Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Y1D5dMzBAmHpaWmNrlqZQY-h1mk.roa
File: Y1D5dMzBAmHpaWmNrlqZQY-h1mk.roa (raw, json)
Hash identifier: BSNjNElwLtPyWi9hQ0yHKf2TrayulN8NO+BoMGZPi0w=
Subject key identifier: 63:50:F9:74:CC:C1:02:61:E9:69:69:8D:AE:5A:99:41:8F:A1:D6:69
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD8E13C3C87DFDCD93D7B6A93BA672C14
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Y1D5dMzBAmHpaWmNrlqZQY-h1mk.roa
Signing time: Thu 16 Nov 2023 16:05:21 +0000
ROA not before: Thu 16 Nov 2023 16:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18b:d8e0:6624/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:e1:3c:3c:87:df:dc:d9:3d:7b:6a:93:ba:67:2c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 16:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6350f974ccc10261e969698dae5a99418fa1d669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:67:48:2a:3a:69:4e:76:47:86:ae:74:4f:
b9:c0:c8:e7:08:16:87:1a:aa:d0:8b:4e:bc:f6:da:
15:ad:e1:3e:a3:a4:0a:e8:7a:93:b9:18:28:1e:7a:
1d:e1:92:2d:10:87:5e:68:f7:e7:03:fd:92:63:62:
a8:bf:65:c1:1e:bf:e9:00:25:ea:c8:95:57:95:a2:
ef:fb:e9:e8:43:c2:4f:7e:9d:57:ea:83:77:a9:54:
45:dc:da:72:9b:8f:3f:cf:7f:0c:76:76:47:35:a9:
24:8d:6b:cd:43:12:9a:f7:c7:d4:7d:d5:c2:2e:0c:
66:56:cd:a9:e9:09:a0:c0:b3:53:7c:94:78:9b:b1:
09:72:f5:67:2f:d6:bc:75:8f:9f:dc:a8:f1:37:20:
e4:b9:6d:2b:f0:91:9b:0f:3c:73:2e:67:7a:99:4a:
4e:fa:a0:94:2a:4b:1a:f5:42:13:17:a9:9f:7d:6d:
e2:48:8f:3b:15:72:db:e7:16:76:2d:af:a4:70:14:
86:2d:79:37:1c:6a:94:c6:bd:7f:05:65:80:b7:c3:
7a:aa:97:04:53:d7:0e:21:29:93:6c:61:06:40:f5:
bb:39:e6:2d:06:ca:6d:9a:95:6d:f2:c4:39:41:22:
0a:65:1b:ae:37:09:9b:d9:d8:83:24:3e:c2:4a:b6:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:50:F9:74:CC:C1:02:61:E9:69:69:8D:AE:5A:99:41:8F:A1:D6:69
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Y1D5dMzBAmHpaWmNrlqZQY-h1mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:35:2c:cc:9c:61:9f:cd:84:c3:b8:cb:9c:65:1a:63:85:ba:
f2:59:a8:bd:46:15:ab:38:43:78:c1:61:af:94:f1:90:43:0d:
ea:59:b4:ff:1f:ea:12:55:e1:3e:89:91:96:02:93:1b:74:47:
1c:c8:ab:56:33:c5:72:5c:f2:88:81:cc:65:ee:d1:1a:ac:77:
25:bc:b9:ca:7c:03:76:e6:b8:2f:c5:36:d1:63:42:90:6a:97:
fd:62:c5:bd:ab:1b:78:25:4b:69:87:4e:03:a0:d7:ab:51:04:
f4:03:3c:b4:31:d8:5e:8e:1a:67:00:6b:6c:c6:57:8b:fd:23:
ee:2b:f5:26:4b:81:21:ba:eb:d6:85:f2:8b:64:04:84:b0:f8:
d4:58:71:9f:c1:a8:3d:e3:ee:e9:70:0a:37:2d:01:49:f3:be:
91:2f:16:94:0b:c9:b7:9f:6d:6b:15:19:e3:9a:6d:e6:a1:85:
11:e5:03:04:1f:99:fd:62:1f:57:9b:7f:81:9a:a1:df:e8:83:
f9:ea:14:9e:58:c7:69:f4:96:81:0a:b9:5a:57:ff:13:1b:12:
a2:05:a8:99:80:0c:4c:b3:54:fd:4c:4c:d7:ae:a5:c9:6a:07:
e8:2d:ad:0f:6a:d6:36:01:20:90:ac:b4:30:fe:71:61:0d:7b:
2d:65:0d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:25:48 2025 by rpki-client