Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cYjdJSnQrYS61dnE9isxCsusS60.roa
File: cYjdJSnQrYS61dnE9isxCsusS60.roa (raw, json)
Hash identifier: Ps236z/woSTVRkDsRi2CdByJXrOpwQRqWw1Dej+ZKqk=
Subject key identifier: 71:88:DD:25:29:D0:AD:84:BA:D5:D9:C4:F6:2B:31:0A:CB:AC:4B:AD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6C81F918269C53F33F1FD9CAFD7DED41
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cYjdJSnQrYS61dnE9isxCsusS60.roa
Signing time: Fri 15 Dec 2023 08:05:06 +0000
ROA not before: Fri 15 Dec 2023 08:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:6c81:3545/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:81:f9:18:26:9c:53:f3:3f:1f:d9:ca:fd:7d:ed:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 08:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7188dd2529d0ad84bad5d9c4f62b310acbac4bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:23:12:5a:a5:96:d8:91:3b:f7:b1:83:e8:
aa:99:ae:a4:8f:d0:fa:8c:c7:e1:11:d4:a1:c4:40:
bd:4b:6d:9f:ca:1a:fd:67:7e:ff:d3:0f:58:5c:35:
bb:eb:0c:4e:ab:48:e5:a7:60:27:11:c0:5c:35:91:
db:60:f3:72:d2:2e:ff:2b:35:1f:a5:ba:2c:7f:79:
13:63:83:4e:9a:a7:a7:11:a6:0f:9e:46:38:0a:21:
54:19:4a:9c:c7:70:cf:8c:7a:10:3d:fc:c4:3a:ec:
19:eb:30:06:96:ac:d5:ed:e0:9e:62:bf:d6:b4:55:
44:42:95:bd:b5:cc:a9:d7:c6:6e:81:15:a4:bd:cc:
59:be:94:38:99:ed:af:8a:47:42:4a:a2:0b:97:c3:
4c:9a:24:98:eb:51:fc:10:e0:b1:d5:76:eb:e3:e2:
e9:1c:5a:1e:53:57:54:81:4b:e4:39:d2:bf:b5:52:
cc:6c:df:42:56:2d:11:b4:41:cc:06:22:a4:52:8f:
6d:e9:65:a9:1e:70:ee:31:28:5a:60:73:72:7a:a5:
05:9f:2a:2a:ae:37:87:28:bf:67:0e:f4:df:41:5d:
15:56:4d:00:e2:8e:ea:d2:af:17:52:5f:8b:a4:18:
0e:62:01:24:dd:4c:18:dd:d9:81:90:c9:c0:4c:ca:
24:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:88:DD:25:29:D0:AD:84:BA:D5:D9:C4:F6:2B:31:0A:CB:AC:4B:AD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cYjdJSnQrYS61dnE9isxCsusS60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:fc:60:62:21:22:1f:16:58:04:25:6a:83:d9:1f:9b:74:f0:
9c:48:a6:a5:d8:fc:5b:a4:09:04:fd:e0:98:07:9e:b4:33:87:
2e:47:53:b8:03:8e:9a:0a:65:39:35:c2:29:eb:1b:c0:87:ae:
68:b8:7f:53:2d:0f:ba:75:f5:4d:74:18:38:c9:e1:67:88:df:
03:89:a3:93:4b:c9:64:13:88:4d:b1:47:46:1b:08:cc:ee:3c:
29:14:72:e7:2d:19:b1:d4:1a:65:5e:97:f4:f6:b0:61:3b:2f:
17:b0:df:6b:84:fa:39:e7:5f:67:41:c8:42:67:c6:84:b2:21:
b4:96:d4:fe:f3:57:16:1f:5a:36:cd:ad:3e:36:e3:c4:55:df:
6f:f0:1f:9c:4b:46:2c:6c:e7:02:d0:7c:fa:34:e0:2d:20:cc:
5b:fa:ad:a3:54:ca:27:3d:ab:52:a0:d7:c3:a8:c5:75:35:29:
00:c5:3e:57:48:ec:1a:61:a0:99:ff:3c:b0:ce:6d:3d:9c:4e:
60:9d:08:a5:ab:8b:31:af:21:60:fa:33:2c:5c:ef:79:39:d2:
e4:32:a6:1d:cd:ed:68:28:dc:ac:34:16:ec:e7:4d:41:7e:fc:
5b:8e:7f:7a:1a:c3:0c:a6:69:c5:ca:1d:0c:94:b9:ce:aa:10:
c8:4e:63:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:59:28 2025 by rpki-client