Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-csG6cXvDcoE_XL5lz2Sg83PZWs.roa
File: 1-csG6cXvDcoE_XL5lz2Sg83PZWs.roa (raw, json)
Hash identifier: IhIoXfZfVZkOxM976d2aACzrBsmCMyrV+uOH4+TcAPI=
Subject key identifier: F9:CB:06:E9:C5:EF:0D:CA:04:FD:72:F9:97:3D:92:83:CD:CF:65:6B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABCC711A0FA7D712EA6FF7CAAB994C5B3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-csG6cXvDcoE_XL5lz2Sg83PZWs.roa
Signing time: Fri 22 Sep 2023 12:04:37 +0000
ROA not before: Fri 22 Sep 2023 12:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:bcc6:ea4f/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:c7:11:a0:fa:7d:71:2e:a6:ff:7c:aa:b9:94:c5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 22 12:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9cb06e9c5ef0dca04fd72f9973d9283cdcf656b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c0:6a:70:84:97:4e:3f:c6:11:51:87:d9:72:
e8:a7:1b:c8:89:bf:c8:8b:06:04:de:f8:18:eb:70:
d9:8b:52:e6:f7:81:83:e9:0d:d4:63:08:c4:9e:cf:
33:68:42:89:49:ba:39:1c:9e:a5:af:67:f2:de:81:
f4:db:67:87:5f:e2:e1:27:47:01:3f:8e:b8:34:5a:
e3:b3:39:ee:d3:a2:27:b2:ac:17:17:98:f6:da:d8:
07:36:29:76:a5:6f:ae:35:69:9b:39:f4:ee:da:84:
0c:44:cb:55:be:d3:ff:90:ae:66:03:cd:ca:4a:84:
22:a3:a3:ae:3c:25:23:6c:b4:6c:4d:49:e4:4e:8f:
cf:a8:f9:7d:4f:62:13:63:a3:bf:b0:ca:dc:b1:42:
a9:ee:56:ff:44:8c:f3:7d:45:0b:ba:99:b2:0d:7e:
a0:da:13:9b:3a:bc:6d:9e:47:2c:4e:c5:04:8d:20:
2b:1e:3d:16:f0:06:f6:bb:fb:1e:e8:98:77:e4:1a:
ee:38:f3:cf:07:c3:c4:02:ec:62:a5:a6:66:15:cf:
6d:d1:ce:61:d2:7e:f8:12:3c:aa:b8:46:ef:40:5f:
26:19:27:56:e8:22:68:c6:d0:9e:94:54:e9:4a:e0:
09:ed:e7:c5:17:db:53:fd:2f:e6:cb:e9:68:f3:b6:
6b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CB:06:E9:C5:EF:0D:CA:04:FD:72:F9:97:3D:92:83:CD:CF:65:6B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-csG6cXvDcoE_XL5lz2Sg83PZWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:16:ea:8c:c9:cc:cc:70:41:6d:e1:45:e7:1b:e9:a6:7a:f3:
96:b0:0d:c9:6b:01:d9:ad:20:9c:f4:62:65:bf:e9:a3:78:4b:
cd:3f:92:f7:cf:6b:c1:15:cc:eb:a2:05:21:c8:1e:f6:dd:a1:
fb:42:15:67:8a:d7:19:4e:1c:31:e7:e7:ea:d8:d9:23:70:d9:
19:ad:82:20:df:f4:cc:8e:48:3b:96:35:c9:fc:5e:98:ae:2d:
7c:1f:43:88:e0:b8:98:26:b9:9c:78:ad:46:58:37:07:8a:f9:
ec:62:06:f7:ee:67:b5:3a:96:da:dc:60:b4:a0:96:0c:43:0c:
c3:27:05:e6:77:ed:f9:c0:71:b5:e6:22:77:78:8b:4f:ab:20:
ff:00:8a:c9:76:3c:ad:45:e9:f1:0c:d6:d9:2f:a0:4c:76:73:
0c:ee:c0:17:2b:87:c1:b4:d5:ef:c1:da:5f:7b:45:60:30:2d:
e5:93:68:dc:a4:22:d7:4e:be:94:28:d7:ae:d4:5a:81:f8:c2:
70:7f:c3:8a:2b:a3:5d:78:6c:a2:c1:49:cc:c7:bd:72:fb:6d:
8a:bc:24:5a:2f:74:3a:29:14:c0:a4:26:e4:01:00:bb:8b:26:
c0:73:b1:48:59:24:31:59:39:29:04:93:e5:8a:85:79:1f:1e:
67:8e:9a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:27:26 2025 by rpki-client