Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-S3EKyQumMMfi7XGvawTpYpW1FQ.roa
File: 1-S3EKyQumMMfi7XGvawTpYpW1FQ.roa (raw, json)
Hash identifier: k3iS7WZk9ySwdR0hqwBlun7VFlwoavTcN8f+d4Hc7ss=
Subject key identifier: F9:2D:C4:2B:24:2E:98:C3:1F:8B:B5:C6:BD:AC:13:A5:8A:56:D4:54
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9176FCCFFFADB112E6C62D6B86349F6E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-S3EKyQumMMfi7XGvawTpYpW1FQ.roa
Signing time: Thu 02 Nov 2023 19:16:15 +0000
ROA not before: Thu 02 Nov 2023 19:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:91:76:fc:cf:ff:ad:b1:12:e6:c6:2d:6b:86:34:9f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 19:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f92dc42b242e98c31f8bb5c6bdac13a58a56d454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e9:db:3a:67:0e:f2:0d:c7:d1:00:b3:38:f6:
02:e2:91:cf:c9:7b:df:e2:a6:15:a7:2a:11:5d:da:
0e:38:6c:dd:e1:3e:37:24:b7:28:e0:e3:0c:1e:8c:
81:f5:46:77:ef:cf:16:d2:82:b5:1b:70:6c:50:f6:
ea:82:4b:cf:1c:23:77:c8:20:d3:a6:ee:d3:4b:f6:
6d:80:de:7d:6a:72:75:62:fa:56:ca:d7:60:b6:a8:
51:65:3c:c4:2d:32:35:5e:8f:ad:31:cb:f3:d5:a1:
76:2d:a7:10:7b:35:94:b7:db:66:d7:68:4e:8c:c8:
82:4b:c6:ee:24:4b:57:a9:52:77:b4:c6:86:8d:16:
92:b8:fb:a6:27:f4:8d:52:9b:08:01:be:30:2e:ef:
eb:b5:7c:58:3a:67:58:d4:dc:45:7f:a4:37:93:21:
37:3c:24:80:b1:e7:f6:16:df:61:ce:09:3d:44:e3:
0e:8d:ae:4b:0e:b9:be:0c:bb:9f:2a:0a:d1:c9:12:
ae:98:16:fb:ce:66:eb:3c:a9:79:63:ce:5d:f8:c2:
4d:9e:78:07:02:0a:8b:67:bb:53:4d:5d:27:ae:6b:
35:76:2a:9d:1d:6b:07:d2:4f:b5:ea:b7:2c:a7:eb:
bb:82:24:0f:3c:93:fd:ea:f2:b1:55:70:8c:c8:13:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2D:C4:2B:24:2E:98:C3:1F:8B:B5:C6:BD:AC:13:A5:8A:56:D4:54
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-S3EKyQumMMfi7XGvawTpYpW1FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:73:b2:49:7c:0d:bb:e9:09:ad:6c:f3:0e:e1:37:bc:12:a2:
5e:60:da:b9:8d:9e:2b:b0:e2:b9:24:33:52:e6:39:89:4d:d8:
67:63:f3:8f:e3:5a:f0:69:7e:f3:3c:8e:70:71:0f:c5:5e:f9:
2c:f9:24:b8:18:77:ab:17:91:7c:f2:14:bd:62:53:a2:4f:4b:
7d:76:b2:50:a0:85:8f:35:3f:84:7b:75:d2:71:c8:59:ef:e7:
45:c6:77:37:ee:44:91:0d:54:e6:2e:e6:31:87:29:f4:79:02:
db:db:b1:bc:ee:06:5f:27:be:68:58:85:a1:c5:22:cd:13:4a:
cd:eb:e4:c9:97:2d:09:4b:c0:e7:db:66:7b:e5:a0:a5:ac:54:
5b:a5:df:25:b2:10:ca:72:0b:de:0b:33:94:46:5f:64:4d:67:
02:df:64:1f:c2:e9:51:09:52:9b:08:24:e7:36:8f:47:50:f7:
ce:5d:df:0e:64:4e:42:38:67:a3:45:4d:04:da:ef:9a:b5:bc:
9f:a6:56:7a:b3:74:0f:38:66:33:bb:89:89:6d:62:5b:3f:95:
26:a1:c6:92:d1:8b:8b:19:cf:4f:fd:98:06:00:1f:55:a0:e3:
bc:01:01:b1:14:ff:d8:cf:1b:7b:d2:74:88:67:ca:db:72:06:
64:48:8f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:36:29 2025 by rpki-client