Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c5WTUF6Mhi84Abi5xorSQlU16tk.roa
File: c5WTUF6Mhi84Abi5xorSQlU16tk.roa (raw, json)
Hash identifier: flE5BRc3TdcyHu2L7Ed8J0hDmeUN5KyQxkxLVHleUpI=
Subject key identifier: 73:95:93:50:5E:8C:86:2F:38:01:B8:B9:C6:8A:D2:42:55:35:EA:D9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C08BAFDC1A6195830CC5F2BCA76DB5690
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c5WTUF6Mhi84Abi5xorSQlU16tk.roa
Signing time: Sat 25 Nov 2023 23:05:21 +0000
ROA not before: Sat 25 Nov 2023 23:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:8ba:1572/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:08:ba:fd:c1:a6:19:58:30:cc:5f:2b:ca:76:db:56:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 23:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=739593505e8c862f3801b8b9c68ad2425535ead9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9c:ce:ee:87:a6:59:5c:c7:9e:c0:70:49:2b:
d7:68:dc:22:99:71:ed:0a:a2:bf:18:f6:1b:07:8d:
91:e4:81:74:b1:bf:e7:8d:c5:d0:90:2d:23:5c:a7:
f9:b3:dd:70:db:90:10:88:ae:f5:05:9c:c3:38:a8:
0e:21:7c:43:19:f3:7c:be:5f:a9:34:e2:78:d5:6d:
03:e5:29:fd:1e:ad:ec:c8:cf:ba:4f:bd:b7:17:09:
7a:31:b3:03:e3:04:f2:08:d7:30:9b:7b:b7:23:fc:
b0:aa:ff:00:12:20:dc:ea:bc:61:f8:d2:e5:ef:04:
83:d3:b7:45:20:7f:d3:2e:64:f2:bd:bc:3e:59:f7:
1a:88:d4:99:6f:c7:c5:62:d0:7c:3c:db:c9:1d:a5:
2a:3d:04:c4:83:ad:98:ca:71:b6:cb:42:03:cb:0f:
97:35:3e:22:24:f2:20:65:7b:3a:a1:8f:2b:1b:92:
32:7d:40:49:a0:37:b7:92:b4:88:20:7d:5e:b4:99:
6a:b3:91:04:c8:34:6c:b0:cf:d1:c0:05:ea:8c:1a:
28:16:c0:ad:c0:f2:9a:b2:b4:81:75:45:e6:35:01:
c5:b8:f2:27:cf:38:06:3b:18:32:af:76:98:01:5d:
f4:6f:cd:8f:6b:0d:0a:82:a5:b5:4c:1b:3d:6b:af:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:95:93:50:5E:8C:86:2F:38:01:B8:B9:C6:8A:D2:42:55:35:EA:D9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c5WTUF6Mhi84Abi5xorSQlU16tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:7a:5f:b4:08:b6:7e:f3:42:70:e4:a8:1e:67:46:0c:01:12:
91:eb:be:28:ef:98:07:12:84:d2:dd:29:a4:58:dd:dd:2b:48:
11:95:d6:2f:16:0f:4b:8d:a4:8b:41:8f:db:e1:3f:27:c7:c8:
ef:25:65:f0:9d:2e:ef:60:02:69:d1:cf:3b:c5:e5:71:96:22:
85:65:f1:45:28:0a:2e:87:3d:ba:00:89:67:19:06:ff:7b:6d:
ad:38:89:89:0d:c1:99:da:42:ed:ab:eb:a7:6a:bc:2d:74:36:
56:09:f2:da:88:32:db:98:86:12:87:17:48:bf:76:bb:99:e5:
58:e6:0f:78:d2:2a:02:17:2c:59:2f:94:a7:21:59:59:8c:00:
93:dd:bf:81:8b:c2:64:ca:e3:7e:2d:7a:49:58:ef:cf:8e:06:
ce:48:db:75:48:45:e0:eb:0e:d1:0b:22:5c:4a:f0:83:9c:4e:
a1:f9:59:57:63:83:75:d1:ce:02:fe:37:4d:3a:94:66:91:f8:
9f:29:d7:21:f0:77:ff:63:57:04:92:60:8e:38:83:61:d6:05:
c7:2a:2d:01:56:74:da:06:db:ee:0a:6a:4d:aa:ce:3f:ba:1d:
53:90:c8:98:65:7b:a9:35:6a:66:82:8b:29:84:9f:87:ff:61:
95:18:34:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:17:11 2025 by rpki-client