Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xDLnv0sQeQxr9Z9sZ-aiqsiDhGM.roa
File: xDLnv0sQeQxr9Z9sZ-aiqsiDhGM.roa (raw, json)
Hash identifier: sdZn0/Z5plVUd2miVDD5vqY1cVXeeUUTxdLntOdx/ns=
Subject key identifier: C4:32:E7:BF:4B:10:79:0C:6B:F5:9F:6C:67:E6:A2:AA:C8:83:84:63
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0515277D5EF07A42AE60FF82420E8ADF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xDLnv0sQeQxr9Z9sZ-aiqsiDhGM.roa
Signing time: Sat 25 Nov 2023 06:05:21 +0000
ROA not before: Sat 25 Nov 2023 06:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:514:3c06/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:05:15:27:7d:5e:f0:7a:42:ae:60:ff:82:42:0e:8a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 06:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c432e7bf4b10790c6bf59f6c67e6a2aac8838463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:32:d4:0c:00:4a:36:27:fa:17:21:38:4e:fb:
22:ba:f8:8b:2c:6c:38:e5:f4:ad:16:16:98:3c:60:
80:61:6c:e4:51:cd:47:99:f0:2a:28:16:b3:9c:3e:
23:31:d2:8e:30:83:11:3e:6b:11:16:0b:83:26:03:
40:ca:7d:36:2a:db:c0:17:ab:d2:e5:17:f8:9b:8a:
9c:66:36:03:e6:0f:3d:ff:b2:11:70:30:f9:ca:7a:
8b:0a:b9:52:c1:a3:db:d9:42:68:49:83:a6:ee:ff:
f6:09:7e:61:01:94:b8:a1:24:1a:5f:b7:af:11:9e:
dd:d0:d1:43:0f:39:a9:44:86:e6:43:b3:08:02:bf:
00:4f:24:81:56:55:ca:ad:eb:97:c0:f2:18:39:7b:
3a:c9:3a:0f:05:5b:82:1d:f5:bd:b9:87:f8:80:4f:
56:51:2a:5d:00:bb:a0:91:5c:2c:9c:19:f0:f1:cd:
17:38:3e:16:77:5f:fe:86:9f:01:12:f0:f5:1f:44:
65:ab:14:1a:db:50:4d:f4:06:f4:36:00:64:0b:8e:
1d:4d:9a:5a:17:c8:a6:9a:aa:f0:5b:1d:28:c8:07:
59:03:a2:2c:30:f8:8b:64:8d:12:00:a5:f3:c5:c0:
eb:ec:57:2d:94:03:01:41:f7:5d:25:08:f1:d5:b7:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:32:E7:BF:4B:10:79:0C:6B:F5:9F:6C:67:E6:A2:AA:C8:83:84:63
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xDLnv0sQeQxr9Z9sZ-aiqsiDhGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:68:bf:b8:be:03:59:a1:ce:a9:60:98:b4:f7:99:15:d5:25:
e2:b7:57:45:a3:74:ca:96:64:af:f6:2f:cc:79:31:8a:d1:39:
8f:87:77:55:62:c4:8f:b5:85:ae:bc:00:55:83:80:a5:2e:f3:
2b:93:ab:79:2b:a7:11:44:3a:59:7b:72:ab:cd:e1:c0:c7:69:
da:dc:f2:57:16:30:9b:1d:ce:11:12:29:a2:fe:6e:eb:c6:e6:
69:76:b6:76:72:e0:36:e9:1a:bd:fd:78:0b:0a:50:4d:70:a8:
e2:9c:82:bb:31:ae:30:9a:ed:40:d8:e3:c7:a0:7d:f1:36:a8:
0b:78:73:7f:09:00:f7:1c:8e:2f:5c:c4:e9:bf:0d:c9:a6:8b:
fb:f3:9c:83:dd:33:bd:b4:d7:f1:0b:0f:d7:d3:45:ce:d9:32:
72:26:e7:43:a9:e3:70:fa:e9:79:92:c3:1e:14:08:eb:28:bb:
9e:d5:61:c9:94:53:50:82:6f:83:b2:58:c4:e2:3c:77:1b:50:
b7:2e:e3:d1:cb:58:a1:1f:13:2b:13:7f:bf:ae:39:2d:d9:1f:
7a:ba:7d:f9:7f:15:5f:34:77:69:c9:2b:ec:34:4b:28:83:1a:
b6:c2:21:c0:3f:ed:31:42:28:9e:dc:44:e3:0c:79:eb:4b:1f:
ac:34:e1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:45:29 2025 by rpki-client