Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/g94Z0VqlZB6cg52sH1LeQQpjTT4.roa
File: g94Z0VqlZB6cg52sH1LeQQpjTT4.roa (raw, json)
Hash identifier: PrkxdsrsK4EVS36682CfQhtTw/X1mYCy17Z/dA32TyY=
Subject key identifier: 83:DE:19:D1:5A:A5:64:1E:9C:83:9D:AC:1F:52:DE:41:0A:63:4D:3E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B021F3F1A1D2C122A30E865DC90C5DC78
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/g94Z0VqlZB6cg52sH1LeQQpjTT4.roa
Signing time: Thu 05 Oct 2023 23:14:43 +0000
ROA not before: Thu 05 Oct 2023 23:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:02:1f:3f:1a:1d:2c:12:2a:30:e8:65:dc:90:c5:dc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 5 23:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83de19d15aa5641e9c839dac1f52de410a634d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:62:4d:31:ad:6a:9f:02:6f:95:79:1c:0a:8b:
cd:05:43:85:d6:2a:22:3f:6f:b0:a5:fa:2a:ff:d7:
a9:68:a1:1e:50:74:d6:1c:51:42:c2:41:9f:d9:09:
b6:75:f4:f3:36:f5:fe:7d:cf:a5:ec:83:06:59:7b:
13:ed:33:5f:e7:7b:7e:e6:fb:9c:14:38:51:7f:c6:
7e:3e:59:ca:05:24:54:8c:b5:5c:64:8a:5b:28:7c:
82:6e:76:a7:12:c7:87:1f:d9:79:41:f4:a1:e7:2f:
ca:1b:fa:b4:b2:2e:a1:b8:27:1a:67:f4:82:db:81:
2c:ff:69:e2:0d:b2:31:b5:df:0c:13:b5:2d:0f:72:
cb:13:6e:29:0c:1e:bf:b3:04:86:1d:48:8c:53:66:
f2:f2:1a:86:09:db:9f:af:28:24:c7:6a:e7:fb:91:
0e:a9:77:55:6c:8f:0c:49:70:a0:2a:46:c9:54:a6:
17:13:73:2c:f1:10:7d:d8:09:59:5f:eb:d7:d9:1c:
9a:0e:ed:92:8c:bc:c7:39:fc:ee:21:2b:3b:41:67:
66:59:8a:c2:10:62:9b:24:6f:2f:dd:c6:20:f7:8f:
e5:41:70:07:b4:68:29:42:18:c1:8b:26:6e:5a:eb:
5a:4b:3b:ce:8a:99:ec:01:89:69:bd:24:ce:36:f6:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DE:19:D1:5A:A5:64:1E:9C:83:9D:AC:1F:52:DE:41:0A:63:4D:3E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/g94Z0VqlZB6cg52sH1LeQQpjTT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:3f:7d:5b:b8:8c:20:27:42:1d:a6:3a:b2:00:b9:b6:24:d9:
99:ad:b3:18:26:b7:81:73:87:9d:55:9f:b2:3e:75:9e:a2:3c:
12:72:a7:5e:84:0b:95:cc:ce:a8:ed:d2:01:7d:15:c4:64:e7:
4e:c5:17:78:77:62:ca:06:d3:82:1c:2d:00:e1:46:2e:97:e1:
f4:71:a8:42:75:b9:d8:95:4a:be:e4:7b:e8:f6:84:8a:25:78:
04:c3:45:41:68:43:27:1d:ee:9f:51:7a:ae:d7:5f:fa:8e:6b:
80:b9:d4:01:93:f7:69:22:17:48:78:1e:f6:da:c6:a0:fe:55:
65:05:9e:25:8d:7b:ef:a8:60:28:c5:70:a7:68:c4:61:5f:b7:
56:da:92:ab:a4:8a:29:16:3e:9d:14:40:6c:11:ab:11:95:6c:
4a:09:72:6f:78:a3:12:00:9c:4f:54:a8:3f:1a:db:fb:40:62:
ec:28:ff:52:68:df:1e:22:b5:62:fc:50:ce:a8:63:7e:2f:de:
69:1c:aa:63:c0:42:32:00:aa:12:47:a4:5b:fa:8c:b1:f5:ba:
9e:e7:60:a4:f9:4b:e2:1f:e9:ea:7a:8c:01:65:e7:7f:af:ef:
6c:68:34:6f:0f:60:4c:74:3e:2d:2e:15:23:82:34:de:3e:33:
d8:24:98:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:24:19 2025 by rpki-client