Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/A0hGBLR8vrN8N4U5Aq1IleFivJs.roa
File: A0hGBLR8vrN8N4U5Aq1IleFivJs.roa (raw, json)
Hash identifier: cioqz5T/cwy8ZlgvvRltV+RFE0CMMZ/VhVGSolPmxng=
Subject key identifier: 03:48:46:04:B4:7C:BE:B3:7C:37:85:39:02:AD:48:95:E1:62:BC:9B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB6FCD3DE965133BDED39282E19B43ED6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/A0hGBLR8vrN8N4U5Aq1IleFivJs.roa
Signing time: Thu 21 Sep 2023 09:05:37 +0000
ROA not before: Thu 21 Sep 2023 09:05:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:b6fc:215/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:fc:d3:de:96:51:33:bd:ed:39:28:2e:19:b4:3e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 09:05:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03484604b47cbeb37c37853902ad4895e162bc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:b2:6c:34:7c:7a:6a:54:28:8b:83:fb:01:
c7:27:82:8a:bf:c3:c6:82:66:c3:53:a9:ec:5d:21:
e9:cf:00:9e:a2:19:5a:58:24:d5:ab:90:95:e7:48:
48:e2:63:0f:ff:f3:16:fa:c0:e7:4b:ba:d5:3b:43:
ed:79:72:5c:31:ff:5c:ef:b6:ee:a2:65:28:b0:27:
ce:92:8c:f0:73:4c:b5:d0:e3:1c:9d:5d:2e:c8:1a:
af:dc:f6:0d:0a:6d:00:1a:10:a4:cb:c4:ca:33:9a:
db:52:e8:21:f7:bc:fa:96:8e:d1:83:33:58:1e:d6:
fc:f7:43:db:5b:62:6e:58:a7:00:fd:f9:d4:91:5b:
b6:e9:47:ab:5e:d5:30:97:e3:e0:c5:48:c3:f6:30:
e0:f7:76:23:12:c1:b2:f2:6a:35:d7:57:93:74:1c:
9f:d2:4c:44:fc:24:61:98:d3:f5:ef:b7:f3:9a:08:
41:7c:28:f4:bd:c7:50:64:d7:72:bc:fa:2a:81:60:
73:12:07:f8:ba:8a:c7:2c:30:de:1e:89:ad:d3:c0:
8c:25:50:14:af:02:97:d8:6e:23:16:91:83:2d:98:
3f:eb:08:90:d4:bc:ec:8a:b8:c8:58:08:a3:b1:0a:
73:12:e3:29:7a:bd:48:04:e3:f6:4b:5d:d2:4c:5f:
a9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:48:46:04:B4:7C:BE:B3:7C:37:85:39:02:AD:48:95:E1:62:BC:9B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/A0hGBLR8vrN8N4U5Aq1IleFivJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:1e:b2:54:83:5b:93:0c:72:2e:fb:3e:c5:0e:33:13:54:93:
87:5b:03:11:ab:b9:95:32:86:d6:74:04:02:10:6e:9f:f2:9b:
69:aa:be:6c:27:6c:64:4b:75:40:fa:fd:06:08:50:6f:a5:db:
53:b0:58:19:b8:f1:a2:84:9b:66:b7:41:3c:8f:9f:fa:07:94:
7d:44:50:1a:ae:0a:6f:69:94:66:83:07:e8:dd:e6:a3:10:6c:
ff:54:bc:bd:eb:b5:38:8a:77:5d:e7:e1:a1:88:1d:fa:29:07:
aa:06:a2:84:b2:44:da:d1:15:2a:98:4c:0d:de:ea:be:65:4e:
fa:c4:73:d2:62:b9:d1:4a:08:b8:cc:55:c8:cc:11:b7:d1:7a:
e1:9e:78:7b:7a:17:32:ef:ea:56:f7:d8:ab:f6:08:2c:d1:52:
dd:32:22:b9:1d:25:82:45:f0:04:c8:99:d0:45:82:13:f4:69:
4b:cf:60:db:a9:b1:09:4d:48:c8:c6:34:a0:50:e5:a5:97:87:
b4:14:c7:7c:3e:54:80:a6:71:f1:ad:92:7c:5f:ce:55:8d:e1:
e1:1b:ec:3a:ff:6c:c3:eb:88:b8:29:23:0a:83:51:2e:a3:5a:
12:2f:81:1b:77:85:97:21:c4:21:31:96:d6:02:4c:b6:c6:ac:
0f:d1:18:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 21:52:08 2025 by rpki-client