Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vH2WZFpiY8AkKmuS-Ay7yuJhw7I.roa
File: vH2WZFpiY8AkKmuS-Ay7yuJhw7I.roa (raw, json)
Hash identifier: XGEhyztRN8nDTI1iKoPwWv1MQRnQ9uhmrgwYIq8I6c4=
Subject key identifier: BC:7D:96:64:5A:62:63:C0:24:2A:6B:92:F8:0C:BB:CA:E2:61:C3:B2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2F22D7122B6CC10C1F54530164BF2047
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vH2WZFpiY8AkKmuS-Ay7yuJhw7I.roa
Signing time: Sun 03 Dec 2023 10:04:21 +0000
ROA not before: Sun 03 Dec 2023 10:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:2f22:ae4f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2f:22:d7:12:2b:6c:c1:0c:1f:54:53:01:64:bf:20:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 10:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc7d96645a6263c0242a6b92f80cbbcae261c3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:fb:4c:77:a2:d4:5d:5e:e7:0d:c0:e9:44:
29:ca:49:9b:aa:82:a7:33:ab:cd:b1:84:16:12:fc:
ea:22:d7:f2:29:ed:23:c8:43:51:96:72:a5:9f:ac:
08:f7:56:66:e8:b3:7e:a6:cc:01:a2:a9:05:bd:37:
c0:ad:7a:38:7c:b1:23:13:05:23:da:9d:bc:8f:aa:
cd:51:f1:ed:87:2c:49:c8:28:3c:ee:4a:60:b1:3c:
e1:76:e5:da:40:db:53:9e:f5:cf:47:e1:b5:eb:ad:
bc:e1:a1:e4:31:2f:82:b2:96:47:1b:49:40:31:f3:
f2:f7:60:89:ed:14:1d:fe:d8:24:cf:0d:02:26:24:
29:8f:a5:ec:ae:6a:d5:14:70:57:f9:66:ca:8b:6f:
25:21:f2:bd:e5:94:e7:a2:57:a9:f1:90:1d:a5:1f:
8e:f5:bc:80:fe:e8:85:48:84:bb:3b:03:aa:08:db:
c0:79:da:01:72:f2:e0:4f:0f:d4:10:27:bb:33:ad:
8d:0e:7a:df:4b:cb:4e:05:b1:23:92:ab:b6:d6:af:
f4:52:41:e0:c5:c9:03:d7:a9:e6:45:04:b8:c4:6d:
91:a9:e9:2a:b8:1b:99:36:d8:66:aa:ed:36:b2:9c:
92:43:9a:6a:a5:45:27:8e:b2:6d:c7:a3:bf:c3:f7:
6f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7D:96:64:5A:62:63:C0:24:2A:6B:92:F8:0C:BB:CA:E2:61:C3:B2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vH2WZFpiY8AkKmuS-Ay7yuJhw7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d2:bf:b1:36:23:45:1e:24:7c:90:7d:54:ba:05:6e:b5:65:ed:
c2:ef:73:17:5d:ad:61:1d:a2:ca:a3:d9:69:aa:9f:ba:fe:e9:
54:7e:48:7d:ae:4c:e0:c6:e2:fc:ed:7d:b3:f0:7f:8c:3c:88:
e1:63:17:7d:b8:d6:2f:2d:15:ca:8a:79:a2:cc:00:b5:06:11:
7d:ef:4e:3b:46:4b:ec:ec:f9:bd:de:5f:c6:0c:7c:00:06:db:
28:75:fb:f2:fa:c2:60:fc:6c:cf:f9:9e:ac:d6:97:80:06:5e:
58:cc:d4:42:d6:34:74:a9:2f:2e:31:92:98:ee:93:67:d8:5f:
a1:89:e8:49:20:38:3c:4b:ca:11:b7:11:d6:eb:85:bf:d8:5b:
8c:fd:c9:da:ee:23:0e:d3:6e:0c:ff:e9:11:37:78:14:98:ac:
91:e3:60:85:32:f8:f1:e5:b3:57:b2:2c:dd:03:71:3f:d6:b8:
85:aa:0a:12:d3:8a:e1:6f:51:aa:20:e9:1d:5e:18:a1:0b:bf:
f2:00:fe:49:55:ab:5b:04:1a:2c:44:0b:cc:e8:fe:a9:af:52:
af:94:e6:97:cb:fd:11:7c:80:e3:c3:e8:e5:c8:e3:8b:8e:d6:
8e:37:57:5d:07:b7:f6:2e:6b:d7:d0:01:ae:9f:a2:68:fa:a8:
73:a4:b3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 03:17:25 2025 by rpki-client