Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hgNxK5FIQK4kJzpvm4IYXB-DzrE.roa
File: hgNxK5FIQK4kJzpvm4IYXB-DzrE.roa (raw, json)
Hash identifier: X7pFFF+qjTY+OQVLWNhchKWVbJS2zXA/69za99bLbDk=
Subject key identifier: 86:03:71:2B:91:48:40:AE:24:27:3A:6F:9B:82:18:5C:1F:83:CE:B1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7E883AFD57D1E834C0BCD340F153CB96
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hgNxK5FIQK4kJzpvm4IYXB-DzrE.roa
Signing time: Mon 18 Dec 2023 20:05:06 +0000
ROA not before: Mon 18 Dec 2023 20:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:7e87:6ee9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7e:88:3a:fd:57:d1:e8:34:c0:bc:d3:40:f1:53:cb:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 18 20:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8603712b914840ae24273a6f9b82185c1f83ceb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ab:b2:6f:93:b0:b4:1c:dd:d2:fd:31:f1:7d:
2c:04:c2:0b:d1:a9:da:36:36:c0:34:8f:e9:a8:41:
7d:e3:43:9d:fb:25:6f:ed:55:61:47:4c:e6:ed:76:
59:1c:1b:3a:b4:95:86:3e:72:65:37:c5:c5:eb:2b:
ad:63:78:2a:54:13:7f:3d:39:c0:19:ea:e0:df:4e:
ad:b8:d1:60:3c:21:a8:5f:6c:96:1c:34:27:bb:6f:
8f:88:1e:11:3f:0a:68:53:7d:c9:15:d1:47:03:9f:
b6:19:ed:be:b8:c3:de:45:76:3f:44:98:95:9a:08:
df:51:7c:0f:f7:43:c9:18:e6:04:8a:b7:0f:49:01:
5f:a5:43:f2:5b:d1:48:82:13:3d:99:d8:6e:90:f3:
46:93:53:97:3a:87:2a:fd:7a:c6:df:9f:20:a9:5c:
2f:90:c2:09:e7:6d:c7:be:1f:5a:36:91:ca:8c:04:
98:f2:48:05:42:17:c6:a2:51:fb:45:66:66:5a:64:
93:4a:da:c3:24:69:93:08:9f:8a:1e:68:b3:f1:d9:
fd:78:40:3b:a9:75:0a:21:88:41:92:a7:84:ac:14:
a7:81:8e:b6:75:38:ff:9d:9b:d7:42:6e:27:93:d7:
28:49:57:98:b3:e3:b0:c9:74:f6:0e:01:a1:1e:92:
39:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:03:71:2B:91:48:40:AE:24:27:3A:6F:9B:82:18:5C:1F:83:CE:B1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/hgNxK5FIQK4kJzpvm4IYXB-DzrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:24:ec:d4:09:78:6e:58:e7:ac:16:bf:cb:13:cb:97:c8:8f:
6f:30:96:35:ad:e2:29:6a:84:4e:3d:5d:31:85:77:47:78:54:
78:6b:1a:72:07:be:ef:2d:e0:64:71:2f:c7:5c:e5:77:8a:dc:
3b:eb:93:49:1d:e0:2b:74:aa:06:80:55:e6:bc:b8:a5:88:54:
6c:78:ce:84:2f:79:7b:c8:da:ca:e8:d1:54:90:7b:eb:48:35:
eb:32:22:a9:76:18:71:88:92:d6:43:5a:65:09:46:c3:ec:16:
ba:4a:d6:c9:0b:41:64:ca:c3:d2:c6:dd:b0:e7:74:3f:52:f3:
e9:62:8c:fb:cb:24:90:63:36:14:29:aa:77:fb:76:4d:c9:f3:
55:21:4c:43:b8:29:ba:fa:07:75:49:46:73:16:57:1c:d7:c7:
ea:19:57:a2:dd:b0:4f:36:69:f7:1c:15:6a:a8:6c:1d:a1:b7:
06:53:01:05:64:1d:a8:f0:32:ab:26:8b:dd:57:e6:fe:02:6b:
d1:27:53:f3:f8:16:39:b1:74:ae:4d:09:c5:78:be:32:fc:68:
39:e6:77:ae:7e:28:ce:44:05:fd:9e:70:10:bf:ce:52:bd:57:
bd:11:cb:81:51:31:8a:12:b6:45:1b:c3:1a:dc:0f:df:8f:2b:
84:ba:0a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 21:56:02 2025 by rpki-client