Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IUCyjUkr7V_YUo12KS2tR5azGJc.roa
File: IUCyjUkr7V_YUo12KS2tR5azGJc.roa (raw, json)
Hash identifier: sgqJM95VSrVBCc2JO0p9oiEYuK9H1F46plD0sFHKP6M=
Subject key identifier: 21:40:B2:8D:49:2B:ED:5F:D8:52:8D:76:29:2D:AD:47:96:B3:18:97
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5112858B95C3FEAB989580439E8F68B8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IUCyjUkr7V_YUo12KS2tR5azGJc.roa
Signing time: Sat 21 Oct 2023 07:10:50 +0000
ROA not before: Sat 21 Oct 2023 07:10:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:510c:fe8e/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:51:12:85:8b:95:c3:fe:ab:98:95:80:43:9e:8f:68:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 07:10:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2140b28d492bed5fd8528d76292dad4796b31897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:47:63:12:5c:b2:01:2f:0e:27:4a:98:de:
9d:af:64:94:b7:df:91:07:f9:e8:73:cf:3f:bc:f4:
f5:76:c6:36:a2:6c:b4:30:3e:74:d5:8a:d8:2b:c2:
f0:16:de:45:29:4a:74:5a:d5:9e:af:c5:46:e1:f8:
df:29:47:a7:fb:63:91:d3:b1:67:b2:8e:19:1e:03:
0f:5b:79:ea:70:9a:63:30:5f:79:eb:9f:9c:88:aa:
a3:91:c7:2d:e1:27:e5:26:2b:4c:03:a7:5d:9d:15:
48:56:58:db:a8:06:9b:15:97:37:cf:c4:95:77:33:
b9:ae:a2:c2:2d:09:46:d4:ae:ec:19:c9:83:b1:42:
b4:64:e1:b3:01:b0:83:23:da:8c:6c:be:cb:67:9e:
8c:61:50:ab:43:8a:3c:9a:85:3c:a0:41:60:05:36:
24:60:d7:32:f2:de:e3:f8:f8:a0:b5:74:5c:0a:8a:
46:72:7e:11:7f:eb:2c:12:07:8b:46:8b:bf:89:67:
4e:2b:6a:e9:0e:98:bd:55:ab:9b:b0:63:5e:95:14:
7a:72:c6:ad:59:72:20:ef:6f:67:3c:18:d4:96:82:
94:68:ed:ab:2c:05:f9:9d:8d:b0:f6:d0:3b:3a:02:
4f:9e:e6:e5:d3:53:b1:f9:b3:bb:9f:4a:f5:f6:f3:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:40:B2:8D:49:2B:ED:5F:D8:52:8D:76:29:2D:AD:47:96:B3:18:97
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IUCyjUkr7V_YUo12KS2tR5azGJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:c8:84:b0:6c:c4:26:14:e2:08:ea:13:74:ea:d9:68:77:57:
13:b4:6e:ec:81:00:75:d0:d2:45:c6:28:ce:36:ea:47:e6:91:
3f:b5:39:51:a6:7f:c0:0d:73:ff:75:e2:60:4a:42:76:b9:6d:
44:12:b5:ee:75:3d:65:2c:c3:b0:30:83:c9:ae:74:dd:a6:7b:
5f:98:a4:77:47:6d:f0:41:a0:d8:51:9d:ff:1f:0d:bc:c0:00:
ee:a8:51:81:1c:44:6b:cc:c3:59:be:a2:39:41:be:61:d5:40:
ca:e4:df:5b:55:d9:62:cf:37:08:bb:d8:52:23:3f:71:16:a7:
42:c9:88:21:28:5b:3e:f0:c5:76:8a:2d:ae:5c:22:6b:72:7d:
68:8b:2f:4d:1e:5c:45:ae:5d:e5:09:85:d1:cc:2f:eb:72:8f:
74:2f:70:38:85:9c:50:b4:fc:d2:00:93:24:ee:d0:cb:7b:d6:
5a:58:e5:86:94:9c:b3:13:ad:1e:db:7d:7e:e5:3a:ba:b5:cb:
fe:27:37:29:30:ce:bf:1c:05:98:7f:f9:39:38:83:28:94:17:
20:e0:d6:56:20:62:54:aa:64:4c:30:f8:7a:47:9c:df:1a:1b:
8c:5b:63:a3:03:ae:4d:be:aa:1a:48:74:db:25:b2:67:32:cc:
e0:17:a9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:06:20 2025 by rpki-client