Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/n-VDMdN9O8WRQW639M_rlbVhD1Q.roa
File: n-VDMdN9O8WRQW639M_rlbVhD1Q.roa (raw, json)
Hash identifier: 7LVXZjQ438UqIrYEuzGhD5EqqBfPVqnLZxFSsIHDNOs=
Subject key identifier: 9F:E5:43:31:D3:7D:3B:C5:91:41:6E:B7:F4:CF:EB:95:B5:61:0F:54
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6E09C55410AEB4A25940A1C720961260
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/n-VDMdN9O8WRQW639M_rlbVhD1Q.roa
Signing time: Thu 26 Oct 2023 22:10:15 +0000
ROA not before: Thu 26 Oct 2023 22:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6e:09:c5:54:10:ae:b4:a2:59:40:a1:c7:20:96:12:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 22:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fe54331d37d3bc591416eb7f4cfeb95b5610f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:f3:d4:50:51:ac:d7:55:ae:de:e5:df:32:
fe:16:da:73:81:23:0d:c6:b7:c6:5d:52:d4:a1:ae:
25:c1:25:04:e5:04:4c:e8:6f:75:65:28:b5:e6:3d:
2f:90:87:e9:fb:34:3e:1f:d9:cd:45:d2:af:02:e0:
27:bd:84:9c:95:a9:1d:32:2d:86:0a:4a:88:96:49:
61:46:8d:98:ea:c0:cb:ab:7f:81:99:ad:e9:54:99:
48:a4:67:ea:40:91:be:59:b5:b9:a4:60:81:ab:a6:
0b:48:83:f0:55:bf:4c:91:1a:ed:32:ed:df:fe:1a:
2f:20:b4:44:11:d1:1b:ba:67:f9:4a:fb:9b:29:0d:
ad:03:87:21:5d:98:04:77:e2:87:55:f7:d8:9f:1b:
ab:61:d1:bc:39:7f:d2:5d:fb:80:ce:0b:54:72:5b:
69:6c:8a:ec:dc:2f:22:39:93:01:ac:1c:05:f0:ec:
72:65:79:c7:cc:f2:bd:c2:97:0f:c0:27:1f:1b:ad:
8c:9d:1f:e0:d3:1d:75:cb:f3:43:89:c5:9d:e7:8d:
52:a7:4d:b6:53:86:85:54:0e:d5:b1:55:9d:16:0e:
a8:db:69:03:02:71:4c:b8:9b:0c:d1:df:5f:68:c2:
0f:4f:b6:8b:e6:a2:82:e4:c2:98:a0:a4:08:ac:d0:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E5:43:31:D3:7D:3B:C5:91:41:6E:B7:F4:CF:EB:95:B5:61:0F:54
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/n-VDMdN9O8WRQW639M_rlbVhD1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:7b:5a:bc:3f:54:eb:1f:26:c1:d4:cf:b5:2f:17:70:72:aa:
30:61:1a:18:ce:c8:8f:b4:10:5c:b7:15:50:8c:c1:68:79:6b:
45:1e:90:c8:6d:10:ef:17:5f:ff:a9:ad:61:05:4b:d3:63:67:
a6:01:2c:8b:2b:af:9b:8e:e3:f7:63:8d:f3:f0:5b:19:f2:fb:
a7:7a:51:e8:08:54:23:00:b5:ab:e1:86:a2:ed:42:41:60:b8:
71:b7:c6:9a:10:22:5d:c0:b1:38:4c:7f:93:6f:5d:f2:8b:a5:
87:a6:65:70:7c:08:9a:bd:c6:9b:6a:19:d7:6b:8a:26:fc:e9:
20:a4:9a:f7:5f:58:7a:c7:d0:79:c5:b6:2d:c2:d7:88:a0:07:
54:23:6c:87:42:49:fc:f9:cb:29:39:67:1a:5d:ff:88:e5:60:
19:4c:59:93:1f:61:94:6e:a3:15:e7:21:cf:6a:3f:8d:a0:82:
fc:e0:97:63:b8:99:81:f0:90:b7:8a:c2:f8:74:e5:72:6e:f4:
e1:53:79:76:f0:a0:64:88:0a:7e:d7:51:5d:95:da:48:c8:41:
8e:d3:aa:55:12:79:82:6c:88:3a:35:a2:13:20:82:15:d6:07:
25:ba:21:e8:e9:3f:7d:75:ad:4f:fd:f2:26:d3:22:78:5b:38:
f8:fd:39:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:57:42 2025 by rpki-client