Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kCTdfCrkHUr3u6kwLNTz4TOCTCw.roa
File: kCTdfCrkHUr3u6kwLNTz4TOCTCw.roa (raw, json)
Hash identifier: oyTWMBmJUG6tEf5vQMJq0TD6Ic6Ea+ZX8xIINxG2kys=
Subject key identifier: 90:24:DD:7C:2A:E4:1D:4A:F7:BB:A9:30:2C:D4:F3:E1:33:82:4C:2C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD8073BA17328047487C456BD84BBCB7C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kCTdfCrkHUr3u6kwLNTz4TOCTCw.roa
Signing time: Wed 27 Sep 2023 19:04:27 +0000
ROA not before: Wed 27 Sep 2023 19:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:d807:2a9f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d8:07:3b:a1:73:28:04:74:87:c4:56:bd:84:bb:cb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 19:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9024dd7c2ae41d4af7bba9302cd4f3e133824c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:fa:94:0a:4a:d4:af:e4:84:82:93:92:76:
d5:c5:11:7d:ec:bf:7e:6d:6a:f2:88:a9:d7:e9:35:
03:60:08:cd:38:f4:84:d0:30:fa:69:0f:da:18:de:
8e:f7:9b:13:76:51:3a:89:87:1d:59:be:45:5e:03:
75:3b:c2:83:e7:60:60:76:08:74:d1:1c:58:57:46:
11:f8:8e:de:a4:3c:67:fd:fc:db:0d:df:da:c1:be:
00:e5:9d:10:3a:5c:8a:ec:08:c1:f9:19:9c:2b:b6:
b7:3d:ef:d1:d8:d8:64:08:b0:f3:8c:88:dc:80:a4:
8b:a5:b0:cf:a4:ef:66:f6:33:89:ae:f1:44:6f:7f:
bb:d6:c4:cc:69:95:3a:cd:2f:f4:ae:7e:b2:49:f2:
26:27:87:0b:39:3f:a7:d2:82:1b:7d:0d:af:d6:d0:
38:73:32:46:e7:85:c4:88:33:a7:ed:2d:b9:32:ff:
cb:a4:d9:60:81:85:b4:a9:93:b4:70:ad:a5:e9:8d:
d9:8f:26:be:48:c4:bb:76:04:e2:25:24:30:83:a2:
de:4b:df:24:cf:e1:d8:a9:7a:3f:23:ac:c2:22:dd:
56:2e:43:c9:5d:48:7f:ef:35:91:6d:86:47:6d:08:
49:a8:f5:82:3e:c0:70:bf:5d:1c:f7:a0:40:8c:d0:
b7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:24:DD:7C:2A:E4:1D:4A:F7:BB:A9:30:2C:D4:F3:E1:33:82:4C:2C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kCTdfCrkHUr3u6kwLNTz4TOCTCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:11:1b:4d:74:3c:46:15:da:01:e3:b6:a2:ee:ba:2e:dc:5a:
89:11:8e:f3:8e:72:0b:f9:37:b4:93:d7:29:a2:5d:8a:96:10:
c2:8d:72:4c:62:cd:55:d9:b2:1f:5f:a5:9b:4b:5b:58:66:b3:
09:ad:44:2d:cd:f7:3b:f1:55:84:b1:68:58:ac:55:16:48:ec:
72:6b:7f:5e:e3:e7:d2:d6:91:61:65:18:10:45:8b:08:33:d5:
25:96:d8:5d:70:81:71:e3:06:b6:b9:0e:d6:27:ba:de:18:28:
32:21:fc:f9:ca:18:ae:4a:d5:fa:d4:b8:12:a0:05:2f:b7:76:
d7:01:e7:8b:f3:11:be:0a:19:78:20:e2:f8:3f:99:d4:7b:f3:
ec:fa:19:de:ed:87:ec:c3:82:f2:0c:f5:56:bf:6c:34:e4:86:
76:b7:05:08:5d:01:06:f3:65:1b:b7:b7:21:ba:f1:12:95:a0:
9a:56:b9:f9:e6:39:0a:87:75:84:83:c2:f4:33:7c:bb:3f:52:
03:14:31:8e:5d:73:99:d5:cd:66:87:f3:a8:db:d5:6c:02:9b:
2f:12:ca:eb:d3:25:bf:77:11:47:8b:fb:e4:03:60:30:52:41:
f3:c0:0d:13:64:c5:e4:1b:fc:19:86:84:97:f6:ae:8c:bb:1d:
29:4f:88:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:26:25 2025 by rpki-client