Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tU8KGHF7qQBX4rqxdK94HN4Uarg.roa
File: tU8KGHF7qQBX4rqxdK94HN4Uarg.roa (raw, json)
Hash identifier: Ha0ySuaf1iIsXVPjZ0YyQ9sLGWxWTvR2QtDczQwegwY=
Subject key identifier: B5:4F:0A:18:71:7B:A9:00:57:E2:BA:B1:74:AF:78:1C:DE:14:6A:B8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B59D99F191B81F80F9AF509D5A4E5F594
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tU8KGHF7qQBX4rqxdK94HN4Uarg.roa
Signing time: Mon 23 Oct 2023 00:05:16 +0000
ROA not before: Mon 23 Oct 2023 00:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:59d9:4b8b/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:59:d9:9f:19:1b:81:f8:0f:9a:f5:09:d5:a4:e5:f5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 00:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b54f0a18717ba90057e2bab174af781cde146ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e4:90:1e:a3:6b:4f:5c:0f:aa:ed:b6:d0:ec:
e2:d1:07:30:c7:7f:90:cd:59:99:d2:ae:ad:de:f8:
28:20:c0:2e:37:c4:91:45:bb:9e:c6:52:4a:9b:62:
f0:54:d8:01:1f:33:e1:f6:b6:f6:62:58:c2:1b:17:
b9:8e:11:1f:a7:82:6f:8e:1e:1f:d3:50:12:b4:4f:
4d:f7:4e:59:7c:8a:8a:ff:df:35:72:15:6d:16:fe:
fe:7c:66:86:70:ae:ec:d2:34:3d:92:bc:09:60:c6:
6c:09:92:b8:e9:8b:37:3b:63:0f:7a:3a:56:c4:0f:
01:dd:93:19:52:51:48:7e:f9:60:11:d0:1a:aa:84:
c2:6e:4b:b2:72:54:a8:7f:14:c3:a2:9e:9c:1b:52:
24:09:2a:83:2e:05:b3:62:9d:61:24:25:d2:f3:b7:
e7:47:43:d5:1a:76:78:60:54:6e:0e:20:43:aa:10:
98:54:35:3c:ff:97:f2:e5:0d:64:cf:b0:02:c8:5f:
3f:e5:56:56:ed:61:57:13:ec:93:13:03:cf:c5:20:
58:ee:41:ff:3f:08:8d:a0:b5:d1:e4:51:35:ee:b5:
6d:01:23:fe:6e:73:a2:0c:91:99:f2:ed:c8:ec:e1:
c6:c5:25:2a:d3:71:49:87:fc:55:63:9d:72:34:04:
58:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4F:0A:18:71:7B:A9:00:57:E2:BA:B1:74:AF:78:1C:DE:14:6A:B8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tU8KGHF7qQBX4rqxdK94HN4Uarg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:ed:01:41:dc:d1:65:61:92:1a:9b:af:54:12:71:cb:b1:92:
b8:33:0d:b4:68:d2:f1:95:c5:19:1e:d7:32:89:cb:39:5a:f7:
f3:a5:4b:19:3b:62:f2:57:4f:bd:14:b9:2f:99:01:00:81:40:
a2:e1:06:7e:9b:65:2c:22:17:52:ec:63:8b:14:5f:92:12:83:
4e:3b:77:d4:ab:38:58:24:e4:05:56:aa:4b:93:9f:50:df:de:
e8:67:b6:42:88:dc:72:fb:ce:47:e8:85:08:3f:b3:59:61:e8:
d7:07:19:da:83:45:16:91:33:a0:9e:8b:5d:e2:61:b8:8e:17:
27:e9:44:0b:ce:ff:b7:42:89:81:60:d7:eb:6d:5e:34:e7:0a:
d4:a6:4f:33:57:46:c1:a6:39:1c:75:e8:90:ea:ea:85:7d:e0:
5f:5e:02:1c:8b:6f:f7:00:47:b8:96:2d:ba:5a:de:cb:37:69:
c7:b3:23:e4:a5:1f:05:3d:23:0f:bf:0f:e5:26:b5:b0:db:95:
65:62:23:36:f3:29:ed:f4:cf:fc:ff:df:74:50:35:6f:b5:7a:
10:05:ce:b2:f6:aa:00:b1:25:26:e3:29:16:21:38:1f:cf:1d:
d4:36:a0:13:2a:0d:66:54:20:28:9a:68:d1:53:e4:02:49:7e:
76:30:b9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:58:57 2025 by rpki-client