Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dZWxFUTGclpDbkZ6qkEAmojI7qY.roa
File: dZWxFUTGclpDbkZ6qkEAmojI7qY.roa (raw, json)
Hash identifier: lgfHhSlBOqDliWUY+d4IwH7QCWSb8ShY9bktG6RCvNM=
Subject key identifier: 75:95:B1:15:44:C6:72:5A:43:6E:46:7A:AA:41:00:9A:88:C8:EE:A6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C10AA8BFFB387E4B8ED3A73AB8CE262F9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dZWxFUTGclpDbkZ6qkEAmojI7qY.roa
Signing time: Mon 27 Nov 2023 12:04:21 +0000
ROA not before: Mon 27 Nov 2023 12:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:10aa:85ae/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:10:aa:8b:ff:b3:87:e4:b8:ed:3a:73:ab:8c:e2:62:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 12:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7595b11544c6725a436e467aaa41009a88c8eea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d0:b5:30:d3:60:cf:74:e8:1a:2d:78:55:5f:
3e:c5:fd:7b:73:b9:18:b2:21:af:c0:de:b5:93:ac:
49:01:bb:e2:01:96:b5:08:68:98:7a:ba:d8:b2:f9:
fe:ec:6d:03:cc:a6:9c:69:f8:74:74:d3:ee:62:9c:
1d:9f:ad:bc:81:aa:f1:e9:f1:03:d3:2e:fc:e3:78:
54:19:ca:0d:dd:4b:dc:f0:af:b3:49:c7:aa:1c:06:
06:f1:38:d0:b7:ca:37:ed:39:b6:a1:15:8c:a7:e1:
da:44:93:74:89:b5:a1:08:a8:02:43:48:94:3a:be:
9e:9e:0a:17:f1:4d:89:62:28:23:5d:31:d5:fb:a6:
5e:b0:47:e5:25:29:e4:f5:02:db:95:39:b8:a6:58:
40:0b:61:4f:b6:55:23:53:38:46:43:aa:00:5e:82:
da:89:dd:86:93:1f:8c:fa:74:76:6c:fd:14:c4:16:
7a:c9:7f:df:3a:af:b1:c2:cb:a0:75:49:58:90:d6:
c4:53:fe:c4:c5:4b:ce:78:43:bf:c2:1d:13:73:92:
55:31:af:c9:ee:4a:10:d7:94:b5:1a:33:f3:57:1a:
13:5a:95:ac:34:fb:38:94:5a:9f:81:1a:1e:0f:38:
da:d7:b7:9a:22:2a:5a:a7:5f:8d:30:5e:f1:3e:6c:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:95:B1:15:44:C6:72:5A:43:6E:46:7A:AA:41:00:9A:88:C8:EE:A6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dZWxFUTGclpDbkZ6qkEAmojI7qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bd:91:39:9e:b5:2e:3c:4a:1d:06:ff:95:66:ad:e9:09:f8:fd:
fc:96:f8:aa:25:27:ac:32:e6:1d:a0:f2:ff:07:c1:cc:93:e8:
f8:98:19:5a:b3:12:aa:2e:15:0d:c7:7a:ed:a1:d9:95:87:b0:
4e:5a:33:24:41:8b:f8:b8:89:0f:08:1c:49:2c:80:de:a8:f7:
6b:cb:ee:83:5b:9e:85:e1:26:41:07:71:38:de:83:d4:94:a2:
08:a2:1d:eb:65:8c:0b:4f:99:1f:ca:f3:6f:0f:fb:0f:ea:26:
96:fd:bb:87:eb:b7:6b:5e:e6:f6:0a:51:be:ce:ad:8c:71:f2:
3f:e6:9e:f8:16:55:f2:80:0d:97:b2:71:c9:0e:02:aa:d3:81:
69:0e:a5:32:f2:22:c4:92:99:7f:57:8c:d8:09:60:58:a7:1e:
90:2e:60:7b:be:b4:80:d2:fd:a5:1e:91:f4:26:45:93:db:e6:
f6:35:1d:72:d0:a9:e2:b9:ae:62:da:4d:03:a9:b2:0f:73:45:
c6:ab:93:b7:58:ae:47:a7:fb:14:2e:d0:16:c8:75:e2:22:a7:
02:6f:20:b8:22:04:6e:97:8d:4c:ef:4c:b6:33:58:d6:c4:60:
f3:25:0a:c7:bc:c5:ee:33:76:2a:77:23:b4:2b:7a:18:82:25:
4c:58:9a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:42:24 2025 by rpki-client