Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rKVqa1wkEf3HgMJkMdYFqI177oI.roa
File: rKVqa1wkEf3HgMJkMdYFqI177oI.roa (raw, json)
Hash identifier: NGW5Ce5HJ1pi5g4FfEPbXiFGRwQvvCahA4KXDjefWow=
Subject key identifier: AC:A5:6A:6B:5C:24:11:FD:C7:80:C2:64:31:D6:05:A8:8D:7B:EE:82
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7851EA1CE6D4EEF1D5C2B39D3870C425
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rKVqa1wkEf3HgMJkMdYFqI177oI.roa
Signing time: Sat 28 Oct 2023 22:05:16 +0000
ROA not before: Sat 28 Oct 2023 22:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:7851:7e1b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:78:51:ea:1c:e6:d4:ee:f1:d5:c2:b3:9d:38:70:c4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 22:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aca56a6b5c2411fdc780c26431d605a88d7bee82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:31:9b:0d:41:3a:a1:62:b8:99:97:8d:17:94:
11:66:69:df:68:99:94:c0:3d:fe:35:08:bb:77:d3:
d1:af:02:f0:d8:b5:0f:19:76:28:48:5a:72:89:e3:
62:c1:79:bb:9a:82:38:a2:ed:fa:8d:e3:1d:3d:d0:
d5:e6:4d:8b:f5:d1:0a:2f:5e:1f:f1:5b:79:07:90:
c3:59:b0:80:c5:e1:a2:02:15:7c:7d:14:cd:8d:c8:
46:bc:b2:10:64:34:a3:33:a0:46:01:e1:eb:c9:d9:
31:7d:a4:12:51:28:da:15:2f:50:ac:80:2b:47:c7:
6c:64:80:9e:7b:4d:22:c9:ae:ee:70:67:72:69:b0:
f3:5d:40:55:11:07:3a:d0:25:96:65:ad:b5:5d:5f:
2f:d8:28:8d:c3:ce:f7:de:96:50:fe:fc:cb:d7:6e:
8d:7a:cb:07:f3:9d:11:0d:6e:c2:e8:0a:73:25:e0:
5d:f7:3e:1b:d6:23:5f:5f:78:e1:94:da:c9:05:e8:
45:ea:59:4d:a6:74:e9:7b:cb:38:26:9f:59:b5:da:
cc:fa:27:e7:cf:74:39:52:15:c9:08:0a:44:0d:f3:
08:67:a3:01:27:f2:89:4e:b1:9f:b9:ab:a1:30:c0:
01:4d:91:fb:5f:f7:39:f6:3a:0d:2c:75:96:de:f8:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A5:6A:6B:5C:24:11:FD:C7:80:C2:64:31:D6:05:A8:8D:7B:EE:82
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rKVqa1wkEf3HgMJkMdYFqI177oI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:81:8f:af:1a:95:47:f3:53:f7:fe:84:ae:d4:de:1e:07:95:
09:40:c6:4a:b1:db:d9:18:b5:7f:ed:ce:a3:0a:c8:c0:c2:73:
b5:5e:a2:68:15:d2:26:81:08:57:40:53:07:9c:b0:46:82:3b:
b0:7b:16:69:a0:45:9b:2d:9d:0b:29:ce:b9:8a:26:96:ae:c7:
4c:21:47:f4:ba:8b:68:ee:d3:7b:ea:8d:05:65:ef:12:d3:9e:
44:2a:03:5d:6e:1e:93:ba:4b:26:87:d9:8c:4f:70:e9:45:ba:
2f:3f:f8:ce:c2:f6:d4:96:b3:81:0e:95:7e:d0:e5:30:b9:cd:
b1:da:a1:66:f5:2b:b9:f6:14:98:3d:e9:ef:2a:19:3f:7a:71:
ec:d3:94:2f:1b:a3:dd:1c:59:24:2b:a2:38:a9:29:49:5e:87:
24:ae:2b:99:8b:c3:60:76:01:aa:a0:1c:6f:43:56:a5:ec:74:
a6:61:c7:5e:2b:f8:a0:6a:1d:02:b8:26:da:b8:50:58:82:32:
08:ed:5e:5e:fe:ca:6c:97:ee:d8:0a:58:99:6b:5c:f7:5d:e1:
28:e0:c0:b4:33:55:19:20:6d:e8:c4:dd:87:62:e9:7c:ab:97:
4b:a8:71:61:2d:14:5a:a9:e1:fb:c5:a7:27:12:f0:18:c5:4a:
3f:a3:a4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:31:37 2025 by rpki-client