Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tesrHI2tgYAvGoa9OE-wQylil_U.roa
File: tesrHI2tgYAvGoa9OE-wQylil_U.roa (raw, json)
Hash identifier: ZY3mAfNTRQqQHd5uBW9t8h9w9vDhLzDZRrSqN3quiY8=
Subject key identifier: B5:EB:2B:1C:8D:AD:81:80:2F:1A:86:BD:38:4F:B0:43:29:62:97:F5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD19530C53D82576E0C2BCC31C471BFE7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tesrHI2tgYAvGoa9OE-wQylil_U.roa
Signing time: Wed 15 Nov 2023 06:04:57 +0000
ROA not before: Wed 15 Nov 2023 06:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:d194:bc52/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d1:95:30:c5:3d:82:57:6e:0c:2b:cc:31:c4:71:bf:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 06:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5eb2b1c8dad81802f1a86bd384fb043296297f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7d:41:36:2e:f4:2d:e3:12:10:92:34:cd:22:
0f:ac:2d:a8:f6:54:d0:b4:51:15:ee:1a:7e:f8:7e:
10:33:3c:45:39:1c:ef:51:e7:25:bb:7b:53:45:55:
30:b1:6d:76:c7:c5:13:01:60:59:fa:38:32:84:51:
a0:5d:75:1d:be:1c:67:9a:e1:5b:58:91:8f:15:a6:
db:a0:5e:74:b7:83:79:50:e7:23:3b:2d:54:a7:2e:
d9:07:4f:78:2e:1b:34:b6:d4:0f:c3:49:54:e1:04:
95:93:da:99:fe:0f:b7:e9:cf:2a:99:89:47:b8:fb:
f8:ef:a0:0f:a2:7e:27:f4:5a:d9:13:cd:10:27:b2:
01:66:9e:ef:d5:1a:15:44:09:f0:90:26:2f:7f:aa:
60:6c:a5:f9:84:fd:72:8a:73:c9:08:09:94:dd:60:
7d:0e:22:cb:c9:39:dc:6d:12:d7:dc:d7:67:e4:89:
b2:25:2f:fe:f6:23:92:7e:46:bd:18:af:8f:88:1c:
3b:a9:b8:7b:22:2f:32:50:2d:fc:3e:22:a4:a2:16:
90:cf:b4:3e:f8:f0:4f:09:11:ed:3a:95:78:c7:01:
99:5f:8e:7e:a0:3b:53:16:8b:d9:ed:4e:48:98:1a:
05:b6:7e:0a:fc:9e:35:fb:b7:b3:e4:50:3c:2b:10:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EB:2B:1C:8D:AD:81:80:2F:1A:86:BD:38:4F:B0:43:29:62:97:F5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tesrHI2tgYAvGoa9OE-wQylil_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:0c:4c:4c:28:d6:e1:b1:33:3c:42:a6:de:e1:7d:30:ba:1c:
71:79:33:eb:61:a1:63:3f:89:8d:24:33:6d:f1:be:43:b6:d8:
85:c4:c8:c9:c5:ac:54:65:41:cd:03:ce:a1:64:e7:90:17:35:
d4:2b:a1:e4:f9:2b:c2:66:f3:78:ba:eb:d7:d3:3f:d8:ab:5c:
34:30:29:6b:12:af:62:6c:e9:5c:d4:6d:83:d6:56:85:0a:64:
a6:1b:c6:e5:07:91:2e:af:c0:c1:0f:11:e3:fe:7a:a5:4a:78:
f2:62:6a:42:95:d1:ca:82:69:5d:44:db:f1:d9:6d:31:b1:a8:
6e:1f:38:35:90:00:60:01:84:21:e2:21:4d:d5:c3:50:66:2d:
8b:f8:2d:52:55:33:02:6c:5e:1d:ac:74:bc:e5:ee:75:85:5f:
70:47:91:42:ad:eb:2c:71:93:c5:53:d2:66:db:fa:5e:d7:71:
e9:ff:8f:d1:c2:11:02:6d:14:3a:a6:8e:ae:a1:09:89:a7:3e:
aa:5f:ed:08:a6:0b:c1:49:c7:c7:dd:ad:3a:5e:ea:dd:69:60:
8c:d6:87:50:22:5b:14:44:d9:30:39:7d:3f:7a:1f:0a:b9:36:
ec:7c:27:47:b5:8e:1d:fb:96:da:33:77:95:07:20:c6:b4:b1:
62:43:d7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:36:14 2025 by rpki-client