Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dGWYsqvsh8DVFHvHyMSs9txAPUM.roa
File: dGWYsqvsh8DVFHvHyMSs9txAPUM.roa (raw, json)
Hash identifier: nuMF44A7o3XxKgaPjXYSDXB3/UwiqckUzDRcA/siW48=
Subject key identifier: 74:65:98:B2:AB:EC:87:C0:D5:14:7B:C7:C8:C4:AC:F6:DC:40:3D:43
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB19D4BC9B793F99FFBE4444ACDF76D0D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dGWYsqvsh8DVFHvHyMSs9txAPUM.roa
Signing time: Thu 09 Nov 2023 01:05:57 +0000
ROA not before: Thu 09 Nov 2023 01:05:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:b19c:a203/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b1:9d:4b:c9:b7:93:f9:9f:fb:e4:44:4a:cd:f7:6d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 01:05:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=746598b2abec87c0d5147bc7c8c4acf6dc403d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0e:0a:b8:d1:34:02:f0:64:3b:7f:3b:34:1d:
90:51:bf:6f:23:f1:df:f9:60:b5:6a:b9:b7:41:81:
f4:a1:90:00:4d:d6:04:95:d8:cf:5e:37:d8:d0:a3:
5f:c7:24:50:4d:df:fa:45:ce:e5:c7:3f:47:bc:05:
fb:f0:5e:37:2d:97:a6:f2:e9:12:aa:fd:f5:55:c7:
02:a7:d3:6e:6c:c7:ff:f9:c7:d5:50:c9:2a:2d:b3:
6b:87:61:60:b3:05:95:b4:13:79:db:c9:04:25:7a:
75:2a:58:07:2a:73:5a:4b:84:d3:12:7f:ff:54:82:
37:9d:b7:46:e1:37:06:1c:5f:5e:fc:41:a0:a0:f6:
4f:89:26:53:c3:48:93:49:f5:5c:c1:08:b2:e9:12:
3f:63:c3:a6:ab:e8:0b:3a:37:b0:87:2a:52:8f:e2:
8f:5e:04:fc:f3:4a:16:73:70:dc:66:c2:96:9f:bd:
e7:9a:92:2e:c7:45:77:f5:91:cf:5e:02:65:06:a8:
1f:30:14:97:f0:e5:8c:0d:67:90:1c:b3:e7:5b:04:
53:2c:25:fe:e5:2b:b8:f8:17:ea:41:3e:de:b7:23:
1e:34:e4:42:55:8c:59:dd:0b:33:30:41:ee:8a:ea:
7f:f1:ae:47:c8:95:19:02:a2:94:a5:c8:2d:9d:4b:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:65:98:B2:AB:EC:87:C0:D5:14:7B:C7:C8:C4:AC:F6:DC:40:3D:43
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dGWYsqvsh8DVFHvHyMSs9txAPUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:be:98:fc:97:25:0a:fb:53:66:ab:1e:61:8f:41:d4:bd:e8:
d8:f6:5b:d7:19:29:60:20:13:f3:94:13:67:34:98:53:cf:55:
8f:b3:65:12:4a:b6:10:90:59:72:8b:ba:e4:cb:5b:d2:8d:56:
15:47:15:6d:e4:cd:2b:e0:14:46:5e:31:76:7e:45:a0:25:69:
53:90:92:b1:95:b3:b5:5d:f1:0c:4b:ad:fc:39:31:3c:f9:97:
d0:3b:33:8a:06:8c:3d:99:5a:d4:f1:47:fb:9f:a6:da:8b:d3:
44:1b:a3:f4:13:b1:d0:44:bf:cf:1c:26:bc:f1:e6:df:1f:ca:
f1:13:8e:52:35:cf:36:c2:00:d3:83:04:34:62:04:19:c0:6d:
48:59:1e:15:cd:b6:f9:ce:8e:47:dc:f4:69:69:e2:a0:ca:ff:
c8:4f:f7:af:a5:e9:48:52:1a:69:72:07:65:05:20:55:b0:2d:
9f:7b:b9:29:9a:88:c4:0e:50:da:fe:6b:cc:2a:d1:90:a8:9f:
d5:96:c3:d7:25:6e:5c:3c:05:23:b2:64:7c:76:8b:c9:37:30:
7b:aa:62:96:cc:6b:83:3c:62:b6:d0:82:29:af:e4:e6:52:2c:
20:d7:e3:43:27:72:51:2e:a1:60:dd:ef:d6:5d:dc:a6:75:8a:
db:0b:2f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 21:58:43 2025 by rpki-client