Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ccQufOYvm3_5d7KnZn0iMq_Vwyc.roa
File: ccQufOYvm3_5d7KnZn0iMq_Vwyc.roa (raw, json)
Hash identifier: ukUNUJRDAK4BlTFHeQztWpWc1u4MJRHht1ihST06Epg=
Subject key identifier: 71:C4:2E:7C:E6:2F:9B:7F:F9:77:B2:A7:66:7D:22:32:AF:D5:C3:27
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBC2006D4B1C3C2D65B3F53DC72D380E2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ccQufOYvm3_5d7KnZn0iMq_Vwyc.roa
Signing time: Sat 11 Nov 2023 02:04:57 +0000
ROA not before: Sat 11 Nov 2023 02:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:bc1f:81dd/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bc:20:06:d4:b1:c3:c2:d6:5b:3f:53:dc:72:d3:80:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 11 02:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71c42e7ce62f9b7ff977b2a7667d2232afd5c327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:38:f3:50:ae:85:fa:e7:5f:e0:bb:50:e4:04:
9b:2e:d4:0e:a6:70:5f:7b:f8:a6:d3:bf:ac:1c:36:
84:73:d9:e5:5e:58:13:c2:c6:e9:6b:d9:c0:46:e5:
69:b5:8f:21:d3:0b:94:1e:65:33:bc:57:78:53:01:
cc:9c:d0:09:05:d0:2c:14:a8:45:9e:a0:b0:d8:2a:
37:a8:3f:3c:61:7a:fc:e9:c1:eb:62:6b:a7:58:e0:
4e:94:dd:12:82:45:c0:39:58:ab:c0:7f:5f:ed:33:
72:2e:44:86:c3:b7:60:2f:bf:25:09:e3:c0:77:f9:
49:f9:13:19:8c:f9:ba:ec:4e:d9:01:fa:e5:f2:4b:
e9:93:50:de:47:fb:30:e2:04:dc:ae:39:2c:ff:92:
c0:89:fe:08:b3:59:42:e3:33:9f:ef:a3:bf:94:8e:
ab:c2:6a:9f:72:13:37:8d:ef:c8:8a:ad:7c:5a:28:
24:24:fe:7a:31:6b:0b:8f:0f:26:9c:af:01:ec:34:
4f:41:1a:e7:c6:45:14:2e:e5:52:e3:2c:66:55:e2:
7c:d9:f2:95:7f:b6:16:45:81:60:96:41:90:1c:ca:
ac:17:47:a2:c1:b6:9c:da:e9:cd:12:ed:8c:f9:a1:
fb:a7:4b:3d:71:90:8d:2a:3a:82:7c:ae:fc:04:21:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C4:2E:7C:E6:2F:9B:7F:F9:77:B2:A7:66:7D:22:32:AF:D5:C3:27
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ccQufOYvm3_5d7KnZn0iMq_Vwyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:f3:6b:c5:1e:8f:92:32:fc:95:bc:8a:51:60:f6:d2:cd:6f:
f6:2b:8f:0b:9e:35:7c:7b:c4:80:42:a0:18:e2:33:41:e6:b3:
7d:87:52:d5:b5:6e:c8:f1:c4:bb:7a:81:9c:5c:c6:4c:4e:88:
25:e1:df:82:55:7b:97:32:5d:f3:23:8b:a9:dc:15:70:9a:49:
73:5a:18:ba:14:da:ee:a8:8b:56:37:a7:2d:2f:2b:c2:04:cb:
95:e6:40:13:58:d0:5b:97:2b:ce:da:77:3f:ee:de:50:d9:a5:
02:73:3a:c2:67:d7:2e:8a:cc:d9:b1:0d:8a:7a:0b:00:1c:39:
48:6a:9e:b1:9a:76:25:0b:cb:d2:ca:8b:04:ec:de:b1:ab:33:
bb:d5:52:09:d5:de:32:d6:17:fe:1a:ad:1b:78:79:0a:21:64:
81:93:82:62:27:d7:29:1c:34:e1:04:ff:5e:98:24:82:6b:68:
81:d8:30:92:7e:b8:7f:31:bd:99:2d:4b:e8:a5:dc:07:75:c8:
8b:16:4c:67:0a:66:21:16:41:46:e4:9a:b1:83:c2:e3:e7:62:
42:82:2d:2d:ee:22:c0:e2:fb:4c:4b:dd:83:4b:a4:da:08:07:
60:cb:8b:41:68:35:a6:53:6a:bc:ac:e1:cb:32:8e:9a:b5:c3:
11:16:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:26:23 2025 by rpki-client