Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sIp_PVw2DPauAQ7YfisNnjMeobA.roa
File: sIp_PVw2DPauAQ7YfisNnjMeobA.roa (raw, json)
Hash identifier: qQ7Hmg/HHJzUT7Pt4Ffdv94/Bcg612YCFJxUeQWv114=
Subject key identifier: B0:8A:7F:3D:5C:36:0C:F6:AE:01:0E:D8:7E:2B:0D:9E:33:1E:A1:B0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B751EF75C47B79BF3CC2A23F42CFDAD17
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sIp_PVw2DPauAQ7YfisNnjMeobA.roa
Signing time: Sat 28 Oct 2023 07:10:45 +0000
ROA not before: Sat 28 Oct 2023 07:10:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:75:1e:f7:5c:47:b7:9b:f3:cc:2a:23:f4:2c:fd:ad:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 07:10:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b08a7f3d5c360cf6ae010ed87e2b0d9e331ea1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2f:63:af:2d:7d:23:53:fc:8c:22:86:25:3a:
3c:ff:2e:6c:1c:3a:46:20:e0:4b:24:71:d2:e3:8f:
ca:2d:ef:e2:0b:40:b2:8c:3c:9e:54:33:83:cd:76:
dd:a1:67:b0:03:99:73:66:fc:28:c2:f4:c8:52:92:
c0:30:39:4a:6a:61:44:3e:e6:a4:32:21:d3:25:af:
ca:f0:91:15:fe:fd:76:99:3b:f0:9e:9e:f3:4a:44:
67:5c:fe:06:6e:d2:ea:a8:3d:09:f9:63:c0:1c:ce:
4c:1f:6f:3f:dd:d0:ac:95:e4:71:27:c0:1a:cb:1a:
ae:8e:a4:23:56:d8:87:2b:f1:9e:08:b0:48:81:aa:
03:f4:67:ff:f7:a8:6b:cd:4b:92:e5:e4:c1:91:43:
ef:b7:7d:8f:0c:8d:8e:56:2b:bf:e6:08:72:77:1f:
fd:f4:38:59:25:6d:e1:8a:a9:6f:d6:52:86:1f:c6:
04:14:b1:14:62:a9:de:ac:cd:bb:c9:a4:21:24:87:
fd:e7:3d:03:d6:26:f5:56:da:a1:43:a8:63:51:f0:
24:e2:b6:e2:24:bb:b4:e1:85:24:68:41:c9:b6:b5:
ce:3a:60:9a:bb:4a:28:05:65:08:1d:5b:65:e2:6e:
94:5b:4d:53:43:92:78:e3:69:59:8e:6f:f5:a5:18:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8A:7F:3D:5C:36:0C:F6:AE:01:0E:D8:7E:2B:0D:9E:33:1E:A1:B0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sIp_PVw2DPauAQ7YfisNnjMeobA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:67:84:52:a2:7e:1d:7a:d0:fc:b4:78:29:a4:f1:0d:df:6d:
25:e8:e5:13:8d:9a:4f:9d:71:bd:00:8c:6b:4c:30:a3:ce:ab:
b3:f1:0f:80:89:74:e9:77:1b:f4:61:34:55:77:27:0d:f2:8e:
43:f7:8d:70:35:bf:f3:a6:69:6d:d5:5c:43:5b:ec:8c:dd:73:
69:9f:24:73:8b:29:e2:7a:e3:26:9b:74:55:8b:9e:9d:6a:c0:
ed:67:90:89:ea:d0:0b:6c:50:65:ed:53:00:4b:60:49:7d:f8:
1a:3f:a3:e5:aa:fb:95:02:88:92:fc:3c:9c:fc:6c:f8:33:a3:
b9:ae:43:1f:1c:47:08:b3:7f:18:e6:65:7d:33:50:fb:da:81:
f5:19:a3:3d:06:0d:93:97:ce:8d:96:de:1c:43:04:36:82:22:
6c:b7:04:28:3f:27:97:18:f7:cd:35:32:43:de:69:b7:0b:88:
e1:8b:42:c1:48:b1:15:c1:33:cd:4c:12:a3:78:e1:09:78:d7:
9b:fc:9b:75:59:d4:61:2d:dc:97:7e:47:9a:39:69:ab:c7:76:
48:46:a9:07:4a:fd:8f:6d:f1:6b:57:c5:35:56:74:73:a4:18:
6a:00:12:99:47:02:5d:bc:f0:5b:c3:c7:22:a3:97:47:e9:5c:
fb:2e:c1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:28:30 2025 by rpki-client