Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xxCVhywuC6_1L888BFPbaxzg1bw.roa
File: xxCVhywuC6_1L888BFPbaxzg1bw.roa (raw, json)
Hash identifier: UQNdyYIdsOG0iQKJXSOE+/G3EyjFAsiUrorpGnZ5MLM=
Subject key identifier: C7:10:95:87:2C:2E:0B:AF:F5:2F:CF:3C:04:53:DB:6B:1C:E0:D5:BC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4EB12C6F5FB8CDD607BDD0B131867346
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xxCVhywuC6_1L888BFPbaxzg1bw.roa
Signing time: Fri 20 Oct 2023 20:05:15 +0000
ROA not before: Fri 20 Oct 2023 20:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:4eb0:48ec/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4e:b1:2c:6f:5f:b8:cd:d6:07:bd:d0:b1:31:86:73:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 20 20:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c71095872c2e0baff52fcf3c0453db6b1ce0d5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:03:9d:44:15:53:75:34:f7:09:b5:cc:f5:8c:
3d:a8:a1:19:63:0c:4e:e3:5e:38:2f:5f:74:e7:9d:
64:8d:27:f2:b5:71:46:b7:fd:cf:eb:9f:1a:a0:89:
dd:33:72:b8:9a:14:34:ad:11:c0:cc:fa:fd:4e:f3:
3e:73:50:f8:6c:8d:08:4e:fc:e4:33:99:eb:37:18:
bc:bd:c3:b1:40:27:38:9e:0f:c8:26:9d:4f:41:a1:
d1:34:aa:33:30:1c:5e:e6:63:9b:85:bc:ef:15:9b:
d1:ae:9c:b0:7c:74:a7:74:a3:74:58:72:27:d5:ab:
f1:50:bd:e6:40:15:b1:cb:e7:33:90:b2:ea:7c:9e:
f3:84:87:5a:38:a1:71:88:8f:81:82:d9:11:ce:5e:
c0:7f:ac:ac:6e:69:60:26:ef:c9:49:a1:4e:45:cb:
60:0f:61:07:42:7b:a5:0e:4f:56:27:4d:55:3c:20:
00:62:c6:f3:23:6f:39:8c:6c:3e:56:e7:93:f6:6e:
6e:36:b8:41:ca:f6:ff:e9:f2:62:c5:5d:b5:0e:be:
4c:35:88:a0:fd:a8:44:88:68:17:e8:dd:49:ff:20:
9d:e0:a0:03:30:47:7d:18:5f:0c:cb:1e:f5:9d:5c:
0d:55:4e:54:00:b8:54:0a:4c:07:2e:d7:4e:99:7d:
84:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:10:95:87:2C:2E:0B:AF:F5:2F:CF:3C:04:53:DB:6B:1C:E0:D5:BC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xxCVhywuC6_1L888BFPbaxzg1bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:83:d7:33:d7:e8:c4:fa:ba:1c:7d:8d:ae:20:94:34:52:77:
cd:7f:32:06:92:ff:21:5b:9d:9a:5a:64:99:14:08:01:97:79:
f6:d5:5d:7a:a0:fc:8b:99:c4:c8:72:56:82:70:63:8e:08:bc:
a5:c9:75:e6:63:16:81:c2:b8:11:c1:dc:76:7b:c3:d5:07:7b:
ce:e5:3b:37:98:9b:57:c9:6f:b4:0e:8a:f4:98:3a:67:42:5d:
67:e9:8b:fe:87:27:03:81:e0:9e:ce:78:81:86:b9:0d:1c:ca:
de:3a:8d:b2:e5:34:9a:ac:37:f5:3c:f3:ba:26:63:51:eb:54:
bf:90:45:2e:12:fe:34:d1:e9:80:a5:08:6c:a1:bb:93:85:85:
78:bd:1d:8f:cd:15:2b:8f:7f:ad:87:78:51:58:c5:9a:85:78:
fb:fb:fa:32:40:89:6a:bf:22:98:d3:66:72:0f:d3:1b:e1:62:
9d:b7:e5:4d:f5:d9:ff:29:9e:cf:33:2a:c7:75:3d:55:9a:a1:
6f:b8:d2:89:5a:16:a3:00:bd:1e:03:95:43:b9:7c:db:b2:44:
48:52:60:c9:68:19:6e:aa:6b:80:1c:9e:c4:8b:d7:7e:03:c6:
b6:5c:5c:e0:ad:09:80:ce:1c:36:2b:ba:84:43:85:59:70:24:
83:e4:20:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:36:08 2025 by rpki-client