Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/z7705DD5YKpbF0lsMEQipHuzXRY.roa
File: z7705DD5YKpbF0lsMEQipHuzXRY.roa (raw, json)
Hash identifier: juXcY+l5H8dtQWvmrliatPl/buoFwF1cbsZd98tOb1o=
Subject key identifier: CF:BE:F4:E4:30:F9:60:AA:5B:17:49:6C:30:44:22:A4:7B:B3:5D:16
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6B04269260452DB987821E318E0C404F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/z7705DD5YKpbF0lsMEQipHuzXRY.roa
Signing time: Thu 26 Oct 2023 08:05:15 +0000
ROA not before: Thu 26 Oct 2023 08:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:6b03:7175/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:04:26:92:60:45:2d:b9:87:82:1e:31:8e:0c:40:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 08:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfbef4e430f960aa5b17496c304422a47bb35d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:9a:1a:35:ea:4f:e5:8b:e5:10:df:df:90:
35:4c:c1:21:d2:d3:a2:f1:db:a5:a1:ed:64:53:d2:
59:75:25:49:c3:8d:3c:fb:df:41:1e:54:7a:32:0d:
9a:e3:a1:5d:76:16:ea:ad:3a:2a:5d:d7:b8:71:e3:
dd:86:b3:44:b4:44:dc:24:cc:65:d1:48:3f:ea:2a:
2e:8d:37:19:0c:ac:82:e8:5c:11:ba:8a:10:9c:23:
80:c3:07:ae:d4:4f:16:2e:a2:11:47:a0:db:48:8f:
ef:a0:92:6d:8d:f0:a9:95:f4:c6:4c:e3:6b:f4:68:
8e:04:4e:73:8d:7d:08:13:9a:4b:03:61:0c:33:0e:
11:a0:ad:9e:d2:0f:8e:ae:a4:ee:17:83:ee:fd:39:
59:ef:b0:f3:bb:f1:0e:88:93:9c:3c:ae:6a:23:db:
e8:ff:49:66:ab:b4:ed:e0:89:07:6f:e6:8d:ed:e2:
5d:22:2a:da:dc:77:31:f2:89:a4:40:4c:a1:05:73:
ef:f7:8b:25:5d:6e:27:d0:84:87:c2:f0:48:70:b7:
8b:51:cb:8c:4c:61:71:07:5f:6a:36:88:f5:ae:26:
da:df:44:86:a7:31:c1:ad:a5:42:4f:e5:42:2f:a7:
82:83:c7:b4:18:b7:17:ac:91:f3:4e:fc:56:14:93:
25:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BE:F4:E4:30:F9:60:AA:5B:17:49:6C:30:44:22:A4:7B:B3:5D:16
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/z7705DD5YKpbF0lsMEQipHuzXRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:4d:e3:c9:51:ca:43:ef:0a:17:49:37:c1:9b:55:6a:75:7f:
77:d9:a9:ab:44:46:4b:b6:31:52:b2:57:79:9b:1d:3e:7e:41:
d6:31:6c:07:13:ef:2f:54:3d:6e:93:d0:05:74:b7:65:69:cc:
73:19:b4:ac:d9:bb:3c:ba:b0:89:ea:9a:32:85:31:36:35:e9:
4f:99:1a:d5:a0:73:2c:83:09:8f:de:2e:ac:77:ea:a2:79:18:
7a:bc:c3:f3:6f:31:65:d8:db:bb:6b:75:6c:ad:9f:33:e6:0e:
47:4a:c1:74:be:f8:35:7c:09:4b:ae:b3:92:15:b0:4c:0a:f9:
c0:4a:45:23:d7:c0:c3:83:bd:e8:c7:69:3d:95:4e:fc:62:8b:
44:76:5d:46:0c:af:75:68:2a:32:24:7d:bd:0e:53:ce:89:db:
6a:bc:d6:a6:09:73:3d:35:32:43:10:86:a1:b5:23:0a:e2:38:
f4:c6:88:19:9d:df:1a:98:0f:e2:3a:48:20:0d:54:fd:3c:68:
d8:15:a1:99:48:1a:46:51:2c:cd:c6:57:31:ae:a4:19:21:ef:
11:22:dd:24:b1:c7:b8:e4:c3:0b:35:4e:9f:d5:4b:16:0a:e1:
b5:fa:cf:2c:8e:cb:53:86:a1:45:7a:0c:74:c5:c1:a2:36:b9:
82:33:32:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:09:23 2025 by rpki-client