Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sQCeikojfaFUOgoKLJF-LsbGNVA.roa
File: sQCeikojfaFUOgoKLJF-LsbGNVA.roa (raw, json)
Hash identifier: YKeSLa7KmM1+6AO2UIAr84Cpjh1iv5lrMOTNPlw49vk=
Subject key identifier: B1:00:9E:8A:4A:23:7D:A1:54:3A:0A:0A:2C:91:7E:2E:C6:C6:35:50
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACCA80285BA39472969C61DF3B09F96AB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sQCeikojfaFUOgoKLJF-LsbGNVA.roa
Signing time: Mon 25 Sep 2023 14:04:37 +0000
ROA not before: Mon 25 Sep 2023 14:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:cca7:bd43/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:a8:02:85:ba:39:47:29:69:c6:1d:f3:b0:9f:96:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 25 14:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1009e8a4a237da1543a0a0a2c917e2ec6c63550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:41:81:79:1c:4f:49:c2:75:31:42:c0:d0:
2c:a4:73:09:68:e0:71:28:af:00:13:5d:b6:a0:7b:
af:a9:db:ab:85:d5:1a:fb:ac:c0:03:02:f5:84:55:
3f:68:c2:28:81:1d:c2:50:51:4c:a8:74:d6:8f:6b:
56:46:89:05:cd:3f:13:4e:d2:37:dd:70:c6:89:94:
7b:88:f7:d6:44:c4:1a:cf:13:d9:1d:2e:bb:be:f8:
49:51:ae:69:66:13:e6:ad:40:bc:58:98:9b:84:35:
d0:96:57:8e:1c:56:65:92:5a:71:e8:aa:fc:ba:37:
ba:b8:0c:e4:7d:06:4a:d5:d7:88:36:42:c9:b7:3e:
4d:58:fc:e5:27:10:ad:5c:30:7e:4b:8d:d1:c1:ae:
a9:be:fd:89:34:b4:0f:bd:36:18:eb:84:c3:a7:be:
1f:fb:f9:70:26:01:68:57:a0:bb:96:28:14:a1:94:
7b:79:b0:35:46:c8:3b:bf:b8:0f:8a:d8:c5:83:ca:
fe:d4:19:a8:74:90:67:ce:b2:d0:99:cc:54:8a:fe:
3a:c6:5b:14:87:42:34:a7:af:de:25:9c:d4:94:24:
59:e3:61:93:99:ff:5f:5d:1b:f6:2d:f2:4c:c9:14:
e1:fa:f2:c4:33:ab:2a:99:3b:a4:0e:5e:97:fd:e9:
7d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:00:9E:8A:4A:23:7D:A1:54:3A:0A:0A:2C:91:7E:2E:C6:C6:35:50
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sQCeikojfaFUOgoKLJF-LsbGNVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:c6:86:25:6f:f9:0f:a4:fe:05:84:7a:b1:cf:6c:26:21:2b:
8a:ab:5b:a6:b9:1f:aa:53:81:b5:6e:85:cb:57:ad:e8:d5:41:
77:37:6b:e0:19:4a:65:5a:a1:8a:45:47:cd:81:d3:01:6d:a7:
d4:b4:79:14:db:47:15:10:a1:95:15:07:fb:40:23:a7:ef:e0:
e6:47:b9:2a:37:cf:68:59:97:54:23:8f:3d:75:5d:c9:d5:6f:
fe:50:12:d7:60:b5:d8:4b:19:12:52:db:85:7d:4a:1f:15:b2:
86:e5:f3:1c:0a:f0:8b:31:09:82:84:54:fb:a1:56:17:0e:30:
41:c0:d0:d2:91:5f:7f:f0:b0:61:4e:db:dc:90:94:b7:15:ce:
dd:ea:21:7d:d1:39:13:7f:ac:4b:f1:8a:7a:26:fa:fb:d3:e3:
f2:5d:18:d3:cb:b6:5c:05:f3:ec:65:d8:37:69:dd:c2:69:3f:
b3:55:9d:9f:54:3d:5d:72:d9:e1:42:ee:2e:c5:45:ba:27:dc:
7d:62:1f:85:6f:d9:47:07:bf:42:e5:25:bd:e9:0e:56:83:2f:
2c:24:cd:91:d6:51:08:70:cd:f4:1c:80:c6:e2:0d:ba:16:31:
9e:f9:a2:24:55:c1:b0:ce:61:de:d6:c0:a5:d8:8f:b1:11:2b:
dd:ff:f1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:58:43 2025 by rpki-client