Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dFFb9yHsSu_g2jD6X4LCyg8XtSQ.roa
File: dFFb9yHsSu_g2jD6X4LCyg8XtSQ.roa (raw, json)
Hash identifier: UAcvyrACT8ljv5vGf15qC9sD5Pn8g3iIIygGTXKkhcY=
Subject key identifier: 74:51:5B:F7:21:EC:4A:EF:E0:DA:30:FA:5F:82:C2:CA:0F:17:B5:24
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6242F0C942FA3A20F55E53D54BB9C28F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dFFb9yHsSu_g2jD6X4LCyg8XtSQ.roa
Signing time: Tue 24 Oct 2023 15:17:16 +0000
ROA not before: Tue 24 Oct 2023 15:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:42:f0:c9:42:fa:3a:20:f5:5e:53:d5:4b:b9:c2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 15:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74515bf721ec4aefe0da30fa5f82c2ca0f17b524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:b5:34:be:4a:da:41:fd:51:ba:d4:0d:e3:
d9:25:7d:b4:a5:54:4f:00:74:6a:71:fc:06:3f:b3:
1e:1e:8d:c2:14:91:54:1d:a4:d1:75:cb:ff:3a:49:
02:93:b8:86:38:3d:96:71:eb:a1:92:76:f9:4c:38:
47:47:dc:8e:e1:ef:18:a0:b7:9b:b1:af:1d:fb:84:
a0:87:4b:b5:78:4c:7b:46:69:9e:1f:34:36:23:d5:
0a:44:0d:76:9c:13:04:8d:70:81:07:cd:17:f7:24:
5e:3d:6e:9b:15:6c:df:ba:f3:96:74:30:dd:4b:b4:
4f:4e:f0:5e:9b:81:7d:d8:a0:e4:16:87:ad:a0:e0:
f8:12:1d:81:78:0f:4c:f1:c4:a4:60:67:d4:3d:4b:
01:cb:18:54:00:5b:9c:83:b4:51:6c:bd:50:bf:b1:
67:56:fb:d6:62:85:36:0c:eb:0a:1c:00:d9:07:69:
91:1e:5d:54:4f:91:b4:49:af:e6:f2:ab:f1:ea:d8:
05:d3:64:db:95:04:e9:2a:05:12:2a:ef:bd:9d:3d:
34:2c:a7:04:81:6a:df:f4:d4:30:5b:05:06:82:7a:
56:89:ce:0b:6a:42:0b:0d:e3:5b:6a:a2:64:1d:43:
ce:19:b4:18:e6:0e:c5:ba:d8:28:2f:19:c6:30:91:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:51:5B:F7:21:EC:4A:EF:E0:DA:30:FA:5F:82:C2:CA:0F:17:B5:24
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dFFb9yHsSu_g2jD6X4LCyg8XtSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:d8:99:b7:ba:3c:ea:2b:bf:80:a5:a1:2f:0a:0d:e0:50:91:
2c:73:1f:35:2a:e2:12:0c:26:bd:12:be:3c:6a:60:5c:cc:d4:
08:71:fd:45:19:cb:63:0b:cf:23:84:62:ca:ae:ef:fa:18:e5:
28:07:76:b6:84:02:87:fb:b9:a9:7e:94:5c:20:24:13:97:b0:
c2:6f:ed:4d:50:67:ac:39:ec:1e:9d:dc:34:ff:79:74:d0:96:
fa:0b:63:8e:fb:30:3d:11:23:48:2a:4d:6e:66:9c:08:5e:a7:
94:df:af:36:f0:92:ae:32:9c:e1:ee:07:d4:33:91:9d:55:23:
da:c9:db:19:00:b7:9f:f3:0e:f5:cc:8f:fe:74:2b:fb:8a:7c:
0f:bc:7c:17:63:62:24:8d:d9:91:1b:46:4e:d0:9b:cc:e3:ec:
4e:c5:7d:42:b2:a6:33:61:a9:90:8a:f2:92:6f:83:36:d4:ab:
c5:32:55:a5:59:dd:3a:52:04:92:98:47:63:a0:c0:6f:7e:69:
a0:86:42:77:e0:69:c4:9b:7f:a4:a7:2d:d3:52:58:21:c8:85:
87:b1:fe:33:d8:90:24:d2:7b:80:09:16:22:da:d4:ba:6d:6c:
6c:e3:34:5d:db:88:73:01:3d:4b:43:2f:91:9c:7c:cd:59:42:
29:50:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:11:48 2025 by rpki-client