Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hmFjWTrXddJJhqxYdEyJIoQgLiE.roa
File: hmFjWTrXddJJhqxYdEyJIoQgLiE.roa (raw, json)
Hash identifier: ZhM8um2LISP0QyOHj6vJTuW3T2UsAfGHW6RiUBtG7wA=
Subject key identifier: 86:61:63:59:3A:D7:75:D2:49:86:AC:58:74:4C:89:22:84:20:2E:21
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1A1C743E2F0D062E7492EDA8AFBC937E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hmFjWTrXddJJhqxYdEyJIoQgLiE.roa
Signing time: Wed 29 Nov 2023 08:05:21 +0000
ROA not before: Wed 29 Nov 2023 08:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:1a1b:d4a8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:1c:74:3e:2f:0d:06:2e:74:92:ed:a8:af:bc:93:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 08:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=866163593ad775d24986ac58744c892284202e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e0:28:51:94:e8:4d:4f:db:51:3d:02:34:85:
51:4d:f8:31:e3:78:7c:d9:a8:c7:73:6d:f0:73:91:
be:35:2e:b1:ae:8e:6c:93:76:c2:8f:3c:15:b1:5d:
75:5e:52:5a:4c:88:87:6c:86:d0:ec:f3:ab:bd:82:
80:30:4a:79:27:a1:d3:72:76:cc:4a:bc:e5:82:6f:
f5:1a:fb:e0:c1:75:88:03:c2:c8:33:83:3f:99:68:
c3:d1:bd:dd:7d:eb:df:2a:22:07:5e:1a:8c:94:23:
f5:41:77:52:6c:ef:4e:dd:38:ea:c4:b3:54:5f:fc:
d9:f1:a3:67:31:6d:6f:5f:e5:51:ff:58:d7:a6:73:
29:24:57:2f:d6:77:1d:e4:a2:e9:17:1e:16:e4:57:
0f:ef:9c:d3:7d:14:7b:d7:2d:49:6f:5f:98:b2:6a:
69:e7:f4:41:9e:7a:4a:96:22:2e:b4:48:a0:89:66:
a2:48:b6:ce:a2:bc:2f:a5:be:e9:1c:fa:ee:7d:6f:
be:09:8e:7a:c9:9b:b3:21:92:2b:c1:20:85:82:2f:
42:6e:3c:26:d5:58:15:d8:a1:d7:af:e7:c2:6b:19:
08:af:2c:7f:10:57:15:0d:13:3b:79:a5:b0:32:12:
4a:5b:92:15:d4:de:53:57:9b:06:a1:ba:93:a4:8e:
6c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:61:63:59:3A:D7:75:D2:49:86:AC:58:74:4C:89:22:84:20:2E:21
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hmFjWTrXddJJhqxYdEyJIoQgLiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:93:bf:da:6f:f3:a9:75:04:15:a0:70:b8:c0:b0:fc:39:33:
d0:e3:11:6c:97:e1:bc:cd:7f:6a:02:e2:31:30:f3:19:c4:30:
0a:b6:92:55:d3:35:e9:8f:00:f6:2c:c1:3f:da:10:34:f3:0c:
51:ca:81:26:5f:b5:9d:51:b6:8f:33:22:c7:3b:12:18:e7:f9:
67:19:02:1e:b7:19:8c:eb:ac:7b:3d:de:b4:d8:15:fa:12:a4:
48:37:0e:e7:b1:61:08:cb:0e:03:a2:38:7f:60:21:c2:47:d5:
27:07:40:35:5a:ad:25:72:30:f2:a9:54:f9:0a:e8:48:c4:e2:
1e:ac:82:9d:20:07:c1:2a:7f:9e:af:66:7a:db:0b:9e:0a:1e:
24:46:37:7e:81:39:fd:b2:3d:ff:96:e3:3c:af:7a:a9:e1:53:
b2:32:ef:8b:60:78:ab:24:41:01:5b:7a:ce:bb:e0:87:e9:0d:
45:68:8e:6b:e4:a4:8f:3f:8f:c0:de:bd:36:a7:d8:35:13:7b:
5f:ee:9d:2a:bf:4d:45:a8:f2:0f:25:59:f4:53:e1:9d:10:2c:
81:1c:e4:80:f4:ac:ef:a8:fd:40:80:dc:1a:2f:a9:75:f0:b9:
ec:a3:3b:cd:c9:92:6b:76:52:01:97:06:02:0b:28:9c:ee:64:
3e:e4:2e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:05:30 2025 by rpki-client