Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hIcx9W2GNuh4Bx2dCDHQxeVMW0o.roa
File: hIcx9W2GNuh4Bx2dCDHQxeVMW0o.roa (raw, json)
Hash identifier: ZyxApZ5dgc2ztyxtQSaH/nen6M4dm4cO8BLBlkjTUTM=
Subject key identifier: 84:87:31:F5:6D:86:36:E8:78:07:1D:9D:08:31:D0:C5:E5:4C:5B:4A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE40BE73714E39F5917D96E398384F09F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hIcx9W2GNuh4Bx2dCDHQxeVMW0o.roa
Signing time: Sat 30 Sep 2023 03:04:59 +0000
ROA not before: Sat 30 Sep 2023 03:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:e40b:b820/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e4:0b:e7:37:14:e3:9f:59:17:d9:6e:39:83:84:f0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 03:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=848731f56d8636e878071d9d0831d0c5e54c5b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f3:d6:92:83:b1:ec:6e:d7:2b:0a:15:ce:e3:
a3:5d:18:57:45:8e:2c:8c:c5:db:f0:f5:12:93:b2:
40:4b:7c:25:12:25:89:61:09:a5:16:dc:5a:5a:8d:
62:81:db:c6:ef:f6:d0:fe:21:45:91:f2:c8:e0:a0:
1a:8a:1e:d8:c0:31:6a:f6:df:3c:76:86:93:e1:dc:
67:5d:63:a8:d2:e6:5a:dd:75:92:10:b8:62:ad:a3:
09:fb:01:93:7a:b3:bc:75:7a:fa:5f:8e:e8:0f:0a:
b9:72:e7:f5:aa:eb:0a:7c:5b:95:0e:82:9b:07:05:
fb:48:f1:d4:4e:0b:d4:ad:e5:7f:d6:45:2e:a3:c8:
7c:1d:cf:46:e2:a4:ce:10:c1:51:89:15:8d:ae:ee:
c8:1f:83:83:c0:eb:97:b4:cf:7d:76:65:c1:db:76:
d4:2a:5a:4a:f7:3f:1a:ce:45:4d:1f:61:1a:f7:7c:
ea:fc:10:43:e5:10:cf:c8:a8:7a:28:1f:45:8d:8b:
4d:56:b1:d5:19:9b:3c:71:e3:4b:25:e1:e0:15:49:
da:18:d0:5d:88:86:8f:8b:1e:8f:86:7c:3d:89:f3:
2d:96:63:20:c5:9f:82:2d:63:c8:f7:57:3e:ab:e2:
d7:94:f1:2e:8b:d0:08:d2:2f:34:4c:24:0d:95:0c:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:87:31:F5:6D:86:36:E8:78:07:1D:9D:08:31:D0:C5:E5:4C:5B:4A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hIcx9W2GNuh4Bx2dCDHQxeVMW0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:48:e9:8d:cc:e0:48:50:f9:68:4a:85:6c:fc:04:ac:23:41:
42:18:0f:27:00:e0:aa:92:d9:cb:26:7c:54:74:90:c9:70:89:
37:c9:d9:d6:0c:cd:c1:06:2d:ca:26:79:08:5e:fc:bc:76:f7:
67:38:80:63:f1:ea:f7:47:a1:f8:aa:89:18:46:a2:a3:4e:9f:
ec:a3:29:c2:1e:9a:dd:1d:3a:10:f0:76:82:bf:4e:fc:ca:23:
48:30:7b:a4:a9:dc:20:e3:d7:59:97:0d:28:c2:d3:f0:a9:0a:
56:37:a4:03:62:a9:b2:b4:d3:3b:af:40:07:f1:47:8a:be:ca:
46:4a:eb:4e:3e:b3:b2:a4:e4:c1:19:75:9d:c0:da:b7:e1:43:
37:e0:b4:63:d2:1b:8d:63:3e:3c:5d:0f:40:6b:50:c6:96:9b:
aa:b3:89:34:88:24:0f:55:fc:fc:69:e5:97:57:27:f9:54:48:
10:fa:16:02:fa:29:ab:b2:2d:e8:fc:57:47:3f:5e:9d:e4:9d:
75:b5:e0:3d:25:19:52:3e:2f:30:1e:75:f6:37:49:95:78:cf:
8b:27:a1:0f:cc:ee:4b:ca:b5:04:21:33:0d:7c:3a:6f:5f:0b:
1a:4d:16:a3:14:48:ed:aa:33:b3:85:fa:db:6a:9b:5c:a9:50:
d4:a5:29:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:12:59 2025 by rpki-client