Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pNMkQUhtzvt4k6AbqPgC5uP_p_U.roa
File: pNMkQUhtzvt4k6AbqPgC5uP_p_U.roa (raw, json)
Hash identifier: C61eklyGWoqXbdJKDGSAdVzA6vNNKPT0HQ18B+u4/gA=
Subject key identifier: A4:D3:24:41:48:6D:CE:FB:78:93:A0:1B:A8:F8:02:E6:E3:FF:A7:F5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B29C89F2F3E96F46A58F08D59BFE672DB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pNMkQUhtzvt4k6AbqPgC5uP_p_U.roa
Signing time: Fri 13 Oct 2023 16:04:55 +0000
ROA not before: Fri 13 Oct 2023 16:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:29c8:ec/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:29:c8:9f:2f:3e:96:f4:6a:58:f0:8d:59:bf:e6:72:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 16:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4d32441486dcefb7893a01ba8f802e6e3ffa7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:90:2d:80:1d:5e:43:d8:96:fc:a8:aa:fd:31:
80:7e:c0:87:0b:35:a4:33:aa:bd:5f:7f:6a:9a:10:
d6:fe:7c:0b:f9:d9:c8:8e:a4:0f:9f:08:84:5f:c9:
be:3b:de:c5:0b:11:e8:ae:7f:1c:f9:a1:e4:dd:b0:
14:4d:05:38:77:f5:46:4a:8a:d4:aa:e2:59:bb:93:
cc:25:2d:8d:87:6b:87:5a:5b:23:b8:57:bc:b2:c9:
59:2a:66:e7:ea:b3:4d:f0:0a:1b:ba:bb:72:70:cf:
88:25:cd:96:f3:88:7d:a2:47:f5:a6:af:ed:c6:61:
3f:6c:68:47:58:62:cb:56:f6:cd:50:37:6d:30:cf:
a2:e7:9e:a3:d6:00:ff:68:a6:a7:75:64:1a:24:24:
98:3c:09:53:56:da:76:34:bb:94:09:80:c3:4e:41:
2e:0c:db:98:73:18:98:6c:87:5e:b3:d2:4d:a5:bb:
21:f4:7c:1c:c7:ef:54:a3:f8:46:3a:23:fb:34:84:
20:ea:4f:41:22:29:4f:50:38:52:0e:bd:49:cf:67:
bb:c0:be:58:59:34:c2:79:5a:e5:98:ac:19:5a:de:
55:ca:25:7f:78:86:f9:aa:7e:70:12:a8:f4:37:d0:
76:bf:7f:70:ba:81:2f:a4:72:51:50:f4:8b:17:28:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D3:24:41:48:6D:CE:FB:78:93:A0:1B:A8:F8:02:E6:E3:FF:A7:F5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pNMkQUhtzvt4k6AbqPgC5uP_p_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:95:66:3e:d8:e2:e5:5c:74:99:19:07:3d:49:48:86:a9:83:
f1:08:c8:48:44:a1:23:81:77:71:e0:20:74:6b:15:ef:82:6c:
da:f5:af:af:fb:46:33:61:6f:f7:07:fe:2b:1a:aa:8d:97:c7:
5d:2c:db:ec:bc:16:43:ee:80:14:ca:1c:21:99:73:7a:cf:bf:
f4:8d:1b:fe:f6:5a:ad:fc:81:d8:42:ab:61:09:fa:68:ba:a3:
5f:f7:19:b0:5d:75:6a:e6:f4:ca:08:70:89:a9:5d:95:e4:da:
32:f6:14:ca:af:aa:1c:aa:22:7f:72:12:d3:d7:5d:72:e7:61:
30:c6:54:91:ef:27:d2:0e:31:1d:92:e5:7b:e4:b8:f4:ca:1d:
71:e9:d8:cb:de:44:45:ce:ca:b5:cf:1c:80:98:1c:ba:c2:78:
f2:e0:ff:66:78:03:61:ae:85:68:f3:1c:7c:88:56:e3:0a:3f:
d0:fd:5f:7c:34:d9:5a:21:73:9e:bf:f0:6b:f8:85:c3:4f:ca:
0a:94:83:16:6f:20:bc:93:09:a0:a9:26:5e:85:e1:5d:fd:f9:
bb:0d:b7:5e:be:bb:c3:d8:a0:18:e1:f8:8f:29:b5:1d:0e:2c:
42:60:5d:e3:37:71:d7:12:ca:e5:dc:fe:72:68:3c:a6:ef:6c:
01:22:0d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:43:20 2025 by rpki-client