Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xmbH7ROeqApzFy9wLBiHGvBkFqA.roa
File: xmbH7ROeqApzFy9wLBiHGvBkFqA.roa (raw, json)
Hash identifier: q0vnv5cB7WvQCLPhU6M7YLE0zVEJLMHpuCxBBCawTTQ=
Subject key identifier: C6:66:C7:ED:13:9E:A8:0A:73:17:2F:70:2C:18:87:1A:F0:64:16:A0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD270EB3C0A3B8BF3F7E592895402FCC9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xmbH7ROeqApzFy9wLBiHGvBkFqA.roa
Signing time: Wed 15 Nov 2023 10:04:57 +0000
ROA not before: Wed 15 Nov 2023 10:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:d270:50b6/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:70:eb:3c:0a:3b:8b:f3:f7:e5:92:89:54:02:fc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 10:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c666c7ed139ea80a73172f702c18871af06416a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:4a:8b:28:a7:76:ae:14:cc:85:57:12:15:
f2:8a:41:56:29:91:4e:19:a9:a3:43:64:6a:fa:5e:
16:41:8e:96:63:09:75:bf:80:50:f0:bf:c8:8c:86:
80:d3:ad:d3:47:40:e5:95:62:00:48:a5:13:7e:76:
72:06:ab:17:62:ff:f1:97:8a:25:d1:13:a0:ad:1e:
ed:16:34:16:a0:f6:c5:2a:78:4c:6d:b2:ed:b8:89:
f4:56:b9:4c:a0:75:bb:cc:c5:74:5d:d3:d7:73:cd:
f6:9e:98:9b:ac:93:0b:8f:04:01:fb:da:00:6e:98:
ad:bd:1e:51:00:0f:be:2b:cc:d3:22:d4:2f:14:9a:
f6:32:09:95:db:bd:a8:36:bf:59:00:c3:86:b4:a1:
7b:14:b8:1e:0d:a2:c9:c6:ba:1b:8f:5e:d3:ed:60:
eb:79:97:96:5f:6f:69:95:f3:78:7c:19:6d:c0:9b:
77:c2:45:2c:6b:c3:1e:d2:9c:f5:63:99:98:c6:68:
cf:e7:9f:cf:b2:8e:ca:46:42:d5:87:6d:03:86:03:
87:e3:44:54:46:70:20:cf:dc:cd:a0:be:56:66:9b:
d3:88:01:9f:38:0b:d2:fa:18:4c:19:0b:4a:a7:00:
28:3d:4f:37:4e:25:6e:84:3d:4b:fb:fc:7b:ee:75:
2a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:66:C7:ED:13:9E:A8:0A:73:17:2F:70:2C:18:87:1A:F0:64:16:A0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xmbH7ROeqApzFy9wLBiHGvBkFqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:1f:b7:d7:b5:5c:c7:47:d2:ce:f4:03:d3:50:ca:a4:43:9c:
bf:a6:e6:a4:86:a0:d6:20:bc:d2:f3:14:32:a3:29:78:e3:fe:
b9:2e:c2:3c:9a:4f:22:cb:c3:ee:22:75:2a:21:37:5e:6e:b7:
46:68:a0:5c:48:1d:fe:f5:dc:78:e7:1a:a6:af:fa:eb:ad:e2:
e4:1b:74:b6:c4:b2:5e:c3:61:ea:ad:9b:f7:9c:c9:02:72:08:
e2:2b:fc:62:23:75:38:ec:30:21:93:1e:ab:49:07:31:82:99:
7c:b6:eb:74:ac:35:03:c9:ff:d6:c2:e6:49:c6:c7:e1:78:61:
81:de:ff:04:cf:f6:24:87:d2:c6:51:24:88:98:52:dc:6e:1f:
79:01:13:9f:2c:70:a7:9c:9f:f0:8b:c7:fc:3d:a6:77:60:9e:
41:c6:fc:6a:80:fe:52:78:94:42:40:83:88:40:d2:85:90:96:
51:7e:1f:bc:81:16:d4:87:42:31:84:27:1f:19:9f:86:ac:00:
56:80:c8:08:99:09:58:04:7d:45:8e:36:3d:c6:fd:f4:2a:c6:
c1:c9:fc:fc:79:a2:bf:f9:ed:36:75:73:64:91:73:aa:c9:71:
55:a2:43:45:5b:89:79:51:cb:42:26:08:29:07:23:68:f7:b4:
8d:70:2d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:20:44 2025 by rpki-client