Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ok1W1FR8JsyPsnTeS_s-gVTcQZk.roa
File: ok1W1FR8JsyPsnTeS_s-gVTcQZk.roa (raw, json)
Hash identifier: gbrZ8Xw0NpxuCiFTMSGNMmsVWan/FOE/0aetxnWee+g=
Subject key identifier: A2:4D:56:D4:54:7C:26:CC:8F:B2:74:DE:4B:FB:3E:81:54:DC:41:99
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2246046EED9BC9BE89EB5FF45A370E71
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ok1W1FR8JsyPsnTeS_s-gVTcQZk.roa
Signing time: Thu 12 Oct 2023 05:04:55 +0000
ROA not before: Thu 12 Oct 2023 05:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:2245:eb1c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:22:46:04:6e:ed:9b:c9:be:89:eb:5f:f4:5a:37:0e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 12 05:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a24d56d4547c26cc8fb274de4bfb3e8154dc4199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:68:53:1c:0d:97:fc:6f:c4:79:13:fb:a9:
52:0b:be:85:9e:57:06:6c:32:54:0e:9a:80:4b:40:
c2:3e:79:73:48:2c:56:f4:1d:6a:70:b5:b0:6c:3f:
35:e0:bd:c8:0f:38:98:33:e1:d6:d3:fd:02:b1:4f:
57:5d:e7:c1:ee:37:fe:5b:55:75:5b:cd:40:8a:b5:
7f:e6:ea:00:cb:de:18:7f:1f:d4:7d:14:63:53:3e:
89:d1:83:08:a7:40:7f:7a:49:55:b9:f2:9d:57:e4:
59:01:5a:93:4a:b5:48:d0:69:4e:5f:ac:7a:70:eb:
f7:1b:98:f7:b6:2c:57:cf:a3:f1:e6:80:65:75:05:
ec:31:1e:7b:69:80:f7:1f:b0:60:d4:59:ae:53:82:
fa:46:87:f2:60:45:36:af:19:c2:03:8c:fe:64:c3:
c8:a0:b7:ad:cc:d5:9d:59:fd:98:ae:80:aa:1b:f4:
7d:ec:00:4c:8a:d3:21:32:6b:a8:a0:28:86:bd:82:
4f:60:1d:56:15:45:17:64:27:16:16:a9:21:64:07:
f8:33:6e:57:2b:cb:40:9c:48:01:ef:c7:49:7e:09:
68:42:89:aa:df:c0:95:97:ac:9d:d7:d2:b6:eb:9d:
60:3d:35:c1:1a:72:d7:cf:37:a3:c4:bc:79:b9:55:
70:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4D:56:D4:54:7C:26:CC:8F:B2:74:DE:4B:FB:3E:81:54:DC:41:99
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ok1W1FR8JsyPsnTeS_s-gVTcQZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:aa:e4:d8:28:8d:b7:24:45:3d:bd:ea:6d:b6:f2:14:ad:f9:
63:f6:0e:e8:50:63:f7:5c:cd:12:c0:44:fd:0a:31:28:43:02:
1e:0f:e2:df:a3:e9:2c:34:c9:d1:a0:1e:9f:37:ab:1c:3f:0b:
45:42:fc:1a:10:09:77:b9:a0:0d:5b:41:1e:2a:eb:57:8d:2e:
71:ed:d9:83:33:ef:6c:62:d0:6c:00:bb:9c:d9:d3:01:18:29:
a2:ad:26:c0:8d:b8:ff:0e:29:aa:de:5d:89:91:91:19:0d:67:
6f:10:42:52:74:05:41:7e:2e:73:a5:78:a5:6d:9d:83:42:dc:
10:5d:e3:91:90:77:17:77:04:3f:94:6b:85:e5:25:07:96:cf:
be:15:06:85:f0:d7:2e:d3:ba:d7:c7:ce:df:b0:fb:4c:ad:f2:
4f:26:96:86:07:59:75:61:62:74:4f:3a:bd:48:0c:bf:5f:33:
3e:f5:68:aa:7a:02:5a:1d:ff:44:69:ff:de:5f:43:32:2d:7b:
09:95:cd:bd:6d:b3:69:27:e5:c1:13:d3:1e:3f:3e:c0:bf:0a:
d1:63:e4:f4:9f:28:16:2f:e6:4e:06:17:77:e4:d0:c8:ac:00:
2a:18:73:03:c5:3e:dd:90:77:15:9f:0c:af:c6:6d:6d:3c:d0:
02:aa:d9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:00:20 2025 by rpki-client