Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iIyoA6XE2FIKlk3XbQeN5wF_0G0.roa
File: iIyoA6XE2FIKlk3XbQeN5wF_0G0.roa (raw, json)
Hash identifier: L8NSob5C8GmK08ot0BpnGtLgxsOdq37YLOv4L9tnljU=
Subject key identifier: 88:8C:A8:03:A5:C4:D8:52:0A:96:4D:D7:6D:07:8D:E7:01:7F:D0:6D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD3869580C45ECF012170531B72D2D370
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iIyoA6XE2FIKlk3XbQeN5wF_0G0.roa
Signing time: Tue 26 Sep 2023 22:05:27 +0000
ROA not before: Tue 26 Sep 2023 22:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:d385:dfc2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d3:86:95:80:c4:5e:cf:01:21:70:53:1b:72:d2:d3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 22:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=888ca803a5c4d8520a964dd76d078de7017fd06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:37:41:69:01:d3:e6:b2:cd:04:2f:7f:11:
ce:bf:70:6c:f0:e9:33:06:30:fc:64:57:bd:a0:72:
af:bf:b1:99:87:84:bf:25:6a:44:07:33:2f:2b:be:
81:b5:3b:e3:00:2d:a2:0b:a5:30:0c:f9:49:d2:17:
95:0b:96:b1:13:5c:c2:ff:27:cc:8b:39:5e:a0:57:
09:a0:c7:39:5f:9a:bf:70:f1:a4:49:58:2c:5d:56:
40:44:c4:c9:a6:bc:08:30:4a:4b:3b:e0:e0:b3:31:
bf:2f:9f:d8:4d:b1:44:aa:77:2c:29:69:29:c3:29:
fb:9d:08:88:3c:69:71:e6:c1:a9:ec:48:e5:80:36:
9e:59:3d:a3:3b:4b:57:0a:11:e3:7e:f5:84:84:fb:
df:8e:1e:3a:56:aa:8e:3e:a5:fa:08:28:af:75:22:
88:ba:52:fb:52:6e:df:1c:23:44:5d:19:a7:d0:80:
d8:ac:72:60:14:53:d6:aa:14:cc:30:09:c8:12:78:
3c:a5:8a:dd:46:72:32:e9:8b:8d:a7:85:1f:e4:7e:
e8:96:7d:1b:96:cd:41:76:a3:4b:35:1d:be:ed:4b:
6c:b1:eb:50:8b:4d:1a:18:74:8b:cf:c4:39:98:e5:
4d:15:28:20:0b:2f:70:c5:38:b1:20:3a:80:12:85:
8b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8C:A8:03:A5:C4:D8:52:0A:96:4D:D7:6D:07:8D:E7:01:7F:D0:6D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iIyoA6XE2FIKlk3XbQeN5wF_0G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:84:95:59:c4:59:7d:5b:2d:8b:11:e3:95:35:5c:1a:37:de:
39:38:de:e1:6a:91:d0:f5:7e:aa:f8:0b:da:dd:85:57:df:55:
6b:54:78:2e:fe:df:a0:bb:eb:e8:7f:41:22:61:ec:17:f7:4e:
76:2b:c9:b7:d7:45:63:0e:5e:22:5e:08:d7:0d:b5:79:81:a7:
0c:9f:11:8e:74:29:c3:35:e2:d0:c9:0b:a2:65:05:45:7e:a1:
12:7d:15:2d:db:0d:75:86:5c:f1:7b:26:02:d7:ba:ed:2f:a1:
e7:75:cd:44:15:90:3d:3a:14:d2:ea:7a:9a:97:93:c1:96:a1:
fb:18:bf:8a:f5:c2:f0:09:1d:80:6a:c9:aa:36:34:40:d9:66:
48:09:83:f1:30:98:a4:05:6c:48:0c:bc:10:60:15:7f:53:be:
1c:0f:45:47:16:88:bb:d3:2b:42:3c:96:95:50:c6:23:18:07:
c8:fa:06:f7:29:a6:bc:33:2e:05:68:95:05:de:dd:29:52:a6:
25:4c:f5:fe:6a:e6:91:c6:fc:74:27:8b:ce:b2:fa:71:2e:21:
82:7f:b0:3c:5a:a8:9b:77:63:b0:a2:f9:3f:ae:eb:38:3e:b5:
f9:b0:2a:d7:22:5f:27:ee:4e:c4:fa:e7:06:f6:8d:77:e0:2a:
73:de:51:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:44:42 2025 by rpki-client