Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tuRGRWdh6z2y7cnhoDZ9OJWoiUw.roa
File: tuRGRWdh6z2y7cnhoDZ9OJWoiUw.roa (raw, json)
Hash identifier: cityYmlYCWLhMLxd7dg0hyX8nO4FTppGFhTrnW3A1Mg=
Subject key identifier: B6:E4:46:45:67:61:EB:3D:B2:ED:C9:E1:A0:36:7D:38:95:A8:89:4C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFD94BD643992A46DDF9E9781A1C33E3A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tuRGRWdh6z2y7cnhoDZ9OJWoiUw.roa
Signing time: Thu 05 Oct 2023 02:04:57 +0000
ROA not before: Thu 05 Oct 2023 02:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:fd94:37c4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fd:94:bd:64:39:92:a4:6d:df:9e:97:81:a1:c3:3e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 5 02:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6e446456761eb3db2edc9e1a0367d3895a8894c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b1:e0:57:7b:67:8e:84:38:1e:18:e0:37:09:
5f:bf:ed:27:b9:9e:05:0e:bc:87:83:c0:dd:47:f3:
9f:4a:5b:7e:76:06:ad:88:11:34:84:b5:6b:7d:f8:
97:ad:02:47:51:1d:42:d7:e2:3d:1b:b7:96:db:46:
1d:c6:eb:cc:f7:bd:5c:72:72:17:f3:d0:46:f9:32:
f2:1d:39:5c:39:10:d8:f9:3b:d8:48:c8:73:84:19:
3c:9a:c5:95:88:db:81:e3:f2:df:ab:5c:4d:11:9f:
3f:dc:18:0f:c3:12:f4:35:0d:86:e8:8e:87:b1:52:
30:75:74:46:00:a6:01:fd:ca:a6:1a:12:78:b6:a2:
7b:09:32:90:ee:eb:bc:7f:56:b5:f0:dd:81:51:fe:
0a:5f:0c:13:77:ae:1e:9b:df:a4:09:6c:64:d1:d8:
43:4c:a8:e6:e6:7c:e5:8a:1d:54:9b:32:a8:a8:55:
32:ff:36:b1:cb:b1:d4:b8:2a:70:f0:92:de:17:a6:
04:4b:95:26:dc:9c:d9:5e:c7:7e:75:79:67:66:5a:
83:fd:98:21:be:ce:ac:72:f6:8d:d7:37:a5:50:8f:
5a:32:bd:ea:9c:9f:04:b2:b3:f3:3d:ba:2f:8f:43:
e4:19:b3:75:08:48:23:6e:87:28:cd:ea:11:0e:1a:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E4:46:45:67:61:EB:3D:B2:ED:C9:E1:A0:36:7D:38:95:A8:89:4C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tuRGRWdh6z2y7cnhoDZ9OJWoiUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:7b:8f:98:e6:0e:db:fd:e0:f2:28:53:9b:c8:5e:f9:84:25:
f3:94:c8:1f:7e:24:77:85:cb:7a:24:13:df:d9:40:07:ff:77:
6e:f6:09:17:a3:9c:9c:ec:f9:34:b3:71:8b:a5:0a:14:70:b4:
42:66:9e:5b:1e:e1:82:86:94:5c:ce:12:ed:ff:0a:fa:43:35:
20:c0:96:0a:fe:be:f7:cd:91:cf:29:26:bf:1d:cf:18:7a:a4:
0b:85:b2:d9:66:c3:2e:6f:08:09:a0:57:75:e6:a3:63:4c:ba:
5e:05:01:71:78:a5:9a:80:ea:aa:96:93:06:6a:c5:7a:20:95:
7d:4f:c7:1c:f6:f0:73:e3:45:48:69:7f:7c:63:be:73:06:3e:
db:8f:82:1c:0d:43:79:ae:92:38:86:0a:70:7c:ab:66:a9:ec:
7a:b2:ec:58:bb:3b:6c:9b:20:a4:34:2f:cc:09:a7:ce:07:a4:
40:39:b0:1a:99:af:d8:45:72:21:1f:26:83:ca:4d:ea:92:92:
43:4a:a6:5d:e8:c6:f5:5b:11:8c:ca:c9:35:fe:e2:f3:42:49:
d6:3b:03:19:64:c1:99:bd:94:de:d6:81:32:bd:f8:a2:c4:ae:
35:d6:80:a1:de:ca:3a:d8:de:55:49:4b:d9:05:b5:c0:eb:ca:
d0:b2:d1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:59:57 2025 by rpki-client