Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pppvZPCRXBwcFbuG7vvX71i-AXI.roa
File: pppvZPCRXBwcFbuG7vvX71i-AXI.roa (raw, json)
Hash identifier: hJy3f6RFH8f3fUlpzkjXX5lWpgJOkpjmjV6aV0oJs3c=
Subject key identifier: A6:9A:6F:64:F0:91:5C:1C:1C:15:BB:86:EE:FB:D7:EF:58:BE:01:72
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD950D21B99B20816884051F05DD07F09
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pppvZPCRXBwcFbuG7vvX71i-AXI.roa
Signing time: Thu 28 Sep 2023 01:04:27 +0000
ROA not before: Thu 28 Sep 2023 01:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:d950:9b83/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d9:50:d2:1b:99:b2:08:16:88:40:51:f0:5d:d0:7f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 01:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a69a6f64f0915c1c1c15bb86eefbd7ef58be0172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6d:c2:d3:82:0b:c7:e7:4f:1a:96:70:d8:87:
b6:8f:d5:24:81:38:3f:fd:44:e3:05:98:6d:c6:fe:
e2:df:cc:7f:fb:75:92:80:57:3b:14:4c:6e:09:cb:
9b:fb:19:4d:53:3a:0d:f3:d8:69:62:56:2b:7f:a6:
cc:d5:07:d3:f2:46:77:6c:86:ac:55:25:15:46:09:
f7:8a:d3:34:1c:a4:e9:24:71:e0:09:dd:de:28:24:
e2:d4:0e:04:9c:ac:54:60:81:bf:74:1a:82:c6:36:
ec:fb:55:6b:39:4c:8c:f5:b9:1d:64:96:90:ec:e9:
3d:32:d2:77:dd:40:cd:14:e6:24:33:16:9d:b6:29:
c4:95:1d:f2:36:bb:1d:4d:04:e8:b9:ec:7b:d9:d1:
cc:e7:e7:db:32:50:c6:7f:d2:34:18:72:9f:d6:5c:
cf:9c:6e:0f:01:85:00:5f:15:f9:b3:20:fa:b5:20:
a7:54:3d:20:a5:c8:93:e1:86:3f:f9:6b:80:ed:d3:
8b:94:63:43:d0:6f:bf:72:a4:c2:b4:73:64:cc:43:
eb:5f:0e:ef:e1:c3:97:fa:7c:ea:8b:69:aa:78:00:
80:f9:b0:8d:75:e4:1e:8a:54:6d:87:c8:20:f0:77:
ab:e4:a7:77:46:2a:6b:21:4d:c5:88:f4:b3:0d:b3:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9A:6F:64:F0:91:5C:1C:1C:15:BB:86:EE:FB:D7:EF:58:BE:01:72
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pppvZPCRXBwcFbuG7vvX71i-AXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:6c:c6:1d:f5:23:e3:13:1c:5f:8a:b8:31:c6:e8:b7:1c:f4:
ef:cf:a1:e4:61:fb:ac:2a:65:99:19:a7:50:0e:a7:d7:7b:fd:
a8:cf:a4:a7:85:49:44:de:93:1a:34:45:6b:37:0d:65:05:b9:
75:69:8c:bc:5d:6b:55:c1:fb:63:8d:a4:e7:2c:14:ae:8c:eb:
f6:bf:22:99:fc:f6:94:b0:dd:6b:3b:79:5a:ea:5d:30:e3:d3:
28:00:2d:47:7a:72:36:bd:90:7a:3c:89:1b:2c:55:b3:20:9d:
9d:75:d1:85:34:80:bf:c5:a8:7e:50:77:47:e0:7a:b3:1a:74:
e7:cf:dc:42:4c:c6:5f:ae:09:35:54:21:05:67:fa:9c:92:91:
f5:04:2a:3f:e7:b9:90:f0:23:15:42:dd:36:25:27:d1:cd:f8:
fc:07:09:0c:41:5c:f8:bb:c5:d8:80:bb:2e:46:61:b4:63:eb:
c8:2a:b3:08:a5:e3:8c:88:62:89:d1:ec:d3:bb:2f:d3:c2:fe:
e0:e0:2d:0d:73:90:b7:66:3f:5e:f2:04:d2:c7:7f:72:bb:79:
59:9f:be:52:6f:ae:3a:68:15:8f:20:2c:84:99:ba:34:b1:2d:
ee:2d:b4:17:2f:d7:c4:3b:ab:a9:a7:16:03:e1:2e:c6:0b:b0:
76:fb:e6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 21:48:52 2025 by rpki-client