Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c-x9s9E2VcdifeoJ_7fI_1WW9ac.roa
File: c-x9s9E2VcdifeoJ_7fI_1WW9ac.roa (raw, json)
Hash identifier: Z7pjJMJ/Bi/6vkulso+SqgAb1CzvJj6eTw5T3pWM+So=
Subject key identifier: 73:EC:7D:B3:D1:36:55:C7:62:7D:EA:09:FF:B7:C8:FF:55:96:F5:A7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C43F3B77176DA5DE81B90DC6BFE1999B8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c-x9s9E2VcdifeoJ_7fI_1WW9ac.roa
Signing time: Thu 07 Dec 2023 11:04:54 +0000
ROA not before: Thu 07 Dec 2023 11:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:43f3:70f9/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:f3:b7:71:76:da:5d:e8:1b:90:dc:6b:fe:19:99:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 11:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73ec7db3d13655c7627dea09ffb7c8ff5596f5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1d:7b:07:c3:99:8c:26:79:ad:9c:16:a0:1f:
15:d9:a3:3c:21:72:8e:a7:2c:79:83:c1:1f:60:22:
ac:94:8a:6c:4e:44:9c:2e:60:42:e2:13:c2:8e:9d:
45:de:61:d4:ff:e0:4c:cc:72:65:e4:73:a6:a8:39:
81:70:34:23:da:9e:64:88:e9:7e:99:1a:34:85:60:
e1:79:7b:ec:42:8d:31:18:18:b5:68:26:a6:58:e6:
d6:ad:0a:8a:a8:c4:11:87:96:65:cc:49:f4:df:98:
90:48:7c:c2:79:f5:9f:db:e9:49:93:13:37:59:be:
38:da:1a:8e:fa:ca:f4:a3:36:d2:09:06:fb:f9:8c:
d4:3a:93:8a:58:2e:97:8e:3b:64:80:1f:9f:8d:3d:
c8:cf:b0:a4:1a:a7:3c:fa:3b:a7:fc:34:3b:08:d3:
4f:f6:c5:ec:f4:92:d3:7c:ca:4f:e6:31:79:73:17:
87:e1:eb:51:47:f8:1b:c2:11:fd:f2:e1:f3:6b:23:
22:81:bd:a8:ab:d5:fe:d2:8b:f2:f6:b9:57:7a:ae:
e5:80:58:8d:8b:90:4c:d3:9e:1c:05:f4:81:5e:d9:
b2:3e:91:fd:69:f6:47:32:8b:76:f9:4b:76:fe:60:
54:94:80:39:21:68:01:c1:b9:ad:ea:3c:3e:be:de:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EC:7D:B3:D1:36:55:C7:62:7D:EA:09:FF:B7:C8:FF:55:96:F5:A7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c-x9s9E2VcdifeoJ_7fI_1WW9ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:83:aa:58:3e:c1:6c:f7:dc:ca:b3:df:43:8c:82:63:4b:1c:
18:bf:2a:25:5c:d3:01:35:74:8c:35:3d:60:c9:aa:47:96:32:
41:d5:e5:6c:4c:01:9a:c2:ce:ca:09:a2:1c:90:16:b7:62:31:
f6:a6:2c:85:ad:49:22:4e:d3:df:b2:30:59:6c:74:fc:5e:67:
63:dc:31:44:e7:75:4d:b6:b5:44:4a:a6:23:7a:a5:a5:51:a0:
ec:48:5f:f6:a0:fc:ab:2b:b7:eb:c2:86:4e:b6:81:c7:b4:2f:
c3:a7:58:53:43:07:23:a3:9e:bc:00:34:73:ec:0a:b9:f0:c7:
8a:91:40:ac:03:1d:2d:55:b6:03:51:88:a8:bb:33:4f:3c:29:
f9:0e:a8:c7:c4:91:82:1a:fd:0e:de:33:7a:ab:64:1e:8a:50:
01:76:9d:58:12:f3:f7:98:83:69:cd:c7:0a:f7:34:25:c6:dd:
c9:b8:e9:5c:22:f3:9f:2d:af:b1:3d:19:dd:7d:31:84:3b:86:
2e:63:28:c2:a2:8b:ef:54:d0:d0:6b:73:77:c6:6e:ac:72:a4:
56:5d:bf:89:1a:25:95:81:25:87:c8:53:f1:de:dd:b2:d6:24:
4f:92:50:3e:41:9d:11:94:f8:69:1c:82:eb:5f:ea:7c:35:e8:
b4:cc:90:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:11:18 2025 by rpki-client