Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m8y48R2RumkAXm0_6lmYkuYkY30.roa
File: m8y48R2RumkAXm0_6lmYkuYkY30.roa (raw, json)
Hash identifier: TpJF9ICA24njQ18mO2+9eNrSMBcgxRNxBEQOrU8Y9FU=
Subject key identifier: 9B:CC:B8:F1:1D:91:BA:69:00:5E:6D:3F:EA:59:98:92:E6:24:63:7D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE476A0FE323AB68C6BE0336DA70012C0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m8y48R2RumkAXm0_6lmYkuYkY30.roa
Signing time: Sat 18 Nov 2023 22:04:21 +0000
ROA not before: Sat 18 Nov 2023 22:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:e476:9780/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e4:76:a0:fe:32:3a:b6:8c:6b:e0:33:6d:a7:00:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 22:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bccb8f11d91ba69005e6d3fea599892e624637d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:e3:d8:e7:71:87:09:fe:08:a4:74:0a:14:
24:c1:72:9b:34:3c:55:58:c5:e1:b0:c3:58:0b:99:
57:83:f2:d7:74:49:1d:4e:b4:70:c7:87:7b:35:46:
cf:f9:e5:9b:37:51:7c:c7:1e:0b:67:3e:17:dd:0c:
d4:94:bd:80:74:55:c7:d3:81:92:db:be:e5:55:2b:
47:94:8f:56:27:49:5b:21:4e:5a:ef:1b:60:25:32:
dc:14:03:36:f8:85:ef:ec:48:69:b4:ff:c1:32:8b:
59:0f:75:46:2f:e8:6f:3e:31:fd:d7:77:7c:63:1d:
4b:51:7a:0e:e0:91:2e:d3:b3:a9:05:2e:ca:2f:f5:
af:b1:2a:89:3b:d9:14:7d:91:61:51:aa:21:b2:fd:
16:2b:4b:e2:4b:16:f1:fa:0a:d3:67:70:1d:19:83:
e9:e8:62:75:f2:08:04:34:ef:93:b7:c0:d5:3d:f6:
f4:7e:7e:76:f7:16:99:5d:60:a9:76:60:10:e4:5c:
20:10:1d:c2:9b:b6:17:8d:e0:a7:56:07:aa:5d:44:
eb:14:74:bb:47:87:89:72:09:bd:2f:c8:ec:4f:fe:
3e:b4:b1:ae:1b:9c:4f:4d:47:93:f8:1e:8f:fa:29:
ea:c9:f5:91:8f:76:ab:58:31:77:45:b8:cb:75:74:
3d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CC:B8:F1:1D:91:BA:69:00:5E:6D:3F:EA:59:98:92:E6:24:63:7D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m8y48R2RumkAXm0_6lmYkuYkY30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:a9:dd:9a:1c:89:12:21:5f:a6:b8:35:10:ca:e9:61:a6:38:
b9:64:ba:dc:97:76:38:08:c4:5a:6e:af:76:36:c7:13:05:0b:
e8:12:58:02:4d:ba:43:ad:d7:8e:44:f1:cf:ab:6e:2f:72:96:
4d:dc:08:be:0d:c2:b9:ad:86:5b:fa:43:77:c9:a6:a0:b5:08:
9c:3d:38:c3:8f:d7:11:1b:f5:f2:4b:7a:7a:71:5a:b1:0f:04:
c9:f5:63:3f:07:82:f4:d8:ba:34:c1:a2:6c:aa:76:f4:0d:ac:
67:b4:c1:00:48:97:9d:73:42:94:6a:89:2f:11:7b:ae:a1:d4:
90:9b:ad:40:4c:c0:6d:1a:95:6b:7a:22:a1:bd:89:dc:fc:09:
88:84:f5:90:55:76:23:f9:ab:3e:08:2c:17:07:c4:70:8a:d7:
6b:9f:b7:5b:0f:0b:f9:86:de:32:f1:80:d2:a8:5c:36:56:10:
d2:8b:a4:f8:c6:56:b5:8d:be:3b:60:53:ba:2b:5f:ea:7d:c6:
33:9d:b3:90:ca:19:72:71:6d:2b:e6:f1:f1:2f:ce:b5:4d:df:
4f:9f:68:0f:c5:22:a2:1a:30:10:31:1b:73:d6:29:e7:8d:18:
1e:0f:82:a6:a4:a8:11:60:fe:c1:79:37:67:13:f4:96:84:d3:
12:22:cb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:34:47 2025 by rpki-client