Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/p46EkjBUgukJn6fUP6rfJ_kOLe4.roa
File: p46EkjBUgukJn6fUP6rfJ_kOLe4.roa (raw, json)
Hash identifier: x56LEZQIn2rwiwLAw8iKGnYcTmnCtOfee1W7K2ObypI=
Subject key identifier: A7:8E:84:92:30:54:82:E9:09:9F:A7:D4:3F:AA:DF:27:F9:0E:2D:EE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCA1295675435ABA24AF32791D153356F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/p46EkjBUgukJn6fUP6rfJ_kOLe4.roa
Signing time: Mon 13 Nov 2023 19:04:57 +0000
ROA not before: Mon 13 Nov 2023 19:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:ca12:aa5/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ca:12:95:67:54:35:ab:a2:4a:f3:27:91:d1:53:35:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 13 19:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a78e8492305482e9099fa7d43faadf27f90e2dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:59:41:1e:7c:d2:74:e5:ad:81:41:02:bc:
82:b8:58:98:e1:4d:05:2a:a7:bd:37:19:87:18:72:
c1:56:ad:47:e9:2e:88:72:6d:8c:e1:f2:ec:e7:78:
dd:a6:fc:9c:bf:84:2b:8f:43:0a:a4:b3:6e:5a:24:
ad:4c:af:15:8b:9c:7a:8b:ac:6d:a5:1e:3a:be:45:
6a:89:f7:20:bc:db:0a:d1:1e:74:46:83:b2:ee:bd:
7f:1a:ff:d1:e9:51:dd:bd:16:5a:fc:7a:d3:f0:e0:
c4:3b:14:37:e0:66:ad:ad:c5:c7:22:03:85:c9:f4:
e6:5c:65:1e:d7:1d:d0:cd:c7:23:fc:fb:e6:2c:17:
70:fc:7d:37:63:ea:37:1d:1f:f3:1d:63:be:e8:a6:
c9:9f:fb:c9:f3:24:69:7e:e9:e8:29:37:b1:3e:d7:
d6:bb:b8:4a:49:53:22:09:df:98:c1:7d:3e:33:b9:
39:3d:bd:42:c3:83:bc:25:bf:de:3c:f7:50:68:f3:
fb:bc:43:58:97:9a:ea:49:56:64:31:54:5f:24:a7:
f4:9c:82:75:8b:46:cb:fc:9d:ac:8c:8e:97:d5:57:
93:6f:87:46:32:6b:6c:b2:83:82:5b:2d:fb:61:af:
bb:cf:08:70:18:bb:a6:6c:3c:a8:c9:92:2d:3e:72:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8E:84:92:30:54:82:E9:09:9F:A7:D4:3F:AA:DF:27:F9:0E:2D:EE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/p46EkjBUgukJn6fUP6rfJ_kOLe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:57:51:6e:4b:a9:1a:9f:8d:d3:52:44:f9:90:81:05:ee:58:
ff:19:c0:84:f7:8d:d3:bb:19:74:a9:c0:f2:d1:d0:2f:b4:ea:
08:3c:72:ee:02:94:e7:47:33:9c:2c:66:7a:11:4b:54:58:a4:
da:62:37:c1:22:9d:cf:3c:f3:90:08:d6:18:56:c2:9a:38:26:
03:2b:47:98:2d:72:2f:f8:36:42:8d:d4:b5:a8:80:9a:cc:07:
33:fe:46:35:06:5f:24:62:88:ed:f2:69:9a:45:d4:c3:db:02:
19:fd:6c:94:15:b7:da:42:51:39:84:8c:66:b9:c9:3f:b0:cd:
30:37:0b:ea:5c:b3:71:26:71:ec:0a:80:75:43:7e:57:81:c1:
a2:02:0b:ea:e8:78:79:12:8b:2b:79:ae:a9:ad:c3:c5:82:89:
d0:70:ad:e9:cd:f3:ae:5c:29:06:6f:f8:c0:33:64:6b:3a:37:
b7:d0:6f:eb:1d:fc:61:a7:1d:1f:ce:a6:12:dc:29:22:d0:fa:
d4:6b:a1:8d:39:ca:4d:1a:c5:a7:c7:07:cd:43:2b:b7:93:3f:
f3:37:94:31:ef:2b:fb:20:64:00:6d:14:9b:74:58:86:d8:b6:
7a:d3:e2:cb:92:07:8f:ac:90:6e:c1:4a:75:40:23:d9:f8:5e:
32:8e:c8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:28:27 2025 by rpki-client