Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zAJe_mrLRmtRPaOciIEs2qGPGv4.roa
File: zAJe_mrLRmtRPaOciIEs2qGPGv4.roa (raw, json)
Hash identifier: 205+Nu9aDtTsGKCPPV3MIsGA7p8NEURO1OlNzMgyRTw=
Subject key identifier: CC:02:5E:FE:6A:CB:46:6B:51:3D:A3:9C:88:81:2C:DA:A1:8F:1A:FE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE2C0180417FD971D7B9EBBC43A772173
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zAJe_mrLRmtRPaOciIEs2qGPGv4.roa
Signing time: Sat 18 Nov 2023 14:05:21 +0000
ROA not before: Sat 18 Nov 2023 14:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:e2bf:2c5a/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e2:c0:18:04:17:fd:97:1d:7b:9e:bb:c4:3a:77:21:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 14:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc025efe6acb466b513da39c88812cdaa18f1afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b6:cf:a2:e8:a4:a7:d0:60:b9:5f:93:8c:b5:
c0:0e:67:c7:da:44:4c:31:27:67:d3:87:8d:64:98:
03:43:32:41:1b:af:a8:16:11:e6:bb:73:86:6b:a4:
bf:80:b7:8a:64:49:df:8e:cb:a1:53:d5:24:c4:2a:
68:bd:db:e7:98:b0:73:1d:d0:13:db:a0:c0:6e:23:
fa:5f:28:7c:d5:1c:00:61:9f:1e:8f:2e:66:b8:3c:
fb:0c:87:0c:f8:2e:37:81:c0:98:7e:6a:e5:cf:f1:
73:36:7d:17:34:a7:b8:01:a5:2f:db:e8:b2:30:36:
d5:3e:dc:1a:78:65:d4:db:f8:13:59:bf:86:cc:c0:
73:c9:37:cf:1a:e5:96:13:a8:54:b3:44:d0:01:a5:
41:69:a8:ac:8b:95:25:b5:cd:0f:de:07:78:9f:41:
04:f6:3d:b8:75:18:54:c0:e2:81:d9:ad:0f:2b:47:
f3:1b:d6:93:04:f0:8a:44:25:b4:35:7e:b2:da:37:
e1:5f:3d:f2:06:e8:1f:58:29:10:18:77:52:e0:56:
65:57:dd:a3:33:8f:ef:87:a5:50:93:c0:b7:86:d6:
00:37:1b:36:66:0b:26:3c:a2:09:e1:d3:31:fd:66:
e2:48:9c:8b:e0:2f:66:20:48:d9:07:ba:1d:5a:46:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:02:5E:FE:6A:CB:46:6B:51:3D:A3:9C:88:81:2C:DA:A1:8F:1A:FE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zAJe_mrLRmtRPaOciIEs2qGPGv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:20:f8:32:81:5d:20:1f:b4:65:21:ea:9a:d9:35:f5:44:26:
a0:d6:e3:e7:74:6d:62:49:34:49:8c:1b:f0:cb:f5:16:97:ae:
da:88:44:43:2d:5b:61:a7:b9:81:77:28:c4:d3:10:e8:59:a4:
f9:93:11:95:82:d6:3a:bb:10:2a:44:7a:43:e6:bf:f3:40:2d:
a2:ef:2d:a4:1d:b5:00:3d:90:2d:38:0c:3a:fd:cd:d8:a3:eb:
87:ee:d5:32:90:93:38:f5:31:14:3d:da:50:36:75:35:c4:ee:
1b:2c:2f:78:0b:b1:d0:78:9c:cb:e6:4c:22:04:1a:84:4f:36:
a8:90:0f:5d:69:c6:71:ad:e5:f8:84:87:6d:cc:73:d6:48:fd:
8d:a2:70:9c:74:21:f5:0c:e0:8b:c3:cd:c2:b6:1f:82:f6:14:
4c:9f:fa:e1:6c:b7:84:0e:73:20:a0:69:19:6a:a3:03:fd:50:
c3:10:1b:44:6e:54:5e:5c:e3:42:35:83:82:bd:bb:cd:56:6e:
5f:13:9b:f9:d0:cb:43:21:b4:03:04:79:40:05:7b:8b:e7:56:
c5:86:b3:0c:19:d8:f1:5a:e0:26:97:e0:3e:3d:1b:55:38:09:
a9:fa:9a:6c:11:d4:69:62:3a:c5:35:67:a8:16:54:44:8a:be:
3a:fe:5f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:38:49 2025 by rpki-client