Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Amewh5mYMQveb-b4WnNi7qGz0UQ.roa
File: Amewh5mYMQveb-b4WnNi7qGz0UQ.roa (raw, json)
Hash identifier: 8E069R95eFqNg7U2Y4RO5C6rQeTzCQ7vlF0aCtrWXd8=
Subject key identifier: 02:67:B0:87:99:98:31:0B:DE:6F:E6:F8:5A:73:62:EE:A1:B3:D1:44
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD72968FCCAE7A609FF4D96F0180FE088
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Amewh5mYMQveb-b4WnNi7qGz0UQ.roa
Signing time: Thu 16 Nov 2023 08:04:57 +0000
ROA not before: Thu 16 Nov 2023 08:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:d728:e115/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:29:68:fc:ca:e7:a6:09:ff:4d:96:f0:18:0f:e0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 08:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0267b0879998310bde6fe6f85a7362eea1b3d144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:8f:34:69:94:fc:4a:9a:83:6f:65:3e:06:
2f:72:49:a3:d1:70:10:99:88:53:5f:d0:4e:b1:cb:
82:2f:77:7d:22:df:f1:f9:4a:f0:78:9c:ea:49:d0:
60:e8:9f:a7:c3:46:b2:da:92:79:8c:e6:a9:a3:e3:
1e:49:51:38:c2:12:c5:b2:86:17:07:26:51:c3:07:
3c:25:31:c4:2e:02:13:14:6f:25:08:6f:12:03:f6:
0b:f4:95:56:a6:99:3c:94:b1:c0:82:60:cd:a6:09:
e8:8f:56:73:52:84:33:ea:3d:72:44:45:ea:08:94:
2d:dd:f0:d2:be:4a:0d:62:c1:4b:1b:11:52:95:c4:
1c:58:98:ef:2b:41:b3:55:83:9b:c7:3b:bd:11:56:
ec:39:9b:e8:26:1a:06:84:c1:e5:03:99:dc:38:dd:
35:b1:9d:74:41:6a:75:92:07:17:d2:b0:a5:09:6d:
fe:0a:97:c5:6c:9a:6a:c2:c5:98:66:a6:cf:f0:fa:
09:cd:0a:a8:20:60:8c:39:5d:db:4f:f2:90:c1:b7:
2c:fc:9e:1c:df:3c:a5:67:ea:d7:fc:31:7a:59:68:
8b:65:06:a4:d6:9a:04:4e:6a:22:bb:83:f1:77:27:
99:60:9c:a9:65:31:6a:94:07:2c:c5:90:4a:61:90:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:67:B0:87:99:98:31:0B:DE:6F:E6:F8:5A:73:62:EE:A1:B3:D1:44
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Amewh5mYMQveb-b4WnNi7qGz0UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:c6:df:bb:df:66:b7:f5:67:fb:c3:bb:b4:f7:7e:e8:e7:a6:
23:32:be:f2:59:63:f9:c1:00:c1:7a:d2:2b:17:61:58:fc:a3:
3a:8a:60:8f:a7:29:07:a9:e0:2e:81:84:66:08:53:7c:8f:e6:
28:b1:25:3d:21:0f:b1:9d:7d:c4:38:ea:3a:be:72:68:1f:69:
3c:d3:aa:2d:31:d8:7b:0e:a1:47:c4:26:47:2d:5c:e2:cc:15:
ac:d6:f5:0e:b6:75:95:37:6f:6f:03:fe:ae:b8:fb:6c:68:32:
ee:ce:d3:07:69:21:c9:b3:2a:45:5c:b4:69:ae:b7:87:90:32:
fa:1e:9c:ab:68:f8:c6:cf:c9:e9:90:70:5d:0b:3d:f4:bb:96:
10:ba:7d:04:a0:9a:d7:82:94:18:fd:ae:fd:a1:95:74:26:b8:
c3:97:b9:fe:f9:86:34:62:10:7d:7e:bc:2d:51:66:43:cf:11:
5c:af:84:2c:2b:57:15:8f:3c:36:02:ff:b8:cd:20:e8:56:73:
a3:9c:f7:32:06:99:9c:50:db:d7:27:57:17:38:36:cb:31:99:
1c:8d:57:c1:8c:c2:63:27:e0:fe:d9:3f:e2:cd:e2:cd:35:aa:
a3:3c:63:d7:93:bc:0e:0e:17:11:19:39:1f:28:0d:17:55:b2:
f1:b4:a4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:37:37 2025 by rpki-client