Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lim4ZirWpXADsUasuybvj1scgrQ.roa
File: lim4ZirWpXADsUasuybvj1scgrQ.roa (raw, json)
Hash identifier: f16I4BQCuJcjncZpzFIL2Wn4fJxKPCVGIV7Zfbib/88=
Subject key identifier: 96:29:B8:66:2A:D6:A5:70:03:B1:46:AC:BB:26:EF:8F:5B:1C:82:B4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC6020AEDC0443A53AD80CB7F20761D81
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lim4ZirWpXADsUasuybvj1scgrQ.roa
Signing time: Sun 24 Sep 2023 07:05:37 +0000
ROA not before: Sun 24 Sep 2023 07:05:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:c601:5918/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c6:02:0a:ed:c0:44:3a:53:ad:80:cb:7f:20:76:1d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 07:05:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9629b8662ad6a57003b146acbb26ef8f5b1c82b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:ce:d0:7b:a2:e6:55:59:c4:c8:ec:07:4e:
d5:a0:3a:01:be:e9:06:d1:48:27:79:fe:b7:02:19:
ec:44:07:0a:b2:c0:5f:25:c8:84:5d:8f:a8:e0:cd:
06:62:b5:65:b0:ef:b8:ad:3c:fa:73:4d:db:5d:d0:
f2:34:97:e7:b6:6c:a1:04:28:c7:04:7c:df:a4:a4:
2e:9a:83:ca:82:e8:08:6f:97:0d:ec:82:2f:89:4a:
71:ac:82:c8:c6:39:2b:19:cf:57:ee:fd:a0:91:0e:
43:d4:31:17:54:f6:c4:fc:a6:11:44:24:b0:c6:bf:
b7:15:0f:7a:78:f6:16:27:d4:bc:12:40:01:0a:fb:
06:71:15:e8:77:d4:78:68:ea:07:ff:8a:aa:f0:c3:
bc:3b:a6:a7:de:e9:ba:74:bc:3b:69:96:a4:1f:86:
eb:93:76:9b:b5:b7:d9:9a:72:e2:2f:5b:97:70:70:
da:c1:ad:79:b2:08:5b:54:e3:de:c3:28:d5:6e:16:
2f:37:09:55:a2:59:ee:88:a6:5e:ca:3a:04:2d:b7:
62:38:02:d8:07:a6:f9:f6:e1:10:ef:6d:7f:95:74:
93:e4:60:52:a2:85:69:bc:6e:73:cb:38:ef:d2:db:
35:dc:2d:45:eb:4e:46:82:49:75:9b:16:3b:d5:a5:
f1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:29:B8:66:2A:D6:A5:70:03:B1:46:AC:BB:26:EF:8F:5B:1C:82:B4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lim4ZirWpXADsUasuybvj1scgrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:73:e2:c1:e2:02:b7:d7:d3:73:17:3a:1b:17:19:d2:c4:c8:
ee:0e:96:10:87:2d:2a:d2:06:a5:96:ac:ca:e1:87:39:a4:fb:
31:15:fa:81:6a:d8:01:c4:44:96:42:94:94:3d:ec:4c:9d:6c:
ef:a2:1a:1e:86:b5:fe:8e:9c:a2:9f:86:36:16:78:a9:41:b9:
76:1b:70:94:17:ec:18:83:2b:8f:67:62:7e:1a:7f:e4:b2:61:
35:ce:31:5b:55:91:d0:eb:03:57:7c:6b:ab:90:b7:ed:ae:e6:
f3:c7:00:77:7b:ff:18:b1:7f:e2:3b:b9:02:99:c6:04:e3:42:
27:8a:1d:29:cf:41:26:ac:4d:e9:53:16:d1:43:a2:87:b9:bf:
98:e8:b5:3c:54:6e:96:4a:40:a6:82:22:d6:e3:01:5e:86:35:
7b:ae:08:8c:f0:7b:d3:97:e8:e7:d8:bf:73:0d:87:bb:74:ec:
cc:39:fc:3f:4d:3d:b1:81:6f:c3:f1:66:0c:33:cc:8b:d2:f3:
df:ac:fd:67:e4:0e:29:9a:a7:3f:ce:30:03:ca:56:c6:c1:c8:
a0:2b:17:a5:f7:a3:19:55:77:02:c1:c2:1c:7b:df:74:62:07:
4c:dc:69:ac:61:68:1c:7c:ea:64:61:de:a7:e4:18:72:70:c3:
72:48:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 18:14:14 2025 by rpki-client