Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/f5OY5CoBaU_1E7s2ZmsGXfum9ss.roa
File: f5OY5CoBaU_1E7s2ZmsGXfum9ss.roa (raw, json)
Hash identifier: KqrHlbn36YRlx5cWdYcoq+R0SWyptk9P8HPLcd7pGmw=
Subject key identifier: 7F:93:98:E4:2A:01:69:4F:F5:13:BB:36:66:6B:06:5D:FB:A6:F6:CB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEA44EB88F2B1D48AD47B30C8F1C9A471
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/f5OY5CoBaU_1E7s2ZmsGXfum9ss.roa
Signing time: Sun 01 Oct 2023 08:04:59 +0000
ROA not before: Sun 01 Oct 2023 08:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:ea44:5e0b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:44:eb:88:f2:b1:d4:8a:d4:7b:30:c8:f1:c9:a4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 08:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f9398e42a01694ff513bb36666b065dfba6f6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7a:71:45:93:99:1d:43:b4:fd:73:12:8d:d3:
3f:d2:0a:77:27:36:41:df:c0:64:86:09:69:84:24:
9b:54:8d:76:bf:b4:51:a2:5b:68:12:e0:41:d7:2a:
0b:b0:51:13:76:90:2c:f7:99:35:c3:9a:3e:76:c0:
7c:6b:c1:84:1f:28:b8:16:d0:7c:10:ca:ef:22:31:
bb:1c:57:72:dd:c9:7e:5d:90:47:85:3d:2c:fc:a7:
5d:1a:a2:b3:d4:25:a9:35:39:6f:98:00:52:81:6f:
b2:74:5b:fa:27:90:ff:53:b4:4d:65:38:c5:49:52:
3d:a2:4d:d9:63:69:88:06:44:d0:e3:42:1f:3f:fa:
ec:e5:36:6a:d6:4f:4d:54:57:c3:dd:e4:57:f3:6e:
85:be:cb:87:56:4e:3e:57:43:e7:5e:73:15:da:1b:
e1:2e:c3:59:bd:0f:54:34:8a:84:a3:42:ce:23:a7:
5e:e1:da:8e:c1:f0:f4:07:97:cf:28:31:93:6f:d5:
b6:9d:64:55:c9:bd:b4:d0:3d:62:0d:ff:96:8a:2e:
39:2e:61:1b:f8:87:fe:9b:a1:29:40:c7:7a:4f:a4:
10:9e:ce:38:40:2e:4c:3d:50:1b:04:33:c1:91:fe:
d0:16:80:09:db:00:c8:46:98:6e:de:d7:fb:dd:63:
8d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:93:98:E4:2A:01:69:4F:F5:13:BB:36:66:6B:06:5D:FB:A6:F6:CB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/f5OY5CoBaU_1E7s2ZmsGXfum9ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:46:97:1b:cb:32:91:0c:44:62:54:37:7a:7c:24:e8:22:84:
e7:0a:8f:28:30:8e:39:ff:f3:49:e6:8f:45:34:b7:c0:82:ae:
86:00:28:d6:05:66:9b:a5:c1:05:cf:aa:09:f8:9c:f9:6b:6b:
5b:94:18:f4:ff:97:fe:f7:15:ff:6c:1c:27:f0:82:f1:e0:b9:
a5:1a:fb:6e:6c:c9:e4:40:74:00:db:0d:fc:7a:bb:0a:2c:a4:
9b:01:7b:fe:78:0b:70:9f:41:e9:cc:4f:a6:82:87:10:98:f1:
8b:33:5c:ae:1c:d6:06:90:f9:21:b7:8b:14:e4:4a:1b:72:56:
60:f6:f1:f8:6b:40:95:f9:45:7e:e4:2d:73:d7:eb:9b:0c:01:
76:91:90:de:75:90:2c:d8:f3:1d:b8:94:eb:36:f3:53:d5:c7:
45:30:6e:7f:9f:2d:15:b7:9a:42:f1:48:5b:c1:3d:29:06:95:
01:ef:65:1c:db:3c:5c:bd:4d:a5:0b:95:c5:16:23:9b:d0:a5:
f8:70:9d:f3:c8:73:1a:40:99:3e:92:fe:b1:62:28:d5:6b:8c:
69:91:67:39:50:65:45:a3:ec:c2:e6:62:22:04:06:7c:25:49:
db:41:2d:d7:f5:60:a3:d7:92:29:33:58:e4:bb:e6:07:1b:e5:
fc:2d:24:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:00:54 2025 by rpki-client