Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aimHLIkgwG8OW7o1dp-eaMuRJ0s.roa
File: aimHLIkgwG8OW7o1dp-eaMuRJ0s.roa (raw, json)
Hash identifier: qmSSxSRKBvfBLaNKjx0VIudBYxPgVufBBm0Ik3fxWvs=
Subject key identifier: 6A:29:87:2C:89:20:C0:6F:0E:5B:BA:35:76:9F:9E:68:CB:91:27:4B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCDBDE951ED7FCA55969789394C2FA5F2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aimHLIkgwG8OW7o1dp-eaMuRJ0s.roa
Signing time: Tue 14 Nov 2023 12:10:57 +0000
ROA not before: Tue 14 Nov 2023 12:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:bd:e9:51:ed:7f:ca:55:96:97:89:39:4c:2f:a5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 12:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a29872c8920c06f0e5bba35769f9e68cb91274b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b3:b5:91:bc:1a:2f:f7:4d:7f:d2:c7:86:02:
be:65:47:17:34:c5:b8:29:8b:2d:56:21:ee:a6:f6:
57:01:53:ff:3a:74:69:35:9b:96:a2:d7:de:97:1b:
88:f6:00:d1:99:f9:e7:60:3e:fb:e7:23:64:f1:2e:
29:54:67:02:25:2c:fe:61:e7:cc:d5:37:37:1e:c5:
21:da:e7:4d:9f:eb:58:9c:82:01:d2:5e:35:b7:a8:
74:fa:ab:51:11:f1:3d:39:b7:e7:06:fd:a3:f4:e0:
9d:e6:14:ed:60:f6:8f:89:af:76:67:80:fc:da:3f:
36:7d:8f:a0:6d:22:77:fc:38:8c:8d:08:30:6e:8c:
d5:59:73:50:50:e0:ec:ee:91:01:3a:ce:35:b5:c5:
d1:2b:ea:bb:ae:7d:22:47:ec:d2:e9:c3:bd:ce:b9:
d3:cb:66:1a:7c:91:68:2f:aa:20:c0:85:62:78:e5:
12:25:ec:d2:8c:7e:c4:ca:73:f0:f8:d6:b9:30:bc:
a0:c6:51:7a:c6:b5:a9:38:27:5a:16:ac:91:81:8d:
20:32:ce:cf:8e:ab:f1:99:1e:c9:b6:8d:d2:18:64:
32:2c:b8:52:a8:36:dd:b5:9b:37:70:2c:e8:cc:97:
fc:14:d4:0b:e4:a7:96:f6:d9:e0:c3:f6:81:bd:bb:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:29:87:2C:89:20:C0:6F:0E:5B:BA:35:76:9F:9E:68:CB:91:27:4B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aimHLIkgwG8OW7o1dp-eaMuRJ0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:24:21:1f:57:3f:c5:ba:82:57:20:4f:ad:57:9e:f3:ee:1d:
47:9f:9a:81:62:43:9e:2e:42:2a:78:7d:36:8e:7d:1c:e0:1c:
a3:2b:c5:62:1c:0b:15:36:60:8d:0e:3f:32:22:af:b8:f4:88:
a5:30:50:ce:16:d2:79:54:71:6c:59:4f:9d:3d:cb:63:79:41:
34:4e:ac:79:08:d1:6a:a2:c1:a0:b3:09:f4:8f:0b:a7:f1:be:
d4:80:67:9f:f4:3a:30:cc:24:f4:e2:b4:31:3a:08:8d:c5:7e:
85:e8:c6:76:a4:0e:ce:41:34:c9:21:78:f2:37:64:6e:bd:0d:
62:bd:01:c0:64:d7:97:e3:47:19:2a:4b:0f:0e:68:fb:86:88:
ba:b1:f3:63:4a:14:06:84:3a:76:d6:b4:b4:9c:6e:7c:c9:b2:
b2:73:19:c7:4e:e1:ad:a4:5e:e2:2d:25:d0:f9:1d:a9:ab:fb:
5a:01:e2:77:ad:ab:a5:08:be:a3:dd:72:28:66:8c:48:9e:f7:
41:c6:57:ab:e9:74:80:ba:ee:c0:d3:cb:4e:cd:41:f7:bb:ea:
1c:f4:31:4e:f1:97:7c:a8:bc:60:26:af:28:ac:d1:e8:ef:bb:
ff:92:48:21:8c:d2:4a:9d:2d:a4:24:9b:d2:53:0a:87:78:80:
df:e1:b3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:21:59 2025 by rpki-client