Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xI5LXxb8BS70cMAoKb6r3HghqzU.roa
File: xI5LXxb8BS70cMAoKb6r3HghqzU.roa (raw, json)
Hash identifier: MiiSY33Trv11a90vG5+0EVsz440YhHSLPIRokbfxdcE=
Subject key identifier: C4:8E:4B:5F:16:FC:05:2E:F4:70:C0:28:29:BE:AB:DC:78:21:AB:35
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8D27899225766FD9F7C99D8883BB5C92
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xI5LXxb8BS70cMAoKb6r3HghqzU.roa
Signing time: Wed 01 Nov 2023 23:11:00 +0000
ROA not before: Wed 01 Nov 2023 23:11:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:8d21:7d16/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8d:27:89:92:25:76:6f:d9:f7:c9:9d:88:83:bb:5c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 23:11:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c48e4b5f16fc052ef470c02829beabdc7821ab35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:3e:fa:8d:c6:88:50:38:ba:f5:e5:cd:ad:
b9:9f:aa:f5:c9:89:6c:9f:ab:e6:2d:d7:4f:74:a6:
51:aa:48:9b:8e:f7:38:26:48:fe:7f:7b:7e:51:4d:
7c:b7:50:27:73:14:b2:c4:34:78:5c:25:f7:65:1c:
e7:fd:57:03:a4:3c:d3:fc:be:aa:d7:5f:91:ab:a2:
e5:dc:25:43:0e:48:fc:c1:06:e8:67:cf:52:82:9b:
9b:02:f7:1e:1c:a5:b8:c1:cd:c4:ff:c3:78:86:7e:
ad:a8:95:e5:44:37:50:cc:d4:e6:c0:b4:bf:83:8d:
89:87:88:ed:80:6a:15:b6:f6:d3:ee:43:8a:b2:6b:
3e:ce:31:70:f6:1a:da:fd:e6:94:d6:aa:eb:27:14:
fb:31:bd:49:06:ad:eb:9e:fb:04:ad:ea:ab:52:db:
ad:d5:88:86:78:75:69:0e:23:8f:db:23:d5:c8:6b:
d9:ec:57:d7:28:61:9a:b5:9c:b6:cc:7f:cb:6f:12:
37:a9:ed:bb:b5:92:0c:ed:08:93:07:fc:d7:84:ef:
88:21:02:5c:ab:bd:76:cf:60:1b:57:cf:9f:93:1b:
43:aa:20:3a:c7:a6:92:f0:d7:bf:fa:be:d8:02:11:
39:84:72:72:01:f6:5d:ce:1c:aa:3d:71:ee:f2:14:
56:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8E:4B:5F:16:FC:05:2E:F4:70:C0:28:29:BE:AB:DC:78:21:AB:35
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xI5LXxb8BS70cMAoKb6r3HghqzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:79:95:18:12:8e:a3:bd:45:f1:38:5f:ce:a6:04:50:e4:96:
37:1f:e4:dd:20:1b:44:bb:08:85:3a:d2:25:44:1d:e9:e0:63:
a7:bc:03:a6:2f:fd:34:38:c9:eb:38:3b:be:2f:72:9c:cd:41:
11:a3:72:9c:e3:cd:b3:a2:1e:72:9d:c7:5c:d7:8a:bf:fe:e4:
86:2c:ef:49:1c:08:12:f1:92:d4:fd:1b:f7:7d:12:68:34:29:
46:a5:f3:98:81:04:bc:ee:f9:16:08:46:d1:06:16:ff:90:3b:
a9:21:66:80:cf:86:64:fb:25:8c:b4:6e:76:29:ab:cf:a4:05:
9d:9c:e8:00:bc:e7:57:20:cd:48:c6:05:75:70:b8:c9:57:13:
8d:86:12:d6:a8:94:2f:e5:9f:da:d3:8b:9c:87:1c:ea:5e:2d:
2f:ad:a9:b3:80:85:53:d5:81:43:ed:32:d6:d6:84:15:20:2b:
d7:3e:5a:ac:22:fc:92:3e:81:6e:2f:9b:70:0f:ef:a0:9b:6c:
a5:47:4d:d1:a3:d6:cc:fa:e1:61:33:69:e4:48:25:17:0b:0c:
71:b2:73:67:88:d5:b2:13:1e:fe:f3:98:f0:97:04:c5:85:c5:
22:90:e3:f0:4a:7e:ca:d5:9c:fb:90:12:4d:53:5e:6b:87:e6:
25:89:d5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:46:44 2025 by rpki-client