Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kTyh2yACzgNVJUHUowIbAVYrqSA.roa
File: kTyh2yACzgNVJUHUowIbAVYrqSA.roa (raw, json)
Hash identifier: NwzQ04P0fptUiEuqh1ZupT4OAbuSeQmtyQ5JgVbg9pc=
Subject key identifier: 91:3C:A1:DB:20:02:CE:03:55:25:41:D4:A3:02:1B:01:56:2B:A9:20
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF1598A7B5E3A83020E4FEB95FE996EC2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kTyh2yACzgNVJUHUowIbAVYrqSA.roa
Signing time: Mon 02 Oct 2023 17:04:51 +0000
ROA not before: Mon 02 Oct 2023 17:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:f159:2c92/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f1:59:8a:7b:5e:3a:83:02:0e:4f:eb:95:fe:99:6e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 17:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=913ca1db2002ce03552541d4a3021b01562ba920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:49:10:1b:47:0a:2a:06:ae:6b:4e:cb:e4:
7f:cd:f0:4c:50:f3:56:8e:06:22:7d:73:9c:4d:bd:
0b:68:56:7b:4d:da:23:84:95:fd:71:67:ef:13:76:
74:5b:f9:9e:69:e0:f4:63:92:d7:ed:3e:41:75:a3:
f9:fc:53:80:68:57:25:3b:be:3a:f3:1f:25:c9:dc:
d4:6b:09:15:90:be:03:3b:d8:90:9b:cd:99:f6:f1:
cb:31:9e:32:1e:1f:13:bc:09:37:fb:da:f0:e7:f9:
72:47:34:81:4e:85:4b:6b:8f:e5:67:a6:cc:4f:b8:
c9:b4:8b:d7:c6:a7:1b:85:37:0c:3a:dc:b3:6a:d8:
aa:cf:79:7e:7a:73:25:84:33:0a:62:62:ca:96:b9:
00:dc:8f:02:e4:2b:3e:89:1a:c4:b2:b0:c2:d5:a2:
bd:e4:69:d1:c4:4c:50:39:23:00:e4:f3:09:c9:05:
7b:d5:59:41:32:f7:3d:00:db:b3:59:77:dd:04:27:
72:88:e5:61:04:11:1f:3d:41:18:80:23:97:92:9f:
e1:d5:95:6a:ab:ad:eb:ca:b8:d2:70:68:c0:25:63:
f1:4e:fc:54:3b:4d:de:ff:2f:d7:2c:ea:84:37:07:
4e:ae:b8:fa:cb:bd:09:5f:7b:c3:fa:bf:1d:75:e3:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3C:A1:DB:20:02:CE:03:55:25:41:D4:A3:02:1B:01:56:2B:A9:20
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kTyh2yACzgNVJUHUowIbAVYrqSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:98:44:fb:fc:27:dd:04:f5:2b:e5:e1:48:6d:a3:8b:cd:c5:
eb:b1:8c:3d:14:e6:8f:5c:ba:15:55:02:a9:51:ea:7f:5b:dd:
9c:da:08:c9:53:33:d7:ed:86:c9:24:f3:67:83:de:cd:3a:9a:
30:0d:46:bc:2d:03:07:16:f6:fc:37:9f:2c:8e:7f:4c:9b:e7:
00:21:5b:1d:68:34:90:af:e9:c9:05:52:20:32:d1:9e:52:8a:
05:d6:5e:bc:66:3c:d0:45:3c:52:62:2b:6e:71:c6:e9:97:68:
1d:34:59:7a:bc:75:36:5e:7c:d9:64:d5:77:ab:d3:d0:5d:26:
b7:72:fe:6b:93:bd:16:ac:66:30:76:84:f2:0a:72:6c:01:93:
df:d0:94:2d:17:98:3d:93:1d:ad:03:e6:69:6e:39:00:e0:df:
98:18:f2:34:58:8a:bc:78:b6:f4:69:a5:73:91:67:04:16:2c:
f3:1e:b6:20:2c:6f:2f:53:cf:fd:b2:9b:21:be:e4:ee:14:76:
65:24:94:5a:57:f2:f2:1b:6f:9b:66:8f:1c:64:ee:72:7a:64:
37:ea:af:05:05:da:b5:43:a2:48:b0:9a:d7:68:77:13:7c:f6:
1c:0e:5e:b4:74:d4:98:32:c6:d2:c0:3d:6a:f2:2f:e5:1b:0d:
67:06:5d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 19:32:11 2025 by rpki-client