Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BfxM3xCuBwwUBFk_ytEFdkdeJjY.roa
File: BfxM3xCuBwwUBFk_ytEFdkdeJjY.roa (raw, json)
Hash identifier: RYJANn+C/wQbFTYcrG++RgzlSBwxauSjZpg8FSjjkCc=
Subject key identifier: 05:FC:4C:DF:10:AE:07:0C:14:04:59:3F:CA:D1:05:76:47:5E:26:36
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C69B7DBF7807CE18FE63AB6F2C1A4554A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BfxM3xCuBwwUBFk_ytEFdkdeJjY.roa
Signing time: Thu 14 Dec 2023 19:05:06 +0000
ROA not before: Thu 14 Dec 2023 19:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:69b7:3ca/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:69:b7:db:f7:80:7c:e1:8f:e6:3a:b6:f2:c1:a4:55:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 19:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05fc4cdf10ae070c1404593fcad10576475e2636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ca:dc:46:8e:bf:85:e9:11:99:16:03:a6:91:
a7:d9:a1:dc:bb:53:47:ce:c0:a7:3c:88:22:35:57:
db:80:3f:5a:37:e2:e0:bf:fc:05:43:e9:09:45:6a:
74:4e:cd:ad:e6:9c:e2:73:1d:21:2f:1c:a0:8d:01:
71:a9:11:b5:f9:32:d1:12:97:c5:0b:a9:21:31:f4:
bb:b1:c1:0e:a9:b7:1b:81:c6:60:b2:d9:23:94:9a:
7e:a0:ce:b9:1f:ab:a5:b6:33:6b:bc:71:c0:3a:b0:
04:67:f6:38:02:25:15:1b:da:2d:8b:f2:c9:8b:71:
4e:b3:50:36:b6:9b:77:82:49:85:14:60:f1:8f:88:
9e:6d:03:70:dd:5e:60:0f:ed:8e:df:5f:b4:b2:7a:
fa:ec:7f:33:47:48:76:11:03:d5:a1:3e:1f:68:77:
40:40:4f:b4:b1:4b:5c:b9:25:af:2e:e0:7f:f5:0a:
43:73:57:5e:f5:45:4b:37:b7:c2:6b:5f:f0:2b:fa:
ca:8c:5b:6e:06:b1:e3:33:85:3a:da:17:4d:9a:38:
df:b1:56:5f:db:97:ed:96:5b:29:46:b9:c7:cc:e1:
b5:2f:7a:7a:4e:8b:f1:95:b8:b6:09:97:be:63:d9:
80:61:01:09:e1:d0:ce:6e:db:aa:90:68:47:8c:e4:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FC:4C:DF:10:AE:07:0C:14:04:59:3F:CA:D1:05:76:47:5E:26:36
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BfxM3xCuBwwUBFk_ytEFdkdeJjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:22:a7:d5:75:04:af:c5:59:a6:0f:8e:c5:1a:89:8f:20:e4:
d7:ad:d9:c2:7a:61:d0:2d:72:e3:3b:a5:01:27:69:14:8b:64:
18:6e:17:f5:91:cc:22:ce:13:e8:cd:e9:c6:34:8a:ce:72:26:
e8:a0:8c:5d:fe:b1:23:0b:35:27:86:c5:c0:e0:ef:32:9f:27:
08:c1:54:be:47:ef:22:95:b5:a5:a1:9c:42:9e:49:17:67:c4:
53:5a:a4:25:b9:ac:ec:cd:ae:3b:e4:42:ea:46:51:4f:ee:30:
47:93:d8:22:70:18:0e:47:0c:b8:81:01:f8:37:6d:bd:c5:78:
8e:f6:e2:ef:a2:6c:c8:26:8b:1c:8b:68:3b:55:51:10:96:2e:
bf:79:c6:47:e6:f4:08:53:55:3b:15:ca:04:31:b7:eb:d5:e4:
6b:e8:d3:e0:b5:bb:84:2a:94:61:e9:a1:b8:be:0a:d4:98:99:
5b:90:b1:07:70:7f:59:b5:be:3c:93:1e:72:10:7e:04:70:5b:
51:9b:b8:61:51:85:09:c4:01:ec:2d:19:0c:c5:8f:ef:44:39:
71:7f:e8:1f:08:4c:49:ec:02:34:3d:01:1f:f2:d9:58:57:24:
27:89:9f:c0:49:a2:27:20:8e:92:db:ee:81:c6:a8:ab:f0:62:
fc:8c:88:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:05:57 2025 by rpki-client