Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/l8rWG-ETOXm9DjqAimrASPEpQ24.roa
File: l8rWG-ETOXm9DjqAimrASPEpQ24.roa (raw, json)
Hash identifier: cBlQvPvrP2d1FupHEQPh2IIK3JuEn9Fdb37rijrmqDo=
Subject key identifier: 97:CA:D6:1B:E1:13:39:79:BD:0E:3A:80:8A:6A:C0:48:F1:29:43:6E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C50D66797FD4280F01F8738E0CFD74A56
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/l8rWG-ETOXm9DjqAimrASPEpQ24.roa
Signing time: Sat 09 Dec 2023 23:07:57 +0000
ROA not before: Sat 09 Dec 2023 23:07:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:50d2:ebff/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:50:d6:67:97:fd:42:80:f0:1f:87:38:e0:cf:d7:4a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 23:07:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97cad61be1133979bd0e3a808a6ac048f129436e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:55:3d:4e:b9:09:a8:7b:c2:f2:bc:68:bb:
40:19:88:39:45:7d:ca:2e:db:b1:f8:2d:ae:ed:30:
ff:a0:f0:48:db:4e:82:a6:43:c0:71:73:cf:52:76:
11:b9:62:c5:c8:5d:8c:92:77:1a:82:85:35:5e:89:
93:f3:88:ba:b2:41:ff:8f:3f:42:7f:60:cb:bc:16:
f5:d7:e4:4f:16:13:ae:1c:59:f5:1b:a5:1a:7e:36:
72:23:c5:5c:94:3d:5a:e8:08:99:0d:80:38:dc:7d:
a4:8b:b1:e0:ea:ec:e4:9f:e8:a3:d2:62:60:77:52:
20:8c:de:98:fe:f9:e9:de:1b:8e:72:aa:ef:d2:b5:
57:57:c6:70:34:f9:91:b1:8e:99:b2:d3:6e:21:55:
50:ee:91:e8:37:d3:d5:d6:83:36:22:b6:21:54:2f:
d8:c0:55:da:bb:4a:b1:05:99:8a:1c:15:94:2f:d7:
0f:0a:43:50:75:30:4c:dd:cc:b5:a6:67:ff:a4:a7:
6c:e5:c4:a3:ec:e0:55:ac:1f:c8:8c:98:c3:0c:d9:
59:25:03:36:3d:32:b8:c6:47:2b:2c:bf:c2:95:5f:
d3:9a:5b:c8:19:26:8b:a0:cb:93:34:f8:90:f8:b8:
e9:38:f0:99:97:e1:ff:70:09:8c:14:be:65:7e:05:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CA:D6:1B:E1:13:39:79:BD:0E:3A:80:8A:6A:C0:48:F1:29:43:6E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/l8rWG-ETOXm9DjqAimrASPEpQ24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:f5:85:a1:8e:bb:38:4e:c8:2f:6e:60:76:fc:6a:17:de:47:
74:42:06:ea:05:36:12:8d:62:12:03:c0:c1:71:9c:38:91:06:
cd:66:fc:d1:e6:3d:85:30:5a:0d:05:b0:2a:c4:c7:d4:f0:8a:
2c:e9:8c:7a:66:c4:ea:6e:00:96:d6:ee:60:2d:17:04:1b:a1:
df:c9:5f:ff:21:8e:5a:87:13:c0:a6:89:a0:d5:9a:e9:c3:f9:
17:41:92:55:99:46:58:62:f6:e9:50:0e:eb:45:e4:86:a9:a8:
fc:7f:49:b7:91:08:52:f3:02:54:54:da:b3:8d:3f:8f:b9:8a:
a5:75:f7:72:74:7b:0d:4f:74:a5:75:40:b3:1d:93:e3:af:26:
9a:34:9a:3f:73:2b:6e:45:73:f9:e8:98:8e:44:cb:c4:0e:5d:
aa:43:54:52:56:04:e5:97:15:42:2b:0f:8e:4c:6d:57:32:de:
66:6a:1e:c4:80:9a:3d:e8:ec:48:29:f5:80:6d:5d:f5:e5:67:
a9:ba:5d:68:68:33:a9:fe:26:56:1f:69:0d:54:e0:aa:bb:b3:
34:76:57:6a:87:f8:f7:50:ae:6a:21:62:3c:e0:df:f1:df:3b:
b5:a0:b5:78:5d:b6:f8:68:a7:6c:40:9b:5d:c8:ff:ac:d5:4c:
81:6d:1a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:46:52 2025 by rpki-client