Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m689DJatj783c2eGUG5q45Sz-ko.roa
File: m689DJatj783c2eGUG5q45Sz-ko.roa (raw, json)
Hash identifier: Pais+AUeRMvSFgR/2xVgbErARnQVCggAE6np6uzJ6D8=
Subject key identifier: 9B:AF:3D:0C:96:AD:8F:BF:37:73:67:86:50:6E:6A:E3:94:B3:FA:4A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF9EBCB83E8E66562069434D01964600F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m689DJatj783c2eGUG5q45Sz-ko.roa
Signing time: Thu 23 Nov 2023 02:04:21 +0000
ROA not before: Thu 23 Nov 2023 02:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:f9eb:c55d/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f9:eb:cb:83:e8:e6:65:62:06:94:34:d0:19:64:60:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 02:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9baf3d0c96ad8fbf37736786506e6ae394b3fa4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:96:2b:6a:24:5c:77:8d:fd:c2:fc:05:78:bd:
76:ea:d1:e1:5a:c9:4b:4d:fe:53:03:46:de:27:dd:
a3:c3:f0:fc:c8:41:b8:d9:23:c2:a9:8a:bc:1c:13:
9b:02:3f:a1:c7:3c:e7:21:1d:7b:12:33:54:3f:77:
26:cb:97:21:3d:3a:60:27:10:74:6f:00:97:83:69:
8c:33:70:b1:61:06:ce:34:03:9a:44:70:b1:f8:a8:
2b:fc:a3:b1:6e:db:d0:66:47:34:74:db:d9:76:65:
5e:16:d6:72:4f:d0:62:2d:76:98:7d:5c:a4:b7:34:
94:b9:9d:b8:8b:0a:a5:d7:01:6a:f9:d3:21:2f:b5:
0e:f3:99:67:f3:19:38:90:88:26:c0:0a:9b:87:74:
6b:98:56:84:ec:bf:0e:5c:ae:81:7c:40:4f:80:8f:
54:3b:94:a1:0f:39:7f:43:ef:36:24:0f:7a:a4:26:
d5:a8:d9:63:e9:ce:54:d2:a2:4d:31:50:45:40:47:
33:b8:fa:8a:3a:b7:b2:62:ce:26:d1:95:bf:8f:82:
e8:fc:e7:f6:b0:6f:63:34:21:8e:03:6e:35:15:6e:
f7:c3:5e:5f:c2:9e:68:48:04:d8:c0:14:ea:d9:bb:
18:3b:c2:f5:00:79:2e:ed:65:5c:78:1c:da:bc:36:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AF:3D:0C:96:AD:8F:BF:37:73:67:86:50:6E:6A:E3:94:B3:FA:4A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/m689DJatj783c2eGUG5q45Sz-ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:ce:37:c8:e5:ab:cc:b5:8c:71:f6:b1:b8:1c:08:2f:a2:42:
72:fd:e2:13:76:92:75:4a:33:dc:02:4e:db:ec:34:b3:e7:dd:
3d:06:46:08:8b:c9:bf:95:29:ca:49:f7:f9:17:75:92:b1:b9:
c3:40:55:1b:91:f0:ef:4e:42:ec:42:18:78:34:60:7d:29:38:
50:4b:f1:c5:93:46:79:05:ca:ab:30:ba:9f:e4:f6:22:be:9e:
59:9d:0f:96:d6:46:f4:06:95:20:c2:2f:14:10:c0:26:a3:4f:
75:22:6f:9c:b7:b6:83:e2:0f:b1:ef:71:2e:02:60:a4:c1:f1:
81:5d:a4:6a:09:ba:0b:53:6a:58:22:89:f3:8d:05:9d:b4:a2:
90:b6:b7:9f:f7:35:fa:65:c3:90:35:11:9e:da:b3:5a:12:c9:
a9:f1:e7:2f:83:77:90:3d:06:88:af:1c:9d:b9:f0:2e:1c:c6:
9a:11:f7:91:c7:8e:6b:2e:bb:05:6e:af:47:ad:c8:0d:87:b2:
4c:d9:45:cd:67:5a:d8:69:7b:8b:de:9c:94:4d:20:3c:3a:c4:
78:56:f1:71:9b:da:79:39:a5:cd:56:c9:89:21:b7:b4:fc:ce:
63:c9:b7:35:26:66:de:89:4b:b8:fb:4a:74:36:66:b8:a9:7c:
4c:b3:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:01:45 2025 by rpki-client