Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SYxxK3eJ7pecwLjt7-Zl7ALXpvw.roa
File: SYxxK3eJ7pecwLjt7-Zl7ALXpvw.roa (raw, json)
Hash identifier: WDklLdxYRujmp6lpELS/jvBgLvTbaKNmoZcV4SdpBQI=
Subject key identifier: 49:8C:71:2B:77:89:EE:97:9C:C0:B8:ED:EF:E6:65:EC:02:D7:A6:FC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFE366C46C176883284D1F24C395E2E22
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SYxxK3eJ7pecwLjt7-Zl7ALXpvw.roa
Signing time: Thu 23 Nov 2023 22:04:21 +0000
ROA not before: Thu 23 Nov 2023 22:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18b:fe36:2398/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fe:36:6c:46:c1:76:88:32:84:d1:f2:4c:39:5e:2e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 22:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=498c712b7789ee979cc0b8edefe665ec02d7a6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:c9:e3:68:f7:25:32:55:9b:8f:ac:2f:70:
1b:4f:28:7b:5b:1b:dc:eb:04:6f:a7:d9:64:11:30:
2d:93:f8:95:9d:bb:40:42:6b:e5:b1:bb:d1:0f:f9:
e6:a7:45:31:95:ad:ad:9c:29:d6:a9:c4:c3:25:07:
53:34:bd:eb:2c:ef:81:98:b1:46:72:16:dc:d3:63:
c9:6a:2c:67:07:04:f1:75:50:dc:78:c2:31:d3:ed:
10:7f:21:08:3b:6a:75:cb:be:15:bd:b1:26:00:c4:
1d:f5:95:8f:37:bc:c1:7e:c8:c4:42:56:46:ab:d2:
39:fd:f4:b1:4c:0e:86:7a:64:30:43:1b:4c:1a:4c:
ab:3f:11:59:c4:1f:2c:17:27:e1:c3:62:07:b5:e7:
8d:88:18:93:3a:6a:32:e8:9d:ca:85:d2:94:ab:70:
af:31:c9:9a:0f:85:69:cb:b7:12:be:65:37:76:68:
22:20:f4:3c:56:3a:68:2f:64:0b:2f:bb:dd:7a:a6:
fd:55:91:cf:b1:96:7a:16:d4:bb:6a:25:3b:96:09:
94:95:0b:0a:ce:08:a7:97:92:62:56:63:58:9b:cc:
d4:7b:7f:33:96:c4:2a:d3:aa:a2:6f:2f:9f:1a:53:
72:8b:d0:6a:3d:6d:f9:86:10:55:c6:07:0e:38:34:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8C:71:2B:77:89:EE:97:9C:C0:B8:ED:EF:E6:65:EC:02:D7:A6:FC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SYxxK3eJ7pecwLjt7-Zl7ALXpvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:ac:66:a6:b9:d4:0c:3d:9c:0b:50:cd:ab:8c:13:37:37:47:
c0:5c:7b:ed:0b:a8:d8:2f:c6:4c:37:8d:22:e2:ce:87:88:da:
b5:b4:01:a4:3e:ac:3c:ae:3e:0c:fd:85:10:1b:6a:32:6e:38:
af:01:2d:c5:07:58:45:07:f8:b9:62:a2:02:58:98:46:7c:3a:
85:ca:2f:20:fb:8a:16:e4:fb:a0:91:be:e6:13:67:9f:2e:89:
0a:89:1d:0e:a1:f3:dc:99:af:6f:a7:2f:8e:b4:d0:ad:e2:80:
e2:7b:0d:3d:cf:5b:26:fc:70:b4:53:9c:ed:38:ff:ec:95:6a:
63:3e:00:4e:fb:54:a4:77:89:b2:bb:81:56:2b:56:cb:e0:41:
d4:bf:2a:12:16:99:ce:df:7a:23:7c:05:33:b6:50:f1:e9:ad:
5a:a1:3f:4a:a0:99:93:4c:a1:b6:08:7a:48:89:e9:64:93:8d:
5a:ef:24:87:c4:87:65:f2:97:5f:b7:00:42:16:4a:a0:66:8d:
22:c7:a6:7d:c6:d4:d4:42:0f:1e:d7:00:98:9b:9f:b9:56:ad:
ad:e2:24:ed:41:6b:f8:9e:2d:50:e6:d5:30:a1:24:5b:fe:34:
4f:01:2b:67:f2:84:a5:de:08:62:21:89:79:31:31:1c:41:df:
d1:66:c8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:01:50 2025 by rpki-client