:ad:26:02:4c:81:06:04:56:1b:
65:b5:6e:2d:ba:88:3e:9b:ee:c1:18:10:61:01:b7:
95:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DE:56:8D:90:F8:DC:71:50:2D:BC:B8:42:2B:18:27:C3:2B:55:9F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ad5WjZD43HFQLby4QisYJ8MrVZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:bb:d2:0a:1e:03:89:3b:5a:64:71:fc:00:80:66:6d:b1:c6:
3a:11:be:29:c2:a1:ee:5e:eb:2c:8c:e2:ba:86:90:06:0d:6c:
d1:9e:c8:4d:d2:a6:b8:62:0a:10:50:9e:3d:a0:0b:0e:de:b9:
e5:00:34:ce:31:e6:ae:d8:29:3f:9d:c0:86:c3:4d:13:76:59:
24:ed:b2:a6:a3:9c:9c:94:3b:a3:1d:df:3b:c0:83:cb:46:da:
b2:b7:bd:58:bd:6b:90:8d:1e:3d:83:11:93:3b:1d:ab:4b:b4:
41:08:c4:d6:a5:97:76:28:1d:36:57:13:0a:07:94:49:cf:50:
68:b5:29:b3:5b:6d:34:ed:b4:ff:f8:ce:f6:c7:5f:cb:2b:b0:
9d:59:52:3c:b8:6e:1d:6b:31:68:46:66:6b:7b:9f:fb:25:e2:
55:c2:65:04:ab:19:07:f2:03:90:f7:db:87:97:ad:1e:be:03:
95:5f:9b:f8:de:93:79:1d:79:45:c2:ec:74:53:00:2f:94:9c:
b2:59:fc:2c:b0:6f:c8:1d:c7:1c:42:37:86:15:92:b7:c4:4a:
bb:33:b3:78:b0:d9:0a:54:f6:18:e1:94:8d:28:6f:ce:40:aa:
3c:fe:9c:d6:97:22:8a:0b:85:93:25:c9:9e:8d:d1:b3:94:83:
f0:32:d3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:39:37 2025 by rpki-client