Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ww2bAID0cD9I42Y6l85F9_Ppiyk.roa
File: ww2bAID0cD9I42Y6l85F9_Ppiyk.roa (raw, json)
Hash identifier: 27AhoxNfGX85G5JVij23aWbyjtRCNWa2+0rmzY6e3HM=
Subject key identifier: C3:0D:9B:00:80:F4:70:3F:48:E3:66:3A:97:CE:45:F7:F3:E9:8B:29
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C59690DBF77667936BA11D2B46A3411F1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ww2bAID0cD9I42Y6l85F9_Ppiyk.roa
Signing time: Mon 11 Dec 2023 15:05:06 +0000
ROA not before: Mon 11 Dec 2023 15:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:5968:4ce9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:69:0d:bf:77:66:79:36:ba:11:d2:b4:6a:34:11:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 15:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c30d9b0080f4703f48e3663a97ce45f7f3e98b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:74:09:fa:0a:ff:67:7f:5b:be:fc:e0:fc:
19:65:e0:97:68:26:3b:5c:4c:24:77:78:89:55:94:
9d:b5:1f:7d:6f:e2:25:75:6a:38:63:62:c1:8f:bd:
26:25:b4:96:ca:aa:e9:6d:7d:3d:bd:30:8c:bd:00:
23:37:f5:25:35:27:49:d2:00:6d:56:a7:81:29:05:
66:dd:aa:1e:56:e1:e5:87:69:21:69:94:ea:d5:11:
21:c4:a6:7c:7a:44:2c:e5:24:01:82:f0:0d:8d:d5:
82:b4:70:c3:6d:2f:d7:b4:13:d8:bd:23:8c:a0:81:
4c:14:f3:96:de:71:2b:0c:58:6c:d2:8b:66:ab:a5:
78:05:e3:fd:4e:e7:5c:25:a6:e2:94:cd:ee:f7:f4:
68:15:0b:5a:13:c6:e5:a0:65:4e:22:f4:21:7d:19:
1a:d2:43:ed:4e:b6:5e:c6:bd:d4:2d:44:a8:75:39:
8b:05:d2:3a:47:2b:75:2e:44:f0:ae:fa:2a:67:19:
40:62:af:1e:91:22:ac:94:67:99:e6:80:64:95:43:
5e:ba:d3:06:2e:89:c0:39:13:32:23:05:d3:fa:d0:
72:64:48:51:ac:28:28:f4:0c:e4:cf:b2:d4:f4:36:
2a:d0:8a:4c:cc:d0:6a:33:0e:af:58:3e:40:0d:51:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0D:9B:00:80:F4:70:3F:48:E3:66:3A:97:CE:45:F7:F3:E9:8B:29
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ww2bAID0cD9I42Y6l85F9_Ppiyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:c3:6e:d8:ed:48:1c:39:88:54:25:d7:dd:9d:b2:69:5d:08:
5b:89:ed:24:6e:3c:4b:ae:25:fb:e1:53:d7:3a:e6:16:48:be:
07:76:52:b5:be:b8:c9:9b:9a:b8:45:9d:f9:82:a8:b3:e1:51:
f6:63:23:f4:c4:4b:6e:06:42:65:4f:d8:a6:ee:b9:ab:cc:e2:
e3:e4:bf:60:56:f2:dc:bc:cb:24:a1:e3:de:61:e5:61:9f:d5:
53:c1:0f:33:40:3a:f6:86:c4:ca:96:bb:74:17:a6:21:49:72:
6d:02:c0:9b:5b:57:54:6f:33:8a:76:a6:e4:e5:b6:c6:e2:ae:
a3:f5:35:ad:1d:7e:c1:be:d9:31:89:7d:f2:bb:ba:32:e3:de:
9a:2b:85:83:95:2b:eb:b5:28:ba:d6:e3:dd:3e:f7:24:07:77:
26:5c:65:c0:35:0e:3a:9c:a1:4c:df:dc:13:ab:56:ad:10:fa:
ea:48:f2:6c:a1:ad:2d:7c:e3:c6:97:cb:81:bc:3e:45:47:57:
2e:4a:28:92:73:6e:a7:5e:95:b8:6f:64:37:e8:70:44:cd:7f:
18:cb:b6:4e:ae:7c:8e:51:b3:35:1f:92:ba:09:38:93:bd:84:
d2:51:9d:10:30:a0:e4:8e:d4:d1:7a:9b:a4:36:2a:ac:a9:d6:
7e:03:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:51:14 2025 by rpki-client