Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oIsQmXskdM_pVD4W0HDIFAsVHso.roa
File: oIsQmXskdM_pVD4W0HDIFAsVHso.roa (raw, json)
Hash identifier: 8LYcnZmS97FhcsKlsJXASVQ5/m2EHTNSvgpEoiZDYlk=
Subject key identifier: A0:8B:10:99:7B:24:74:CF:E9:54:3E:16:D0:70:C8:14:0B:15:1E:CA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE58B1DA7A1BFC7C0C185C2BD7E120BF0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oIsQmXskdM_pVD4W0HDIFAsVHso.roa
Signing time: Sun 19 Nov 2023 03:06:21 +0000
ROA not before: Sun 19 Nov 2023 03:06:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:e58a:73f1/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e5:8b:1d:a7:a1:bf:c7:c0:c1:85:c2:bd:7e:12:0b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 03:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a08b10997b2474cfe9543e16d070c8140b151eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:62:34:1e:5d:d6:da:28:ed:a4:34:21:1b:
87:73:05:86:5c:95:1f:63:50:ad:b6:54:10:d7:bd:
b1:2a:38:a3:60:bb:92:2e:12:4e:27:ea:b6:bb:c6:
ce:8a:93:47:db:41:d1:e0:7a:61:71:3c:ab:3a:50:
40:de:51:eb:09:28:b1:cc:f0:3a:ff:48:68:9d:fb:
5c:51:d8:46:ed:a5:5d:0c:30:70:4e:59:38:05:9f:
c7:7b:ad:4a:29:06:d1:e7:78:5c:ff:cf:a6:65:98:
8e:27:ea:46:ff:2a:e2:18:a3:46:c5:d1:6f:36:26:
5f:2a:3c:ff:6b:97:79:33:c2:f7:02:11:85:f9:f9:
24:e8:d7:10:e4:56:fc:89:56:bb:50:3d:4d:0a:d3:
c7:b8:de:09:36:5b:c5:5d:4e:d3:c1:01:01:2f:5b:
26:9d:5f:b3:4e:a7:bc:44:98:9b:48:be:20:14:58:
18:26:16:64:86:d2:6a:1b:96:56:5e:37:6f:84:47:
a5:5e:9d:0b:54:55:a8:da:ea:db:00:5c:b5:64:ad:
5a:04:0b:2e:41:99:67:f8:31:07:9c:1f:96:38:a5:
2f:90:a6:8d:19:f9:0e:3a:f2:b3:df:36:be:c2:ba:
11:0c:c6:01:79:2c:24:cf:3e:da:0e:e4:a1:5f:86:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8B:10:99:7B:24:74:CF:E9:54:3E:16:D0:70:C8:14:0B:15:1E:CA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/oIsQmXskdM_pVD4W0HDIFAsVHso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:2e:37:12:8b:18:68:81:22:da:8a:65:dd:b7:56:7b:c2:f1:
b6:f1:0b:2c:94:f9:a6:6a:c4:68:cd:74:aa:0a:4d:7c:a2:47:
9d:9b:f5:c5:aa:2a:c7:0e:d6:78:84:5e:4e:ef:7f:9e:eb:19:
8c:e1:81:ee:61:f8:c3:96:3a:be:a7:4d:1e:4d:81:3d:c1:27:
f3:06:bc:33:e5:71:f6:ae:52:80:97:18:b9:58:d1:88:fe:eb:
bf:1e:46:0a:90:f4:1c:c6:32:a1:34:8b:f7:6c:68:43:b9:66:
17:2c:72:d0:20:f4:a7:8d:01:63:81:f2:4b:01:35:99:3d:5e:
2f:50:80:f5:df:4a:c9:79:10:5a:42:6c:2c:63:e3:3c:e1:60:
19:a7:9d:a2:c8:69:ba:eb:b3:46:73:31:64:12:52:14:a2:a3:
3a:65:2b:29:eb:7d:1f:f1:f5:7f:80:e2:46:9d:cb:64:86:4e:
16:04:b4:8c:98:19:c6:9a:4a:dc:37:b8:a9:d9:36:23:5b:5b:
c1:09:93:f7:2b:ef:6c:01:16:bd:55:c0:af:82:6e:12:60:2b:
4c:1c:76:29:2e:1b:1f:d3:c1:35:41:7c:80:67:d7:be:cb:e0:
e4:90:38:65:54:84:83:26:b6:af:f0:74:37:a3:a1:b9:c3:36:
b2:7b:52:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 03:00:22 2025 by rpki-client