Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DbFVetwrZC1XPCD1cz_6lerAzF8.roa
File: DbFVetwrZC1XPCD1cz_6lerAzF8.roa (raw, json)
Hash identifier: HXNvwr1O8CJJTfwHJa4a3XiQBsgrUfP2zpKcp0P8r3A=
Subject key identifier: 0D:B1:55:7A:DC:2B:64:2D:57:3C:20:F5:73:3F:FA:95:EA:C0:CC:5F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDCC1AA6BA294DCB4A7306D53061E5078
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DbFVetwrZC1XPCD1cz_6lerAzF8.roa
Signing time: Fri 17 Nov 2023 10:09:21 +0000
ROA not before: Fri 17 Nov 2023 10:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:c1:aa:6b:a2:94:dc:b4:a7:30:6d:53:06:1e:50:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 10:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0db1557adc2b642d573c20f5733ffa95eac0cc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:50:cb:94:2b:62:dd:ce:8c:5b:2a:c1:59:
68:c3:27:5c:12:6e:30:9e:91:63:8b:07:e0:0b:0e:
62:d9:c6:44:76:2c:6a:7f:4a:f3:c2:0a:be:73:03:
ff:cb:c8:16:23:83:42:1d:52:4e:8f:e6:19:51:8b:
ea:1a:8b:1f:79:9c:2e:85:bb:09:07:4a:5d:8a:e6:
43:79:05:47:86:34:d4:89:9a:fa:c1:d3:22:1d:2c:
de:80:04:d5:60:4f:df:8f:4e:ff:10:72:70:46:e7:
2f:bf:0a:76:ed:e9:e1:02:2e:45:f2:13:eb:d7:a1:
f3:36:48:6e:4c:60:6e:93:55:16:a8:f9:a2:07:c2:
06:c1:1f:af:3c:56:e8:7c:1d:d9:7f:b4:70:e7:05:
56:87:8d:67:1a:61:04:af:d9:e7:c8:43:d9:5f:a5:
68:53:c9:54:b8:22:d9:be:17:f9:7d:73:3a:a1:fa:
7a:59:d0:8d:2c:7e:1a:13:cf:07:1a:10:d8:11:2f:
e3:5c:ca:63:c3:f2:aa:74:fd:ce:4a:b7:19:d2:89:
5b:15:14:0b:db:15:6b:a3:5d:4d:7c:97:02:e6:6b:
6d:9a:2d:2e:0b:41:81:c4:13:91:80:e6:5e:50:87:
35:4a:45:b0:93:4e:8c:49:8c:47:86:1f:75:69:df:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B1:55:7A:DC:2B:64:2D:57:3C:20:F5:73:3F:FA:95:EA:C0:CC:5F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DbFVetwrZC1XPCD1cz_6lerAzF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:2a:5e:46:38:d9:c5:ad:5f:1b:e0:65:5e:f3:a0:d1:0d:f0:
0c:55:00:30:e3:38:d8:d9:4b:d2:b6:ba:b4:d6:e0:b6:38:ad:
2b:98:7b:4b:31:14:e3:f6:ba:07:4d:45:b9:98:e9:42:52:08:
bf:7b:d3:26:bc:db:5c:24:30:aa:de:af:45:66:af:03:0f:5d:
2a:e2:07:85:19:14:8a:6a:ee:aa:d3:78:3b:a7:db:32:76:cf:
43:97:6e:df:b8:9b:95:6a:10:f2:f0:ed:da:4b:36:20:81:38:
fe:80:90:1b:52:8f:13:70:42:a8:c8:84:19:29:d9:19:b1:fa:
8b:1d:4b:40:e2:24:45:2c:80:19:55:ab:7d:4f:50:6c:62:92:
4f:de:78:c1:0a:2e:40:d3:c5:52:e5:61:60:c0:6d:24:38:65:
a2:77:c7:25:de:3f:2a:46:01:5c:de:a0:7a:38:f9:24:4a:b0:
50:85:6c:17:83:3b:6c:c2:16:3b:5f:72:92:ad:70:fe:23:e1:
17:9d:2d:6b:9a:23:03:8f:db:8c:c9:73:c7:67:11:40:d3:8b:
04:6a:6e:6f:19:e8:42:b3:25:4f:44:78:a3:12:d6:c6:c9:f2:
79:8d:1b:7c:1d:23:bf:f3:fd:1d:91:03:fe:1c:e6:4f:59:a7:
1f:98:cc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:45:06 2025 by rpki-client