Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/isS3RO5ypk0YE0VPImS70xZ9s8s.roa
File: isS3RO5ypk0YE0VPImS70xZ9s8s.roa (raw, json)
Hash identifier: rKBbECEJb5O1VcqDz7R5ZqdyrYiRuiH9slnKYyqt7uA=
Subject key identifier: 8A:C4:B7:44:EE:72:A6:4D:18:13:45:4F:22:64:BB:D3:16:7D:B3:CB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF07DD0569D1E0DCFB308175C85C29AC1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/isS3RO5ypk0YE0VPImS70xZ9s8s.roa
Signing time: Mon 02 Oct 2023 13:04:51 +0000
ROA not before: Mon 02 Oct 2023 13:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:f07d:40cc/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:7d:d0:56:9d:1e:0d:cf:b3:08:17:5c:85:c2:9a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 13:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ac4b744ee72a64d1813454f2264bbd3167db3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:9a:1f:ee:67:0b:1e:ef:89:6b:da:f4:34:
90:0b:06:e3:38:8c:3c:18:40:b7:59:e1:44:74:85:
86:2b:15:51:c1:b8:66:72:8f:38:d7:00:32:c1:b3:
22:02:a2:33:72:c3:42:02:6c:30:0e:71:52:7a:78:
5a:50:de:91:95:85:10:d7:51:49:56:f8:d2:6c:f4:
ad:1f:75:4c:00:52:09:56:ab:97:80:1f:2d:7e:04:
cf:b6:2b:e5:59:84:6d:e9:44:2e:13:b0:07:b9:0f:
37:18:89:df:79:c8:b6:46:c0:06:45:fd:b7:7b:b6:
0d:43:5a:8e:cb:ce:8f:16:62:fc:f0:f8:e3:22:29:
60:25:31:f4:0a:ab:bd:c3:16:09:fc:95:11:f8:69:
32:c8:e0:38:4d:fe:a8:49:2b:8f:69:b1:76:81:c5:
18:ad:87:e9:60:68:54:df:13:0b:e8:0f:c7:fb:dd:
e0:d9:91:f1:3f:42:97:da:8f:51:f2:19:f5:5d:e5:
17:1d:6a:1c:06:02:20:1d:a5:49:a7:01:91:2e:a2:
f2:ad:3e:ac:75:d0:7a:f2:9a:21:e4:45:93:cd:d8:
c8:b0:b9:42:f5:fa:61:94:86:44:6d:87:56:03:1c:
a7:59:79:f9:7b:4a:ab:35:1c:1f:a0:94:be:de:7f:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C4:B7:44:EE:72:A6:4D:18:13:45:4F:22:64:BB:D3:16:7D:B3:CB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/isS3RO5ypk0YE0VPImS70xZ9s8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:1c:15:3e:0d:88:e0:74:3d:63:42:31:6e:bf:4c:13:5e:17:
89:00:4f:b5:02:68:b2:5e:03:7f:f7:98:b8:2b:71:24:00:18:
8d:74:b5:47:fe:12:bb:a2:4e:3a:a0:87:41:5c:6c:0f:15:77:
3f:8d:27:5a:23:a5:48:34:1a:06:d6:90:f4:ae:65:6b:e7:99:
60:d6:d0:14:6d:ff:74:53:be:39:58:00:a3:e1:32:eb:cb:8b:
76:0e:d7:47:f1:cc:85:54:f6:5d:62:2a:2b:c4:aa:5f:96:31:
a6:59:09:20:a7:63:35:c1:fe:7d:c4:17:ee:b8:3d:5d:b3:18:
7f:9b:c9:c6:32:36:fc:ab:b0:fc:84:2c:d7:2f:22:89:70:b8:
0f:34:b2:ba:b6:35:c1:a5:8d:91:cd:10:d3:f3:fe:d6:31:2b:
f3:76:e4:c3:0a:be:ee:9b:fb:22:59:0e:16:ba:1f:92:4f:f6:
c8:0a:88:f7:4c:ff:0a:11:90:6f:14:aa:01:fe:f0:fd:c7:3b:
5c:6d:7e:d0:33:6a:ef:4e:ab:1d:e7:07:48:48:f0:69:a8:4e:
0e:66:0e:8e:fd:ed:e4:77:05:c8:eb:e2:9b:18:bd:2d:86:b5:
eb:85:f9:c9:8a:e2:56:e0:fa:02:df:81:e4:b4:c2:f1:cc:26:
dc:d6:26:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:54:46 2025 by rpki-client