Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bS5mp6VTcZoK_GC-JSWuEpqCRVQ.roa
File: bS5mp6VTcZoK_GC-JSWuEpqCRVQ.roa (raw, json)
Hash identifier: lDYjwjP2Y/gbchfalqaHA/75MLSjMgRJEJ4iAwvaLpg=
Subject key identifier: 6D:2E:66:A7:A5:53:71:9A:0A:FC:60:BE:25:25:AE:12:9A:82:45:54
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2921AADDB752EED04D35CBB05478C7A9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bS5mp6VTcZoK_GC-JSWuEpqCRVQ.roa
Signing time: Sat 02 Dec 2023 06:05:21 +0000
ROA not before: Sat 02 Dec 2023 06:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:2920:c928/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:29:21:aa:dd:b7:52:ee:d0:4d:35:cb:b0:54:78:c7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 06:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d2e66a7a553719a0afc60be2525ae129a824554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:0e:87:1e:09:6b:f5:65:f1:2a:6c:fc:b9:
fc:d6:7f:b7:ec:f1:6a:37:19:09:63:e2:24:27:3a:
31:50:ca:4c:30:05:69:6b:83:ea:30:7e:fb:f9:ad:
71:cc:a9:0e:e6:af:ec:51:69:75:7d:4d:96:30:b5:
c3:2f:dc:d0:ee:99:02:f3:b9:65:e1:d2:60:52:19:
83:f2:2d:48:2d:57:11:1f:b2:43:c5:f4:c4:31:ed:
70:fb:55:46:33:02:e3:f1:dc:36:96:43:b7:3c:ff:
ea:8d:0d:f8:46:43:15:ef:b0:71:9b:9d:7d:7c:10:
fe:08:07:fb:ff:5d:cd:f8:04:a0:0f:6b:96:00:f2:
88:50:09:e0:77:45:af:bd:08:83:46:42:e2:02:00:
c2:25:a7:1b:f7:05:32:8d:43:05:6f:fc:50:d7:c4:
44:45:a1:37:f6:b3:0a:76:22:e0:f4:c1:e0:c1:22:
15:4a:69:f2:c2:77:84:d9:4f:6e:83:be:5d:39:46:
6e:ad:72:ec:d7:be:1b:58:ac:4e:4a:8f:6f:d4:5e:
dd:4f:a0:ca:97:a8:fe:ff:e7:0d:d0:b9:ae:6e:f7:
d3:cc:b8:9b:e5:a8:ab:06:c4:12:a0:92:8e:79:c7:
51:03:18:56:57:f1:88:d7:bd:07:71:83:3a:de:41:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2E:66:A7:A5:53:71:9A:0A:FC:60:BE:25:25:AE:12:9A:82:45:54
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bS5mp6VTcZoK_GC-JSWuEpqCRVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b9:1c:af:5a:b5:81:c3:95:d3:30:b5:2d:c6:71:f2:5e:58:a2:
77:44:b9:8d:4d:07:c9:51:d2:d0:8f:59:df:cd:c1:bf:5a:d4:
e6:f9:56:10:b6:84:50:21:b7:ec:73:bd:8a:aa:bc:2b:e1:f1:
35:ce:45:8e:5b:ee:9e:c3:0d:de:aa:63:a2:ad:70:4e:69:1c:
3d:69:a3:4a:8a:01:a1:7c:48:88:fe:d8:f4:88:c0:ec:47:8f:
a4:46:13:1c:63:24:5c:91:b7:e4:9a:f3:79:cb:48:b5:fe:56:
12:c7:8f:e2:a3:de:a5:54:76:c1:b0:d1:3a:8e:76:f0:85:83:
b0:e9:14:16:51:ee:90:52:b9:ae:4d:b5:04:97:fc:af:ba:67:
0e:8a:e4:48:a6:3c:9e:7e:e0:15:35:f1:22:3d:76:23:90:06:
47:94:a3:58:2a:75:ab:df:47:fb:69:16:6e:d1:e4:83:ed:c9:
1a:06:29:9f:54:2e:ec:04:d2:cc:52:f8:25:00:11:a7:1e:ab:
15:e1:37:d2:d5:2d:a3:87:00:2d:ac:0a:63:ea:67:80:02:59:
3f:f1:89:0f:06:ee:b6:17:30:e7:b1:8f:90:cc:0e:77:cf:6c:
21:34:18:8e:1f:6b:a3:16:17:3b:2f:23:60:6c:20:3f:cd:ad:
c0:a1:20:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:27:27 2025 by rpki-client