Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rVS4575dOCMX7Cd4aFzrbbOJkdg.roa
File: rVS4575dOCMX7Cd4aFzrbbOJkdg.roa (raw, json)
Hash identifier: yFtnla/icRpLo7rGnIIosA9QvWYRSoYWoXJ3dgB472s=
Subject key identifier: AD:54:B8:E7:BE:5D:38:23:17:EC:27:78:68:5C:EB:6D:B3:89:91:D8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0C2BDFC49A3C53CC37145D89949F3A3F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rVS4575dOCMX7Cd4aFzrbbOJkdg.roa
Signing time: Sat 07 Oct 2023 22:04:43 +0000
ROA not before: Sat 07 Oct 2023 22:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:c2b:79b3/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0c:2b:df:c4:9a:3c:53:cc:37:14:5d:89:94:9f:3a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 22:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad54b8e7be5d382317ec2778685ceb6db38991d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:81:b6:7b:37:c0:6c:f9:ad:e6:89:26:a2:9b:
6f:53:38:c6:48:41:d6:f8:49:33:7d:23:e1:40:3f:
c9:3a:bc:e3:d2:94:d6:64:4b:83:22:0d:3f:a3:a4:
7b:fe:40:77:21:da:66:63:05:a6:8b:81:bb:56:7f:
ea:a3:27:cc:4c:88:bc:cc:36:88:41:b3:fe:ef:7b:
f5:21:a1:15:a4:e7:94:fe:9b:2c:f0:59:24:51:74:
42:fe:3f:5c:14:7e:ab:ea:51:9a:5b:b1:7c:bd:55:
11:52:31:f3:5b:46:72:ba:88:d1:c2:0c:d6:21:2b:
01:18:94:a3:b9:83:a6:fb:a0:06:d1:14:6f:c0:e7:
df:03:c3:1b:b6:d9:42:f8:6c:f7:2c:b0:2a:d5:d7:
1b:76:78:31:cb:f4:2a:5a:6c:34:07:e2:cf:63:0a:
22:3e:0f:47:ff:a5:cf:b3:a0:dd:e9:a5:ca:5a:88:
a2:c1:b2:49:96:37:63:c4:53:2e:48:e6:65:fd:9a:
45:57:a4:21:86:5a:3f:7d:5a:57:d5:ab:09:8e:91:
4e:bc:2e:e7:40:74:82:c5:af:25:7d:5c:16:0c:f2:
3b:44:c9:3e:a3:54:4c:1d:4f:12:4f:fe:42:67:df:
f5:42:91:8a:83:2f:3a:24:9d:b6:c5:9b:d3:df:8a:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:54:B8:E7:BE:5D:38:23:17:EC:27:78:68:5C:EB:6D:B3:89:91:D8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rVS4575dOCMX7Cd4aFzrbbOJkdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:d6:9a:36:d4:ee:e5:7a:41:a7:fb:c6:5b:43:2a:7c:cc:32:
ea:9d:75:b5:ac:ed:0d:1a:5f:2d:e3:8f:0b:bd:23:48:58:b6:
0d:27:cc:27:61:aa:86:cf:a3:8d:98:04:b7:ca:dd:72:b8:25:
81:f4:93:d4:e5:65:84:da:98:7f:51:b4:0b:1a:dd:90:90:40:
7d:2e:ec:81:dd:58:97:f9:5e:5b:7f:b5:35:a3:28:97:4d:ad:
28:29:ac:75:85:0b:d6:18:a1:42:86:27:ae:55:ae:19:4a:70:
43:1e:3d:5a:fd:b1:4a:5d:c5:38:b2:ea:a8:03:7b:f2:68:2a:
31:e0:af:25:71:e1:fa:82:ca:0d:d6:87:e7:1d:29:b6:ec:16:
99:78:05:78:4a:8f:65:d6:e1:26:76:d4:4d:4b:3c:19:39:78:
21:f5:c8:e7:cc:85:b0:7b:0c:69:d0:41:81:69:a8:12:18:b6:
06:61:60:7d:3a:e2:b5:1f:e3:bd:11:f7:2e:d2:84:ca:e4:04:
4c:d3:18:2f:a9:36:e2:f1:a0:5b:75:28:98:80:44:f6:c0:3b:
4b:fd:a0:8b:46:8b:da:75:81:a0:d3:d8:70:b9:15:1a:8b:a3:
b8:68:68:51:e2:eb:b3:e3:9c:53:84:46:f1:d9:76:46:ae:eb:
ef:e6:ee:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:04:29 2025 by rpki-client