Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x2Sg8UJk8Lg6vuQW33uEIjfl854.roa
File: x2Sg8UJk8Lg6vuQW33uEIjfl854.roa (raw, json)
Hash identifier: eyVLpRXy28lAs/i+G1mD0R470i2ZvEZ+nduJCoX+96Q=
Subject key identifier: C7:64:A0:F1:42:64:F0:B8:3A:BE:E4:16:DF:7B:84:22:37:E5:F3:9E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4317FE1EA5D2E2152E94CDBEC7FC8B9F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x2Sg8UJk8Lg6vuQW33uEIjfl854.roa
Signing time: Thu 07 Dec 2023 07:04:54 +0000
ROA not before: Thu 07 Dec 2023 07:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:4317:934c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:17:fe:1e:a5:d2:e2:15:2e:94:cd:be:c7:fc:8b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 07:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c764a0f14264f0b83abee416df7b842237e5f39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:fe:de:9e:a2:b9:f3:e8:16:80:42:75:69:
22:cc:a8:a0:34:0a:cc:21:51:77:a1:78:a6:33:be:
65:e0:e9:f4:80:91:9e:7c:ff:ec:cc:79:98:e5:6e:
2d:fe:cb:ec:7c:42:72:83:26:19:57:c7:f8:a2:ac:
ac:46:75:8b:c7:6f:11:13:32:e5:39:d7:7c:52:3f:
67:78:fa:26:20:71:db:d4:1b:f9:d6:ef:58:b4:a0:
81:da:00:d1:71:7a:14:ab:81:5d:64:f9:f3:c8:cf:
ea:f3:fb:2d:a5:08:3b:27:02:94:66:3f:35:ad:fe:
61:43:e4:40:05:d4:12:57:b7:fc:c3:14:8c:6a:f5:
b9:e1:41:73:03:cf:f7:e5:a7:e1:56:a0:34:d8:d1:
c0:7a:fc:81:d2:c9:bf:f7:35:b0:f3:a0:04:12:59:
13:f5:47:6d:00:c9:26:35:9e:e8:9c:e7:bd:f9:19:
9b:72:b7:d8:dc:4e:29:4b:26:ad:0a:d0:c1:72:a6:
0a:52:32:a8:2e:af:d0:40:c2:24:2f:6c:4c:77:e5:
90:35:7a:84:3f:79:e9:19:6e:80:ab:2c:44:d9:d5:
ba:dd:01:26:75:c9:57:12:5c:85:b4:75:48:9d:76:
d1:bd:be:84:6f:3c:1d:ea:c7:9c:97:ab:34:7e:9d:
8c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:64:A0:F1:42:64:F0:B8:3A:BE:E4:16:DF:7B:84:22:37:E5:F3:9E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x2Sg8UJk8Lg6vuQW33uEIjfl854.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:59:8f:1b:d0:78:ba:cc:3c:f3:7f:e6:ac:94:84:ed:49:24:
5d:c2:c0:49:32:08:18:e5:47:82:c5:83:30:00:1d:6a:ef:59:
3a:ff:23:14:f3:c4:b4:4b:4b:fa:1b:57:45:6a:24:d4:99:c2:
7f:b7:35:39:f4:12:b2:62:ea:bd:b8:9e:0f:fa:71:84:84:2a:
99:c4:ff:23:01:5b:47:1d:18:49:c8:e2:10:9d:0a:6c:0a:ca:
7c:0b:86:d2:0f:0a:2c:80:3b:ae:3e:47:c5:0a:66:4d:14:75:
26:8c:5a:ea:de:40:fb:ff:ea:ef:ba:75:0e:e0:af:af:a4:92:
d8:fd:f8:85:3b:d5:3a:76:d5:e0:9b:5a:a9:72:d0:fd:b6:23:
c2:10:02:3e:52:f3:d5:80:89:ba:26:b4:a2:5f:de:be:8b:a3:
45:59:a4:47:c4:5f:7e:1b:f0:a5:13:9e:46:a4:72:97:25:89:
74:b2:08:d6:cc:4a:d6:5d:f5:fe:1a:ec:2c:ef:7c:d9:8c:58:
51:bb:d2:85:54:53:6a:dc:59:29:12:c6:f2:7b:ae:71:3f:f3:
57:d4:10:8c:16:7b:40:c0:f9:d4:09:61:ed:ba:2b:c2:28:d7:
63:4e:11:a8:81:bb:53:4d:ec:1e:c1:b1:c2:4f:b8:ef:35:ec:
28:0a:63:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:07:43 2025 by rpki-client