Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sc6q4cMmuhobtti1iJ_2bHfJNyw.roa
File: sc6q4cMmuhobtti1iJ_2bHfJNyw.roa (raw, json)
Hash identifier: c0VNaHbd7w22BbEMr4meQFACwPPluhJxGldBJT5U7LQ=
Subject key identifier: B1:CE:AA:E1:C3:26:BA:1A:1B:B6:D8:B5:88:9F:F6:6C:77:C9:37:2C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BABD189600E4E1D8B272146F4A3CEEDB3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sc6q4cMmuhobtti1iJ_2bHfJNyw.roa
Signing time: Tue 07 Nov 2023 22:05:18 +0000
ROA not before: Tue 07 Nov 2023 22:05:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:abd0:abc5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ab:d1:89:60:0e:4e:1d:8b:27:21:46:f4:a3:ce:ed:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 7 22:05:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1ceaae1c326ba1a1bb6d8b5889ff66c77c9372c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ba:82:b8:ab:ae:0a:3d:cf:4f:a1:69:0c:cd:
d7:c8:59:f0:72:b7:20:2d:85:e9:af:ac:b7:21:d4:
e7:2d:42:0c:e4:60:71:0a:a7:ec:4b:03:26:78:0b:
df:01:82:53:e8:b9:94:a3:28:25:4c:98:8e:6e:68:
37:64:03:e0:1d:46:6d:47:7c:17:59:dd:37:c0:53:
e4:26:05:22:20:1f:11:0e:bd:98:fb:70:1b:fa:b8:
6c:e3:1b:8d:85:f2:12:0f:85:90:d2:1f:28:91:49:
71:6b:40:46:5a:a1:3d:b2:18:39:b8:40:fe:21:fe:
be:c4:8f:54:c8:7e:d0:66:ae:bb:49:90:27:e2:f9:
db:f6:34:af:c4:bf:a9:f8:6c:42:6f:4f:6e:fd:17:
4d:f4:62:5c:80:00:db:57:f2:98:87:91:4b:70:b9:
d3:a5:8e:03:85:68:00:ad:a8:5d:09:94:10:9b:42:
ef:dd:56:c1:5b:5b:e0:bb:00:78:4e:33:56:69:08:
4b:41:42:9c:62:4c:2e:01:34:28:33:ee:79:e5:96:
2c:0d:de:72:8e:86:5f:a1:b4:36:f0:f1:8a:74:aa:
22:dc:66:79:53:99:7f:c1:bf:1b:89:2b:e3:64:48:
f4:1a:25:81:e2:b4:4e:f9:40:89:95:99:39:87:c1:
3a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CE:AA:E1:C3:26:BA:1A:1B:B6:D8:B5:88:9F:F6:6C:77:C9:37:2C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sc6q4cMmuhobtti1iJ_2bHfJNyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:9f:a7:92:bc:17:4d:07:55:fd:05:63:60:b4:c7:b1:d7:60:
dc:cc:4c:88:1b:08:4d:4d:6e:32:60:42:6b:89:9e:9a:93:e7:
af:b9:cc:5f:2f:45:24:83:2f:f6:70:ed:02:17:34:f1:a1:d7:
b4:f1:5f:fd:e4:a8:5b:a9:b0:16:6d:fa:cb:ef:62:09:ce:ec:
d3:48:a0:d9:d7:e1:44:bc:a7:f2:aa:4e:df:81:e1:eb:ab:59:
d2:50:78:d0:90:ea:5a:f6:b7:bc:ec:37:83:87:c2:92:82:1c:
e3:df:cf:f9:1d:f7:15:4a:2e:fe:d3:ae:e9:e6:68:a9:4f:0f:
42:46:ac:80:52:a4:6b:d6:5b:5c:54:03:89:7d:cb:7e:6b:65:
6b:fc:c1:de:99:d5:97:10:1b:72:c7:69:56:37:96:0e:8f:9c:
06:92:df:27:2a:0c:59:bc:3a:97:bf:93:c2:07:21:bb:b2:fd:
38:6f:54:32:23:48:f7:69:96:8d:7a:2c:10:67:7d:6d:11:db:
ec:1c:44:2e:59:c5:0a:ba:61:85:3e:78:da:12:f8:9e:6b:e7:
df:c4:b4:36:a5:81:1c:7f:f7:ea:d6:f3:ad:9a:77:9a:6e:15:
8a:3d:af:37:f7:29:d4:87:f3:91:6d:3b:3c:df:11:14:8a:fc:
d6:9c:f8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 19:29:50 2025 by rpki-client