Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kT8popNOrXEO04JFFcJRRTRFd58.roa
File: kT8popNOrXEO04JFFcJRRTRFd58.roa (raw, json)
Hash identifier: scvxC5+ExnVGdgxcy0j/m4G2rg5G93iVVkn6zQEjd0s=
Subject key identifier: 91:3F:29:A2:93:4E:AD:71:0E:D3:82:45:15:C2:51:45:34:45:77:9F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDFC2B52B327FC38B775416FBF979B205
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kT8popNOrXEO04JFFcJRRTRFd58.roa
Signing time: Sat 18 Nov 2023 00:09:21 +0000
ROA not before: Sat 18 Nov 2023 00:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:dfc2:7893/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:df:c2:b5:2b:32:7f:c3:8b:77:54:16:fb:f9:79:b2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 00:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=913f29a2934ead710ed3824515c251453445779f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:94:32:c0:c6:13:52:a3:ae:0f:80:10:62:02:
6c:d0:e2:64:75:69:b4:e0:7b:ab:92:fb:09:88:af:
80:56:06:1a:a1:d4:90:74:4e:40:6d:e0:95:df:40:
8b:c2:66:4b:c5:9b:67:79:16:f4:4a:98:33:03:de:
da:10:0a:14:84:fe:07:35:ce:81:b5:0b:67:d9:5e:
23:51:e6:a2:17:26:f5:42:e9:d0:41:83:63:6c:82:
48:b3:d4:69:12:0e:0a:94:32:23:a9:b4:8c:9e:e6:
65:23:70:f8:83:58:fc:f2:ee:45:d8:32:30:60:54:
ef:5b:cd:7e:82:4e:96:9c:f3:cc:49:82:1b:10:ec:
bf:ff:bc:27:4d:42:4a:d5:96:d7:c8:da:96:46:27:
16:0b:50:09:68:03:7d:f0:b5:37:30:e6:c6:ad:03:
8b:37:8b:ea:c7:82:e2:b1:b1:03:be:30:5b:be:f2:
2c:46:30:06:7b:8e:18:e7:8c:c3:e4:70:f7:5a:f9:
df:c1:b0:26:48:4c:21:31:6e:af:c7:8c:b7:e8:ff:
55:42:5b:17:94:09:56:c3:74:70:3f:5a:16:d8:fb:
1b:2c:81:8d:98:61:4e:2d:af:8a:f1:22:cb:51:55:
83:8d:08:86:be:ec:cb:c5:ed:f7:14:3b:46:9f:df:
00:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3F:29:A2:93:4E:AD:71:0E:D3:82:45:15:C2:51:45:34:45:77:9F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kT8popNOrXEO04JFFcJRRTRFd58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:da:22:d4:2a:e5:a8:46:68:7d:93:9a:d2:4a:77:7c:f7:a8:
52:a7:6b:79:d3:a6:91:a8:dd:de:6f:bf:f9:f5:c6:6c:6e:2a:
60:f1:3d:ba:b2:ab:c1:12:d6:eb:8a:14:d5:53:ed:db:29:1e:
d5:0c:18:8f:77:b0:3c:2d:ee:5d:71:cf:ad:a5:4f:8d:84:56:
e7:85:6b:d0:11:60:82:99:17:14:7c:ad:e5:7b:ac:e5:14:55:
11:d5:32:19:54:3f:5c:12:f1:cf:97:0f:40:3c:b8:1c:26:24:
6b:04:0c:6d:2f:82:93:f0:b3:c8:90:4e:e9:c5:b3:37:93:df:
c8:f8:72:c6:8d:56:63:18:f0:60:44:0d:7a:89:95:d8:95:41:
47:f3:67:5d:c5:8b:9c:b2:5a:6f:79:2b:be:e3:65:c1:f8:f5:
65:4d:c1:34:67:dd:8f:7d:0f:9b:c6:8e:13:1f:80:a9:f7:c8:
c6:48:57:55:14:17:c7:a0:28:7d:34:62:3c:17:fa:e2:83:10:
50:da:ae:31:28:b0:4e:06:32:4c:df:74:a2:0b:fe:dd:c4:e6:
37:45:4d:79:4e:03:61:d8:e4:5c:86:5f:37:f8:0c:b7:23:09:
38:d9:a5:7e:57:d5:80:1e:0e:ce:5b:81:47:c5:aa:a6:ef:c9:
ef:b3:5c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 05:10:59 2025 by rpki-client