Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/z2vqmQ96wO7ha5e5o2402Q-fVOM.roa
File: z2vqmQ96wO7ha5e5o2402Q-fVOM.roa (raw, json)
Hash identifier: T65P6gWBCVwsFSc8BzKZODzhyG5CV1YahSMCaBsGueI=
Subject key identifier: CF:6B:EA:99:0F:7A:C0:EE:E1:6B:97:B9:A3:6E:34:D9:0F:9F:54:E3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C57B43F8E22EB75A83F6F096E72E3B7AF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/z2vqmQ96wO7ha5e5o2402Q-fVOM.roa
Signing time: Mon 11 Dec 2023 07:07:59 +0000
ROA not before: Mon 11 Dec 2023 07:07:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:57b0:ffe7/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:b4:3f:8e:22:eb:75:a8:3f:6f:09:6e:72:e3:b7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 07:07:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf6bea990f7ac0eee16b97b9a36e34d90f9f54e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:19:5b:85:5a:75:59:41:a2:a0:cd:b4:62:9c:
6a:35:26:75:6f:20:15:15:bb:34:dd:d7:9a:91:a1:
ad:7b:a2:c0:83:2a:47:b1:dd:c1:aa:2d:79:5d:a8:
9a:93:38:91:b5:b9:24:9c:6e:8d:bc:86:c1:cd:e9:
89:a7:85:3b:99:e4:d0:4d:fd:dc:f8:ea:29:dd:b1:
0f:b7:8a:ec:d9:41:72:38:61:13:2f:35:19:7f:07:
97:47:28:b8:74:3e:4f:f4:79:31:89:d0:12:2a:97:
7b:4c:ad:1f:f6:f5:74:6a:47:74:84:fc:85:f8:33:
68:ea:cb:7e:68:85:45:d8:cd:f4:f6:a2:6d:d1:30:
28:b2:91:54:1a:3a:27:00:bf:ce:1f:06:f6:15:b0:
80:1e:6f:4d:7f:82:90:86:e7:b2:f2:d1:0f:f0:21:
63:29:82:bb:53:43:c9:b1:0d:04:11:3e:68:1b:de:
23:04:76:44:38:a1:ad:f3:25:f9:b1:03:c9:1e:2a:
fb:e5:c8:a9:aa:b4:2c:7a:ae:b4:0e:d3:78:d0:b3:
e2:22:73:19:76:a1:d1:fd:e9:13:b1:ee:0c:3a:1e:
f0:17:9c:0f:90:f5:e1:cc:65:f6:e5:98:24:2c:1c:
33:06:1a:77:ae:42:54:61:a5:a5:64:55:62:01:34:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6B:EA:99:0F:7A:C0:EE:E1:6B:97:B9:A3:6E:34:D9:0F:9F:54:E3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/z2vqmQ96wO7ha5e5o2402Q-fVOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c4:72:22:f1:89:42:10:11:4c:2e:ab:e5:39:dd:27:9a:51:7a:
43:d7:8b:1c:83:ef:a3:db:f1:89:5c:2d:7b:6a:04:39:82:c6:
ad:56:e1:a1:f1:9f:36:a4:ac:96:28:69:81:1d:b3:3e:4e:c8:
dc:92:9a:f0:34:43:d7:12:ea:76:f9:bc:ed:72:db:5d:4f:e0:
6a:bf:c9:94:31:53:16:20:21:f4:87:19:25:81:58:0f:9f:dd:
1a:df:c6:14:c2:a0:93:18:c3:6a:d9:9b:fc:b1:c1:48:83:14:
c6:06:76:d0:b2:69:93:08:75:f4:56:6f:00:74:f2:2b:ba:01:
ab:55:78:88:7b:78:2b:ac:23:d4:32:48:c2:bb:56:13:bd:9d:
5b:13:09:3a:48:7b:c9:b2:32:a0:4b:8f:fd:59:92:ef:d3:26:
fb:f6:9e:2c:ea:1a:10:db:9d:98:f8:d3:8b:0f:b5:7c:18:a4:
db:1a:8b:67:8f:1c:2b:4b:07:c5:5e:63:21:f1:58:85:4e:06:
c5:2f:da:2c:ec:35:7a:0c:97:76:bb:7d:49:56:d1:55:cf:fe:
83:cf:73:c1:1d:ce:de:5d:6b:dc:2a:5d:53:93:cd:9e:f3:ad:
99:b3:b9:89:8e:1d:39:72:49:8e:c3:fb:6c:43:59:13:4b:5c:
2b:0b:04:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:44:33 2025 by rpki-client