Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bLek4JJbSZnpDF_ga4v5KRyDgPg.roa
File: bLek4JJbSZnpDF_ga4v5KRyDgPg.roa (raw, json)
Hash identifier: bf0Y9G/pB/1rfZIpAF+ExsrkSB7THKxOVkIO7XhJ9nA=
Subject key identifier: 6C:B7:A4:E0:92:5B:49:99:E9:0C:5F:E0:6B:8B:F9:29:1C:83:80:F8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC7F06D9F2DF58401B3D2E598AC61710C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bLek4JJbSZnpDF_ga4v5KRyDgPg.roa
Signing time: Sun 24 Sep 2023 16:05:37 +0000
ROA not before: Sun 24 Sep 2023 16:05:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:c7ef:ecad/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c7:f0:6d:9f:2d:f5:84:01:b3:d2:e5:98:ac:61:71:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 16:05:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cb7a4e0925b4999e90c5fe06b8bf9291c8380f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:09:e8:a0:7a:4b:c2:7b:f2:eb:a7:61:cd:52:
bd:37:69:22:73:d5:c8:2e:99:dc:86:fa:16:a6:79:
e2:6c:cc:1b:9a:b0:78:ee:11:40:75:b7:ce:bd:47:
64:4c:d6:f3:67:27:4d:3c:f8:51:4c:ca:56:51:a4:
01:88:a3:b3:28:c5:91:70:fa:7c:05:0e:01:46:df:
bb:cf:81:19:43:d3:b6:57:dd:92:1c:93:06:ba:9a:
26:f1:a0:18:fc:20:4f:93:05:ca:a2:1c:1a:a0:53:
a8:bb:40:9d:2b:fc:88:b4:0d:cd:f6:49:6d:be:44:
f7:c1:5a:fd:f8:00:4f:8d:e5:51:16:01:c1:72:fc:
b1:f3:22:1e:01:7d:1d:e6:a0:b5:0d:68:d7:4f:19:
61:4b:76:91:b8:be:13:ba:fa:d2:ef:9e:29:c6:69:
ce:74:b5:ab:2e:69:19:6f:4d:66:7a:0a:85:1c:ec:
11:7a:48:25:81:be:28:a3:b5:96:20:e6:ce:d0:06:
ea:06:66:ce:94:ff:c9:a2:5c:52:7b:24:ad:12:60:
fe:e4:a9:66:3b:fc:f6:cc:8d:6d:d9:a6:d2:dc:ed:
92:16:aa:95:09:bf:a8:17:8d:26:59:2c:64:77:3f:
16:fa:a5:fe:87:d0:9f:60:40:d4:5d:c8:41:3c:37:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B7:A4:E0:92:5B:49:99:E9:0C:5F:E0:6B:8B:F9:29:1C:83:80:F8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bLek4JJbSZnpDF_ga4v5KRyDgPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:e3:d1:ca:42:22:3f:7a:76:16:96:fd:3b:77:d6:bb:5d:f7:
63:96:e7:b8:e3:f6:de:e0:43:18:f1:a0:10:68:c2:3d:98:48:
1b:68:b6:e0:99:66:de:c2:81:1c:f5:9a:f3:f7:1c:47:37:d7:
fe:da:64:25:6c:9e:c8:30:d9:94:d2:37:85:89:25:6b:45:45:
1f:59:3c:47:93:39:1f:7b:20:7b:18:a7:c3:c9:c7:d9:3e:6d:
6e:8d:c1:29:7b:29:96:10:ff:39:43:26:1c:f7:7b:77:da:83:
da:c3:8e:27:87:d6:c0:72:19:56:ed:47:70:f3:01:b5:11:0f:
57:d3:1a:ad:18:ff:d3:25:73:f3:2c:7f:97:94:05:d4:2a:23:
95:a8:c5:53:18:28:e1:40:b5:2c:df:a9:07:c4:de:49:47:e1:
f1:d4:ac:b2:c6:3e:a1:a7:6f:c2:3b:67:1b:4f:5e:d3:87:17:
81:04:77:5f:8f:32:68:ce:29:b5:2f:3b:e2:12:14:3e:42:8e:
7d:0a:6e:f7:cc:b4:6b:ab:ab:6d:ee:af:0c:37:7b:75:64:32:
e4:d7:c9:28:db:8e:c3:bb:af:90:a1:79:07:77:97:e2:14:7d:
58:22:22:e8:df:d4:a9:84:ae:b9:d7:d1:9a:56:7c:02:2c:19:
b8:7d:ef:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:09:39 2025 by rpki-client