Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-WHXti4Hvau8Dda0cPx2R6mh9Vw.roa
File: 1-WHXti4Hvau8Dda0cPx2R6mh9Vw.roa (raw, json)
Hash identifier: X0b80svOacAek9hOtT144fgOGRabHk+Bj6OwDJmn9/Q=
Subject key identifier: F9:61:D7:B6:2E:07:BD:AB:BC:0D:D6:B4:70:FC:76:47:A9:A1:F5:5C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6E396C7E849FA757C0486CEB46918BA0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-WHXti4Hvau8Dda0cPx2R6mh9Vw.roa
Signing time: Fri 15 Dec 2023 16:05:06 +0000
ROA not before: Fri 15 Dec 2023 16:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:6e38:913a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6e:39:6c:7e:84:9f:a7:57:c0:48:6c:eb:46:91:8b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 16:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f961d7b62e07bdabbc0dd6b470fc7647a9a1f55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:8a:d9:eb:59:61:59:07:3e:af:44:bb:0d:
39:7e:2d:52:58:b7:43:c0:b2:33:d7:4a:72:41:4b:
b6:3e:dd:ab:b6:4c:6a:f0:b5:01:7d:ed:df:cd:47:
0e:df:81:94:7b:96:e9:55:97:1e:26:27:d7:4c:62:
3d:ca:e1:21:61:cf:cd:6c:52:ad:df:89:d5:7b:0d:
1c:81:5a:18:03:9f:ad:ed:68:23:08:3e:0a:1c:80:
75:3a:2e:93:7a:4e:fd:9c:75:95:d5:df:6d:a4:1d:
1b:f2:43:65:71:51:87:07:6f:f8:13:e1:b9:a3:d6:
3d:7b:2f:59:60:da:07:63:49:f6:87:1d:3f:36:2b:
27:71:8a:a9:1e:17:a2:3f:61:fc:b6:28:9f:ff:d4:
5f:c0:01:76:62:22:fa:bf:a9:fd:2f:42:80:31:91:
95:7c:0c:c4:79:23:bb:5a:1a:7f:8b:cf:b6:2e:86:
3a:0f:92:71:cb:ed:a1:32:de:e0:53:fd:a4:bd:ff:
ac:88:04:48:08:0a:6c:52:9c:39:e9:77:c7:d1:56:
ba:09:8e:0f:26:9a:7a:07:af:8b:ff:76:60:49:ed:
d1:9b:8e:f8:89:dc:ae:86:93:ee:27:c8:30:1b:59:
f4:0b:fd:bc:e7:2a:79:71:4e:4e:a4:70:b3:97:fb:
61:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:61:D7:B6:2E:07:BD:AB:BC:0D:D6:B4:70:FC:76:47:A9:A1:F5:5C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-WHXti4Hvau8Dda0cPx2R6mh9Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:ae:8a:e1:fc:12:55:ab:2a:cc:23:aa:85:14:8f:45:02:73:
cc:bc:ef:fc:84:a6:fb:f2:57:f2:7f:3a:27:61:f8:3e:0c:7e:
bf:a4:ca:2f:9c:60:d0:5b:c7:83:53:ce:4c:9b:5a:d9:08:1d:
9a:c4:53:f7:38:e9:9e:f3:04:16:1a:22:ef:96:d1:3a:25:c8:
67:e5:22:17:0d:20:42:d6:a5:2d:53:76:88:7b:a8:f5:72:c1:
78:df:97:9c:0e:92:c8:97:d9:7e:97:bf:77:5b:76:d1:19:79:
05:38:44:8a:ce:d6:12:e8:95:59:18:cd:79:7e:1a:29:5f:c5:
e8:f9:b4:84:ea:d6:a7:bb:a4:b6:ca:38:5e:05:e6:65:8b:08:
26:df:d6:25:b0:34:e9:e6:d9:e3:8f:a9:e9:4e:e7:6b:69:cf:
ee:26:ce:ed:ab:d7:ad:ac:09:aa:9e:2f:ea:f8:73:35:3a:3d:
06:60:4e:bb:a9:c6:ec:cb:77:71:3b:87:15:2b:41:b1:4f:f0:
c5:92:16:eb:82:3d:c4:84:6a:65:22:12:22:3d:88:8f:0f:64:
00:30:0c:bf:1f:96:52:43:e2:81:39:b1:f6:bd:92:b3:9e:b0:
e6:e0:87:67:6b:af:51:98:4d:47:b4:a4:85:c8:45:af:cd:58:
48:ba:16:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:18:50 2025 by rpki-client